Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/EkIXHzEZkdGbr4HBS-Af_FRYJr8.roa
File: EkIXHzEZkdGbr4HBS-Af_FRYJr8.roa (raw, json)
Hash identifier: z6XlXoIirpVSiMCTEi3W0OcDEhoTnurqumBmzG6ftqk=
Subject key identifier: 12:42:17:1F:31:19:91:D1:9B:AF:81:C1:4B:E0:1F:FC:54:58:26:BF
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01856FCBBDF9419B80BAFD7A127C60F14452
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/EkIXHzEZkdGbr4HBS-Af_FRYJr8.roa
Signing time: Mon 02 Jan 2023 00:05:01 +0000
ROA not before: Mon 02 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197091
IP address blocks: 217.11.136.0/22 maxlen: 22
217.11.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bd:f9:41:9b:80:ba:fd:7a:12:7c:60:f1:44:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 2 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1242171f311991d19baf81c14be01ffc545826bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:26:fd:df:e8:32:7b:e4:18:d4:c8:7c:bf:
10:a0:34:51:69:7d:a4:19:3e:da:b3:8b:0e:63:02:
77:1b:15:ec:cb:22:b4:8f:4f:81:b6:35:d7:d5:8c:
39:bb:75:ee:64:05:ea:2d:dd:14:5e:be:42:bd:0e:
25:1e:93:38:ae:6f:6c:a2:bd:af:d3:9b:4b:8b:d5:
33:bc:2c:ed:12:89:9c:88:c6:64:66:d5:0d:54:d5:
80:8a:d4:93:b4:2d:2c:c9:38:75:cd:60:cf:8b:5e:
bc:88:d5:97:d6:73:2c:d9:78:92:61:fe:f7:b9:c5:
4d:27:da:d0:ad:ea:f2:0b:64:bf:73:c3:e1:52:60:
96:ee:25:c4:55:0c:b4:f5:58:5d:d9:6c:64:d1:a0:
bc:ca:0b:fb:19:4a:4b:83:bd:0a:2b:dd:7a:32:1b:
b5:26:f7:59:22:07:a2:14:0c:8c:40:58:4e:31:36:
2e:1b:58:e8:45:10:d9:86:48:4d:2e:1f:42:24:04:
58:6a:f8:96:c7:ce:2d:80:91:70:e3:81:ec:76:83:
6d:a1:64:4e:86:31:cf:0a:f4:41:c5:cf:47:5f:91:
bc:56:5f:ff:77:07:eb:b3:83:da:d6:8b:25:64:76:
08:b6:fa:a6:97:c7:09:b6:d8:ba:c2:4e:13:48:8e:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:17:1F:31:19:91:D1:9B:AF:81:C1:4B:E0:1F:FC:54:58:26:BF
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/EkIXHzEZkdGbr4HBS-Af_FRYJr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:eb:36:69:42:03:ae:00:00:36:b2:23:35:51:53:99:65:bd:
73:5f:57:76:da:0b:9e:2c:e6:fa:3c:a2:57:02:6c:1d:be:9f:
8f:ba:88:c4:e3:21:6e:b3:57:db:49:80:b1:4d:91:e6:d1:0f:
ac:ac:be:a8:4f:29:76:8e:99:3a:c7:63:06:81:14:a3:77:ad:
6d:8e:f5:06:d0:eb:b2:81:3f:18:ce:50:0e:e7:f3:4b:5c:d6:
9d:70:fa:41:21:30:00:7e:b0:9d:11:b9:cf:8e:53:9d:46:eb:
6d:94:83:0d:41:a6:6a:61:a3:68:92:bd:a9:09:70:02:09:c8:
a7:7b:07:c2:c2:e5:dc:30:ec:72:69:0f:87:ed:46:56:4c:a0:
cb:8c:97:12:84:5a:df:47:1d:24:28:41:87:62:92:03:74:07:
61:5c:97:88:39:5e:65:9b:22:3c:97:44:8a:1d:45:96:1e:b2:
8b:73:9b:3e:c6:52:26:e8:7f:13:cc:79:5a:1f:41:fe:1a:f2:
93:d6:e3:70:87:9b:96:48:d0:aa:ac:20:47:c0:1a:1a:7c:8a:
22:47:f0:5e:7e:ce:60:73:4c:f2:5f:dd:78:82:f1:2f:4e:a0:
06:7d:96:84:f5:97:b1:1f:56:bd:d1:03:d4:53:b4:a6:6d:d1:
ae:46:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:01 2024 by rpki-client on console-ams.rpki-client.org