Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/1-ddeUY7xz5X8lUIEO6uaKaY8fC0.roa
File: 1-ddeUY7xz5X8lUIEO6uaKaY8fC0.roa (raw, json)
Hash identifier: hHnvOBfCNq8gBUU9A6p2J5VOxyEZQhic3IqjoBr7oC8=
Subject key identifier: F9:D7:5E:51:8E:F1:CF:95:FC:95:42:04:3B:AB:9A:29:A6:3C:7C:2D
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01856C1351CE55E5429D9FF61B4A4D991B13
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/1-ddeUY7xz5X8lUIEO6uaKaY8fC0.roa
Signing time: Sun 01 Jan 2023 06:44:43 +0000
ROA not before: Sun 01 Jan 2023 06:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 217.64.209.0/24 maxlen: 24
217.64.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:51:ce:55:e5:42:9d:9f:f6:1b:4a:4d:99:1b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 06:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9d75e518ef1cf95fc9542043bab9a29a63c7c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:75:8a:9e:58:3a:27:41:69:62:79:e7:2f:
1d:d5:b0:b5:65:b1:d4:04:27:43:64:99:e8:84:40:
11:40:21:c3:18:94:4a:3b:d5:9c:e0:91:ec:dc:0a:
b9:86:59:a5:6e:db:07:3c:8f:fe:b0:81:01:b7:67:
aa:f6:11:2c:8b:3f:fc:bf:3d:d1:b9:1a:d0:f0:3b:
6f:7f:d4:4e:17:e0:2d:ce:84:19:fe:d8:2b:85:e1:
a7:f3:d4:2a:42:a8:9c:59:cc:2f:66:94:51:90:c3:
1d:e1:00:f7:a7:fb:a3:8c:f6:7e:e4:82:88:68:f7:
b2:ed:85:9f:86:b4:32:d3:7f:f0:a2:f7:f0:c4:d4:
85:43:7e:ad:b2:f0:42:c3:d6:6e:49:07:a7:6e:89:
6d:9d:ff:63:5e:3b:37:9d:c8:04:a1:75:03:1b:a7:
54:44:a4:fc:a3:72:a7:5b:21:d0:45:c0:dd:bd:de:
f9:0b:0b:c2:b5:36:19:e7:a4:85:87:4b:40:89:56:
21:14:68:68:a7:13:2c:73:85:9e:65:8f:82:92:89:
48:43:d3:46:df:c7:ac:f0:f5:80:4a:59:2d:c8:63:
20:87:a0:8f:97:1e:39:d8:86:4d:a6:99:a7:d8:dc:
81:97:6a:a0:83:2a:f2:3c:9c:47:e8:a2:85:6e:fb:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:5E:51:8E:F1:CF:95:FC:95:42:04:3B:AB:9A:29:A6:3C:7C:2D
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/1-ddeUY7xz5X8lUIEO6uaKaY8fC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d6:0b:f2:c3:f0:d3:da:9d:72:23:94:1e:87:75:15:f8:8f:
69:be:be:bb:e1:34:23:cb:5c:93:f5:29:64:64:11:41:c6:c4:
5f:e1:2a:2a:67:50:b0:9f:a6:66:14:0e:3d:e2:5a:90:0a:46:
f4:72:2c:38:bd:96:e8:26:7b:d8:75:2a:34:19:45:df:56:96:
f1:10:c0:ec:51:53:d8:15:be:e5:0b:81:3c:0e:d5:e2:97:50:
6a:e5:e2:f9:a7:37:3f:87:13:b7:35:a6:5f:91:b9:5b:9a:e4:
cc:10:af:29:37:92:19:61:a3:0c:5a:f5:25:e0:8e:bb:06:af:
2a:0c:ec:65:44:3a:47:63:46:a1:e1:87:2f:6d:c8:c1:76:ab:
ed:9f:ad:4e:a9:0a:84:67:91:25:1b:b5:d4:84:46:aa:ab:f6:
a1:da:f1:82:01:5f:f1:d3:6b:87:90:ae:1a:e1:a2:66:ef:35:
a6:80:ee:6e:4c:83:be:3c:db:d5:55:83:71:a9:60:2d:30:6d:
1b:25:a7:80:29:83:c1:03:83:c9:1b:6d:98:2e:ba:84:2b:8f:
2c:6e:3d:8d:d2:b0:80:c9:7e:ee:45:3f:2b:01:b1:17:09:65:
47:40:4c:d4:f3:36:89:18:9c:f0:b7:a5:29:89:ed:cd:43:20:
d9:36:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org