Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Chtlx5KG0j_mlS-Xq9vWjHxBAA0.roa
File: Chtlx5KG0j_mlS-Xq9vWjHxBAA0.roa (raw, json)
Hash identifier: 1LmXqY8hNLKlQsQXgNc9ampEXN5Sk092tTshS27GMlg=
Subject key identifier: 0A:1B:65:C7:92:86:D2:3F:E6:95:2F:97:AB:DB:D6:8C:7C:41:00:0D
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018CC56E636371522FC16C90A03EE8951D40
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Chtlx5KG0j_mlS-Xq9vWjHxBAA0.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 217.196.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 14:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:63:63:71:52:2f:c1:6c:90:a0:3e:e8:95:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a1b65c79286d23fe6952f97abdbd68c7c41000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:bd:71:08:7b:f8:31:ee:de:23:7b:69:15:
65:50:9f:32:46:21:73:4f:67:ca:25:19:a0:72:96:
ba:5f:67:25:1b:87:41:68:b3:8a:74:85:3d:2d:10:
37:82:80:3f:e5:80:92:0a:f2:b8:47:15:fa:77:09:
b3:5a:8c:48:96:e5:36:0d:55:6f:16:6d:a4:cd:bd:
6f:ac:8a:0e:f7:de:70:5c:a5:ba:dd:b1:90:2c:a1:
11:2a:25:5f:e8:01:0f:8e:d4:b5:42:28:e6:80:57:
6f:ec:53:44:ee:8d:54:2e:31:27:52:7d:de:ab:8b:
18:9b:0d:40:c9:8a:fc:25:f9:c7:50:19:2a:c5:f4:
75:ce:f3:1d:43:56:4c:d3:a1:94:2c:e6:6f:d2:b6:
c3:59:8c:65:4f:59:3a:c2:6e:3a:cb:68:39:bd:c7:
60:db:db:99:a7:4a:14:79:2c:12:b9:ac:55:65:f9:
6b:88:fa:d3:75:85:68:cd:13:0e:df:46:f8:58:36:
8e:9b:d2:e8:04:3a:e5:b0:6a:67:f5:10:cb:34:57:
59:69:1b:01:98:0d:33:03:fd:78:68:c7:27:3c:c8:
79:e3:70:e6:68:b1:95:62:8f:35:3d:4c:56:e8:c0:
fe:0b:51:50:66:61:28:13:03:d2:73:07:b4:4e:7b:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:65:C7:92:86:D2:3F:E6:95:2F:97:AB:DB:D6:8C:7C:41:00:0D
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Chtlx5KG0j_mlS-Xq9vWjHxBAA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.96.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2e:ce:68:77:31:59:ba:d9:85:9c:68:01:80:f7:1b:27:39:
af:ea:02:18:6d:89:6b:e6:06:5d:c8:d5:f9:ae:74:fb:b0:8c:
8f:dd:b3:d4:c5:09:52:d5:77:b6:d5:5e:a6:1a:d7:48:79:e0:
79:cf:ea:74:1e:a1:8a:0a:4a:c0:2f:97:7f:07:c7:e4:84:30:
fb:76:c0:19:a5:d4:df:11:39:ed:99:fa:df:6a:92:2e:2f:32:
39:1e:97:a1:de:da:23:6d:50:67:50:b5:06:00:94:11:2d:d2:
f1:b3:bc:9e:26:76:fe:64:a4:aa:93:0c:7e:56:63:d9:bc:f0:
45:7c:e8:7f:9e:2f:e2:03:e9:c6:fa:dd:fa:83:c8:19:10:da:
d7:36:87:e1:86:50:07:88:a7:3c:cb:23:1b:8c:45:ef:cf:97:
71:f1:7d:bb:d2:3c:aa:c1:2d:e2:69:4f:d7:03:a7:3f:58:f1:
9c:88:ca:bc:b9:b2:94:e3:49:54:b5:7c:a9:b7:ba:1e:5d:b7:
ed:b2:33:78:89:3b:3f:fd:e4:32:5f:52:41:55:5b:16:f1:db:
e2:74:c1:00:bd:4f:40:85:11:95:2a:3f:eb:1e:77:e8:3a:ca:
91:f5:11:2d:01:7b:66:0f:bf:c3:d8:7f:a3:d9:a5:0e:f1:34:
be:0b:f5:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbmNjcVIvwWyQoD7olR1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjQwMTAxMTQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTFiNjVjNzkyODZkMjNmZTY5NTJmOTdhYmRiZDY4YzdjNDEwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnG9cQh7+DHu3iN7aRVlUJ8yRiFz
T2fKJRmgcpa6X2clG4dBaLOKdIU9LRA3goA/5YCSCvK4RxX6dwmzWoxIluU2DVVv
Fm2kzb1vrIoO995wXKW63bGQLKERKiVf6AEPjtS1QijmgFdv7FNE7o1ULjEnUn3e
q4sYmw1AyYr8JfnHUBkqxfR1zvMdQ1ZM06GULOZv0rbDWYxlT1k6wm46y2g5vcdg
29uZp0oUeSwSuaxVZflriPrTdYVozRMO30b4WDaOm9LoBDrlsGpn9RDLNFdZaRsB
mA0zA/14aMcnPMh543DmaLGVYo81PUxW6MD+C1FQZmEoEwPScwe0TnsXpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAobZceShtI/5pUvl6vb1ox8QQANMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvQ2h0bHg1S0cwal9tbFMtWHE5dldqSHhCQUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cRgMA0G
CSqGSIb3DQEBCwUAA4IBAQBwLs5odzFZutmFnGgBgPcbJzmv6gIYbYlr5gZdyNX5
rnT7sIyP3bPUxQlS1Xe21V6mGtdIeeB5z+p0HqGKCkrAL5d/B8fkhDD7dsAZpdTf
ETntmfrfapIuLzI5Hpeh3tojbVBnULUGAJQRLdLxs7yeJnb+ZKSqkwx+VmPZvPBF
fOh/ni/iA+nG+t36g8gZENrXNofhhlAHiKc8yyMbjEXvz5dx8X270jyqwS3iaU/X
A6c/WPGciMq8ubKU40lUtXypt7oeXbftsjN4iTs//eQyX1JBVVsW8dvidMEAvU9A
hRGVKj/rHnfoOsqR9REtAXtmD7/D2H+j2aUO8TS+C/XS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org