Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7moHj46thviLqpjoN2joRizOU3U.roa
File: 7moHj46thviLqpjoN2joRizOU3U.roa (raw, json)
Hash identifier: LFh6btY3BuO6Qax/jMuBVScP/htxxFcm4R7aL/D8aOk=
Subject key identifier: EE:6A:07:8F:8E:AD:86:F8:8B:AA:98:E8:37:68:E8:46:2C:CE:53:75
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018BAA06DB9C73EC61F1E1D7109729D0ACAE
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7moHj46thviLqpjoN2joRizOU3U.roa
Signing time: Tue 07 Nov 2023 13:44:17 +0000
ROA not before: Tue 07 Nov 2023 13:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206728
IP address blocks: 217.196.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:06:db:9c:73:ec:61:f1:e1:d7:10:97:29:d0:ac:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Nov 7 13:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee6a078f8ead86f88baa98e83768e8462cce5375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:f4:69:01:b8:fe:46:e6:e2:f5:65:72:29:
e2:05:98:d5:46:8e:31:5e:a9:b8:09:b8:b8:d6:35:
c6:3b:27:44:d5:06:09:20:ee:35:bc:fd:c8:89:92:
b2:94:7b:17:e6:66:79:35:fc:df:e2:1d:d2:b9:5f:
78:ca:bb:a9:30:82:89:e5:5a:19:bd:35:36:6b:af:
33:4f:74:6a:a1:5b:ad:c4:bd:c2:d6:05:18:ae:8b:
8a:85:d5:75:46:56:0f:45:63:e0:ed:b9:6e:a6:6b:
cc:34:2a:a4:f1:27:41:65:86:f9:28:f8:ea:d2:14:
eb:7b:4f:78:bf:76:f5:3d:cb:6b:68:be:4f:1a:c8:
15:2a:1d:a8:d2:48:21:7a:9c:28:fc:39:21:35:f1:
f5:08:ac:0c:a8:86:08:fd:94:ba:51:05:3b:cc:ba:
f4:4c:e5:3b:ba:88:08:94:d0:e6:f3:bc:9a:66:57:
3a:d4:81:79:66:8a:9e:1e:49:c8:73:fd:1b:44:ce:
b4:f4:23:0e:ff:83:e7:75:46:87:92:be:32:81:73:
7a:81:0e:db:24:a7:b4:d3:4f:c9:8e:92:2f:2e:a5:
7c:4e:7e:78:36:8e:39:99:7c:6a:b2:8e:9e:c1:73:
ef:47:cd:6d:db:72:1c:aa:a7:b8:be:8b:90:2d:dc:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:07:8F:8E:AD:86:F8:8B:AA:98:E8:37:68:E8:46:2C:CE:53:75
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7moHj46thviLqpjoN2joRizOU3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bb:be:57:d5:3b:38:1d:78:6a:11:4f:92:3a:fc:03:7a:10:
f4:f6:d2:4b:17:36:d7:50:a1:53:dc:3b:6d:ec:bf:93:ef:f6:
76:79:5e:2e:7e:30:da:6f:44:0e:37:16:1b:99:c9:8a:a6:bb:
a6:25:32:16:56:2a:81:76:61:14:68:46:1b:aa:e7:e9:0f:f7:
44:d2:68:48:50:7a:2f:ae:97:f3:42:4a:e2:04:3e:59:a6:d9:
ab:27:c5:9d:41:9f:c7:40:34:0f:25:7c:11:3f:43:e3:99:86:
6b:c7:8b:3a:88:56:56:24:78:86:15:97:fa:ab:65:d3:37:9a:
64:7a:d0:d7:2c:9e:bf:f4:f8:94:77:96:6a:35:c5:3c:c3:79:
cc:bc:f6:34:85:7a:85:0c:01:31:90:03:89:8d:90:4b:cf:4b:
dd:d9:f5:6d:4a:e8:64:3a:b3:5b:64:91:b9:3f:a5:73:45:06:
f8:9d:c5:3f:3e:8a:1e:12:87:89:26:54:88:1b:94:ab:2c:f7:
d1:6c:a5:ef:6f:db:76:a5:36:c1:fd:ea:94:4a:e2:0e:47:f1:
87:d2:a4:3f:21:5b:1d:58:a5:c9:43:14:30:5d:95:4e:4a:10:
35:1b:84:19:5a:3e:e2:f7:0d:69:4b:03:28:46:01:80:ed:70:
e3:6d:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org