Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/hrRDJexHORo814S7eaCLV7d3Pw8.roa
File: hrRDJexHORo814S7eaCLV7d3Pw8.roa (raw, json)
Hash identifier: NZ/k+h07stkfPQd2kZypHoyQj1sW2PvdQ4kJyMy/apU=
Subject key identifier: 86:B4:43:25:EC:47:39:1A:3C:D7:84:BB:79:A0:8B:57:B7:77:3F:0F
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 018CC3B718CBAF69CADE0FD9EB5A4E465099
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/hrRDJexHORo814S7eaCLV7d3Pw8.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29189
IP address blocks: 217.64.208.0/24 maxlen: 24
217.64.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 12:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:cb:af:69:ca:de:0f:d9:eb:5a:4e:46:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86b44325ec47391a3cd784bb79a08b57b7773f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:ab:1c:7f:0a:59:2d:1a:b0:ba:40:63:bb:
c7:65:07:90:1c:fa:71:e5:81:65:76:d9:88:1b:12:
1a:46:dd:cc:73:e5:05:43:b1:9f:d4:51:8e:f8:b9:
8e:c1:cd:dd:1f:c5:45:1f:3b:96:88:51:f0:65:63:
a5:a4:6f:ce:66:57:5e:2d:7d:84:6d:bf:cc:42:32:
70:47:4f:69:1a:44:e4:03:92:a3:5b:b9:23:76:21:
29:e6:91:a8:07:05:71:ca:77:6e:5c:87:9c:65:60:
14:59:fc:78:f0:64:75:4a:ee:9a:66:03:7f:4b:62:
19:cc:ce:46:1a:c5:f9:6e:71:53:56:6f:35:f8:1c:
3f:a9:30:3a:42:71:96:7b:67:98:f3:39:d7:8f:50:
82:52:57:b7:ba:37:b2:3d:59:cc:16:44:0a:52:e3:
ed:25:05:64:b5:db:d2:9e:d1:a1:a4:2e:49:f6:06:
47:74:c4:ed:f4:72:13:cc:f5:74:87:a7:bf:98:a1:
4b:81:fd:cf:ad:48:99:51:bd:53:ed:b0:1d:ea:ab:
af:7b:26:37:53:0d:a4:71:aa:28:0f:8d:8f:e3:ab:
e3:f6:d0:ba:99:64:86:03:bf:59:fb:ff:d6:c1:86:
98:a1:cb:3b:b0:74:92:e7:ee:9a:bb:4c:73:aa:db:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B4:43:25:EC:47:39:1A:3C:D7:84:BB:79:A0:8B:57:B7:77:3F:0F
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/hrRDJexHORo814S7eaCLV7d3Pw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f9:09:cc:1b:34:23:82:d3:60:92:78:22:33:e4:89:00:59:
ee:db:08:b5:85:28:bc:1b:9b:c8:0a:fe:5b:52:ae:16:c3:64:
34:81:7d:28:bd:26:45:bc:30:79:37:d1:46:c0:7c:65:b0:a3:
72:e4:60:43:5d:29:59:8a:82:20:b7:b9:90:5b:b8:49:90:4f:
18:1b:5e:62:f8:5d:0a:c2:59:70:e2:46:72:1d:1e:42:75:cc:
6c:3a:0d:06:30:16:8a:98:31:05:3a:33:ac:3b:51:3f:c4:91:
61:03:82:6c:3c:a0:cd:4d:7f:f4:c9:22:2c:e2:2e:99:a3:3e:
4b:8b:bf:fd:e1:8d:a3:e0:53:39:ca:12:b4:f4:3e:ce:4d:a8:
45:2e:88:5c:98:79:cc:67:38:79:3b:50:ef:11:44:47:0f:6d:
c8:c5:30:88:27:a3:29:46:09:9c:7e:6a:dc:6d:a9:ed:27:c4:
e0:81:20:4e:ce:6c:28:d5:38:d7:81:c3:97:59:d3:da:b3:97:
9a:5b:29:3f:5e:de:2d:cf:29:c2:d2:6e:97:e1:68:21:95:80:
12:83:3e:26:6f:8a:12:f7:18:1a:77:ee:a9:3f:e1:84:94:75:
1d:bc:5a:f8:f4:65:1f:56:42:3f:a3:d7:2d:0d:4c:05:92:c0:
8d:bc:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org