Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eXK-u_gJ33K7d242DOq0zOuihQo.roa
File: eXK-u_gJ33K7d242DOq0zOuihQo.roa (raw, json)
Hash identifier: HRTIUIRzhVWEeKlROSKjiJhwz2qx9IORFudsWVfhIsY=
Subject key identifier: 79:72:BE:BB:F8:09:DF:72:BB:77:6E:36:0C:EA:B4:CC:EB:A2:85:0A
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6647F6D756D542E6DCFA60C4ADE2DC
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eXK-u_gJ33K7d242DOq0zOuihQo.roa
Signing time: Sun 01 Jan 2023 12:54:57 +0000
ROA not before: Sun 01 Jan 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61054
IP address blocks: 217.112.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:47:f6:d7:56:d5:42:e6:dc:fa:60:c4:ad:e2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7972bebbf809df72bb776e360ceab4cceba2850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:9c:38:94:2c:37:00:d4:14:39:e7:22:87:
71:72:69:92:fa:bf:0e:c6:e8:72:65:cc:00:e3:0a:
a2:66:79:d7:6c:54:9f:1f:ea:31:80:67:ad:9d:63:
ac:b8:29:57:5b:64:1f:58:91:19:d5:92:b1:40:4a:
09:b5:48:3c:e0:2c:21:9e:88:f3:86:47:b5:ba:83:
2b:a5:1f:89:75:ce:68:9a:3d:9d:f9:a4:51:0d:5b:
eb:8d:86:f2:b8:5e:3d:26:34:62:1e:6b:f4:07:ee:
b0:08:da:8d:3e:49:9f:03:32:68:ff:54:6c:37:9f:
64:d1:6e:22:e8:62:26:26:da:20:48:96:ea:20:7a:
81:16:74:84:57:16:1f:14:eb:55:78:10:79:72:c8:
e8:96:e0:c0:e0:d2:b7:21:da:bc:12:45:ad:40:d8:
44:20:bb:50:ee:d4:dd:a8:74:eb:f5:1d:f1:a6:39:
fe:fa:d1:48:2b:d7:82:ef:6c:fa:5f:22:7e:15:e0:
ed:75:b6:ce:71:5f:f8:c4:dc:ec:f2:c0:23:ad:6f:
3e:86:92:67:ce:81:3f:8e:69:b9:d1:5e:2b:57:14:
30:6a:65:22:a2:36:d5:7c:5c:85:73:2f:59:7f:5e:
8a:95:1b:c0:62:12:8a:80:51:0a:6c:56:91:9e:16:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:BE:BB:F8:09:DF:72:BB:77:6E:36:0C:EA:B4:CC:EB:A2:85:0A
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eXK-u_gJ33K7d242DOq0zOuihQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.112.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:74:90:e8:d8:ba:34:55:4f:a4:61:55:aa:11:02:ba:70:78:
d5:95:c6:96:40:36:3d:57:84:44:ed:4e:18:98:e5:0f:c8:9d:
e9:95:18:9d:4d:90:19:93:77:59:58:55:c7:3c:f8:1e:f0:3c:
a9:a6:60:cd:c5:39:7f:3b:f0:4f:ac:3c:78:ab:4c:e8:ad:36:
75:05:26:d6:4a:bd:c8:89:a2:66:48:21:5d:cf:b2:03:ad:cf:
87:fb:07:32:c5:57:f1:4e:7a:5a:df:ee:a7:ca:c0:30:69:7d:
24:28:f4:95:d9:38:00:82:e0:47:1a:d9:1c:60:10:f2:f0:15:
6f:e5:a7:bf:9e:7d:12:64:6e:96:99:c8:0c:ea:41:26:c2:ed:
e6:62:dc:2f:26:ec:1b:7e:e2:86:5c:9b:64:ee:f4:77:fb:e8:
b0:43:c9:c8:6d:12:d7:de:0b:59:57:63:4d:55:c8:60:15:73:
89:3b:59:9b:7b:c5:6d:40:1d:29:4e:e6:34:59:f8:5d:e9:75:
9a:21:a7:93:4d:44:76:a6:7a:7e:79:1c:2d:89:33:92:1e:89:
80:66:dd:23:9b:50:56:9a:ad:9d:8e:e9:96:b9:0f:9b:42:b4:
5b:f4:59:09:cb:42:ae:c9:78:db:2c:d2:f6:a7:04:af:4e:c9:
45:17:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org