Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/UDIPuIl8gC227TX8Oc5u3ydJ7s4.roa
File: UDIPuIl8gC227TX8Oc5u3ydJ7s4.roa (raw, json)
Hash identifier: LLJ8z+T8QPPvCp7kuJqTYm5yvLrjAuECCp4ISGCGX00=
Subject key identifier: 50:32:0F:B8:89:7C:80:2D:B6:ED:35:FC:39:CE:6E:DF:27:49:EE:CE
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 018DAFC68EE7F6D3852E209C473D65410F1F
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/UDIPuIl8gC227TX8Oc5u3ydJ7s4.roa
Signing time: Fri 16 Feb 2024 02:37:21 +0000
ROA not before: Fri 16 Feb 2024 02:37:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 217.147.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 17:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:c6:8e:e7:f6:d3:85:2e:20:9c:47:3d:65:41:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 16 02:37:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50320fb8897c802db6ed35fc39ce6edf2749eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:0d:d1:9e:b6:18:5c:95:65:11:a5:7f:c9:
fd:78:b1:3a:85:b4:74:e0:09:81:21:97:c6:07:3f:
8e:e6:5c:bd:24:03:32:e7:4a:08:0e:b9:39:ef:e5:
0c:a2:64:05:46:a7:6c:79:6b:e6:c6:76:77:6d:9a:
19:a4:5f:71:94:ec:4a:9c:f3:9b:c0:87:c4:00:c5:
ac:c5:f7:5d:c9:57:bb:3c:89:cb:01:a5:57:11:ad:
9a:e4:cc:87:21:3b:30:7c:fc:02:9a:bc:ff:d8:cc:
e9:9d:b2:1a:bf:d2:fa:29:48:41:7c:c1:74:ff:19:
6e:14:29:ec:d8:a1:ec:37:fe:0a:af:e3:7f:68:19:
a9:fe:8b:ae:3f:ca:05:d2:45:91:9c:57:67:88:ee:
a2:d1:fc:b1:ac:f5:e8:c8:ef:1c:8f:9f:15:d3:75:
99:60:6a:5c:b0:92:8e:d0:08:dd:aa:c2:8a:24:8b:
db:60:c8:f6:6d:ac:74:65:d4:10:c1:ed:36:80:3e:
49:a4:5b:9f:5f:8f:07:c3:6b:99:b3:2e:66:63:d3:
e1:e7:a2:3e:20:8c:f1:c9:32:04:41:c9:dc:ed:61:
18:fb:d9:d5:4f:53:ad:0e:00:de:41:33:4f:4d:03:
1d:18:c5:69:26:8e:63:32:3c:76:53:7b:7e:53:cc:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:0F:B8:89:7C:80:2D:B6:ED:35:FC:39:CE:6E:DF:27:49:EE:CE
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/UDIPuIl8gC227TX8Oc5u3ydJ7s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e6:a1:89:ee:da:dc:c5:58:52:b6:a2:89:74:42:05:6d:eb:
04:31:e5:8b:b3:0d:89:ed:24:27:b5:3e:e1:ce:4a:c0:f3:0d:
e2:a6:44:19:38:e3:f4:4d:0d:f6:5b:81:20:ad:22:78:ed:5d:
17:22:75:a9:e2:db:4c:6b:fe:6b:45:1a:c1:bd:3d:83:00:78:
4a:ff:a5:6c:84:e4:c5:3f:26:1f:74:cd:6c:c0:13:c8:b1:64:
de:76:e7:c0:45:c6:5c:0e:63:be:7b:7f:2f:82:44:17:7d:5b:
e5:33:88:9e:b1:93:9b:d8:a7:d8:63:fd:fc:ad:59:f9:a0:1b:
34:47:2e:c2:c3:a4:96:ee:7c:f6:2e:b6:65:dd:2f:a8:8b:1a:
04:07:71:fd:50:1d:e4:31:a8:f6:4d:75:51:2b:f6:77:ea:f4:
93:b5:3f:b5:ec:f0:53:e0:03:bf:4f:44:73:c0:86:7c:39:02:
b4:03:23:31:38:59:0f:2e:ca:a4:79:2b:74:a9:27:4e:b6:7e:
dd:4f:d1:e1:67:fc:33:ab:9e:67:cc:9e:bc:63:bc:47:7b:92:
69:b4:c4:b1:cc:a5:5d:d8:bc:df:54:d8:df:d1:a8:60:a0:b8:
47:05:41:0c:57:02:fb:05:2f:31:94:77:77:88:5a:2c:4f:85:
79:42:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:52 2025 by rpki-client