Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/NkJ4b0fqvwGEIrXtEdEIUSaGmiI.roa
File: NkJ4b0fqvwGEIrXtEdEIUSaGmiI.roa (raw, json)
Hash identifier: k3ZTDSQ+tzQfKVkTwwz6414ihQ8ysSwPjTxlr0dFKlw=
Subject key identifier: 36:42:78:6F:47:EA:BF:01:84:22:B5:ED:11:D1:08:51:26:86:9A:22
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01856C135281EC46FD74BED3344974EF163E
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/NkJ4b0fqvwGEIrXtEdEIUSaGmiI.roa
Signing time: Sun 01 Jan 2023 06:44:43 +0000
ROA not before: Sun 01 Jan 2023 06:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29189
IP address blocks: 217.64.208.0/24 maxlen: 24
217.64.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:52:81:ec:46:fd:74:be:d3:34:49:74:ef:16:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 06:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3642786f47eabf018422b5ed11d1085126869a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:34:7a:e8:bb:15:0c:d1:30:ec:9c:4a:35:
34:e0:f8:35:3f:9c:34:9a:e0:97:15:ef:bb:62:bb:
dc:38:ec:d8:a7:b1:48:d7:01:1d:d9:1f:b3:17:13:
d2:a6:bb:88:16:8b:d0:7b:c4:29:31:fe:4c:dd:a9:
73:05:85:cb:9a:6b:fc:ee:ff:de:34:a4:90:34:57:
38:ca:b8:c9:f5:e6:72:84:83:a3:1d:9a:28:03:28:
56:01:c9:0e:70:c2:c6:a4:a1:f4:5e:f6:25:b4:63:
78:44:eb:f9:8b:c9:ae:58:14:96:d6:e9:8c:f9:e2:
5a:f1:79:67:32:77:07:c2:b6:e6:7f:34:73:41:d8:
8c:01:7c:d5:00:48:df:90:0f:27:18:7e:2f:c2:bd:
4a:d2:0d:73:86:c2:86:d9:ee:29:b9:88:e5:34:ad:
03:3f:14:bb:b4:63:bb:42:25:d6:48:2c:45:90:56:
53:24:93:c5:d9:da:90:be:07:c6:6c:45:73:fd:de:
61:61:d8:9e:81:50:49:68:20:4f:b3:95:89:ce:0f:
c6:1d:1c:e7:15:c5:2f:99:bf:4e:80:f6:b4:fa:d0:
fc:26:1b:72:7a:de:ee:63:4d:c3:d1:5a:87:cf:d3:
0d:c5:53:4b:d7:a2:e3:5b:6d:41:c1:cb:25:d9:12:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:42:78:6F:47:EA:BF:01:84:22:B5:ED:11:D1:08:51:26:86:9A:22
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/NkJ4b0fqvwGEIrXtEdEIUSaGmiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
62:9c:d6:62:0b:97:16:53:e1:bf:1a:38:1f:80:a1:d7:fc:81:
2d:4b:f9:32:4e:79:9f:49:98:c9:97:6d:50:b8:35:3d:41:b3:
f6:60:a0:d7:57:28:04:e5:06:bd:fc:9c:35:5a:0e:dc:98:49:
11:07:1a:9e:0d:b5:94:86:64:18:4f:82:00:21:0a:31:f0:1c:
8b:01:ea:6e:fa:13:61:22:38:ba:b1:13:05:e0:f0:40:0a:05:
60:73:53:09:2d:96:f7:49:21:d9:3d:6a:ea:26:d5:e8:e0:1d:
89:a2:97:22:4b:82:70:7a:c4:98:a0:3f:68:e2:b9:bb:94:67:
b9:75:5c:16:2e:e9:1f:1f:c8:48:c2:64:44:d3:1a:1c:cf:9f:
70:3b:e1:6f:cc:38:f7:7c:f0:dc:a6:37:c5:0a:60:21:cf:f2:
30:10:f5:e2:41:9f:39:a3:0b:16:d6:be:28:0a:2a:3e:56:c2:
9c:78:74:13:89:b7:e7:aa:81:e1:4a:8b:11:f5:aa:56:06:33:
de:19:34:fe:bc:50:df:dc:58:82:63:b1:d4:8f:e1:08:bc:ea:
e0:e0:75:08:44:36:8e:dc:7c:e2:17:dd:ea:1e:59:0d:9b:50:
86:8b:14:10:49:1c:a8:06:90:1a:aa:48:a6:a2:8b:29:0a:96:
54:11:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:06 2024 by rpki-client on console-fra.rpki-client.org