Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sjvj2JqjGcA5Fxy4_-P2Iv2jRcQ.roa
File: sjvj2JqjGcA5Fxy4_-P2Iv2jRcQ.roa (raw, json)
Hash identifier: PoApZUI94bpNhLlDmkxbPfydlZaQdULOV1QfEQQOJYQ=
Subject key identifier: B2:3B:E3:D8:9A:A3:19:C0:39:17:1C:B8:FF:E3:F6:22:FD:A3:45:C4
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 018D420A8D43C7DF13C754CE7AAB6406FBCE
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sjvj2JqjGcA5Fxy4_-P2Iv2jRcQ.roa
Signing time: Thu 25 Jan 2024 19:13:24 +0000
ROA not before: Thu 25 Jan 2024 19:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 176.97.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 09:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:42:0a:8d:43:c7:df:13:c7:54:ce:7a:ab:64:06:fb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jan 25 19:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b23be3d89aa319c039171cb8ffe3f622fda345c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:19:2a:52:e6:58:28:bd:fc:7e:4e:e2:c6:
c5:d4:37:e1:23:f6:13:02:e0:65:bf:59:48:c1:1b:
74:e1:d2:5b:a6:4d:12:0c:89:94:a9:0e:c8:df:46:
ad:51:9e:80:20:02:54:05:94:9b:12:37:44:1a:b4:
e1:52:cb:fe:67:70:56:1c:9e:1d:21:0b:5c:65:0f:
7d:1e:cd:c6:13:f5:c0:68:4c:a5:76:e2:bd:01:7b:
1c:3f:23:10:ce:da:c9:2a:ca:27:d9:c7:73:d0:b4:
1c:21:10:6b:33:9e:45:ec:ad:bf:f0:91:e9:1c:ab:
17:b1:ee:cd:af:ed:02:f2:5f:9f:b3:3b:bd:3c:2c:
b1:60:f3:26:27:6f:c5:df:71:65:a4:3d:44:5a:b7:
64:e0:f6:6e:e3:af:95:30:6d:97:1d:2b:ff:50:a6:
67:3a:0a:50:73:1f:86:24:7f:55:f7:4d:3d:84:67:
01:fb:73:3c:c9:82:d8:17:90:7f:ce:98:60:4b:8f:
c7:fd:6f:52:f9:40:e1:fc:a2:4f:57:64:29:ad:ce:
d4:44:68:af:ea:be:66:b3:b9:54:f9:17:54:03:d8:
3d:b3:70:35:01:27:e0:1d:3c:df:59:a8:18:71:3f:
cb:1d:56:dc:fd:1e:0c:5f:a1:35:c2:fc:c6:cd:44:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3B:E3:D8:9A:A3:19:C0:39:17:1C:B8:FF:E3:F6:22:FD:A3:45:C4
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sjvj2JqjGcA5Fxy4_-P2Iv2jRcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:50:4e:cc:6a:09:30:d5:ab:aa:9b:d5:10:c9:7e:6e:f9:89:
c0:b4:94:68:35:13:a5:23:af:14:f6:cb:bd:78:28:23:8e:5b:
1c:16:e3:09:e2:e7:06:e9:6f:70:7e:fc:66:e7:5e:12:df:4a:
67:60:6a:64:af:05:7c:3f:6c:a0:11:50:03:a3:25:e2:e9:25:
c5:5f:e4:cb:9a:dc:c2:23:fe:55:72:bc:16:aa:f0:e9:e0:dd:
0d:b3:fc:f1:f6:ff:a3:2c:a6:0d:25:02:be:46:f8:32:82:15:
f0:79:6f:af:22:d3:17:84:e0:59:65:af:a9:f2:6d:47:e8:ad:
5c:3a:29:a3:9c:ef:6a:cd:8b:49:e5:c8:21:74:4c:e8:4f:12:
e8:f6:7f:eb:8d:c3:33:20:ef:0a:68:8f:59:a8:e5:1c:e8:89:
21:47:af:66:b1:c6:55:58:9d:90:69:58:60:1f:28:3d:50:5e:
80:36:b2:97:83:b5:25:5f:2e:77:93:09:a5:38:3a:a2:86:9d:
94:75:40:5d:b1:31:77:a2:b3:e7:21:e5:ce:2d:ab:d4:12:62:
94:0d:1d:cc:15:22:76:9e:ce:ca:f3:1e:2a:32:0c:1b:28:65:
10:1e:59:80:c7:5a:bf:d3:3a:82:a0:73:fd:b1:af:c1:36:bb:
2f:cb:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:05 2024 by rpki-client on console-ams.rpki-client.org