Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/EbDouD49jRAYPssrplTD1crSTgY.roa
File: EbDouD49jRAYPssrplTD1crSTgY.roa (raw, json)
Hash identifier: WDBRmo+SeWPFhTz7cwSF01YPCWSEOFR3+znjKzmDmok=
Subject key identifier: 11:B0:E8:B8:3E:3D:8D:10:18:3E:CB:2B:A6:54:C3:D5:CA:D2:4E:06
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018C402A2E0A9B1C689A0327EBD7160535FA
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/EbDouD49jRAYPssrplTD1crSTgY.roa
Signing time: Wed 06 Dec 2023 17:25:55 +0000
ROA not before: Wed 06 Dec 2023 17:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207957
IP address blocks: 217.196.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:2a:2e:0a:9b:1c:68:9a:03:27:eb:d7:16:05:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Dec 6 17:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b0e8b83e3d8d10183ecb2ba654c3d5cad24e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:6f:16:8c:63:cf:56:43:03:74:6d:7e:f0:
8c:81:94:f8:90:4a:31:96:16:4a:02:4e:cb:43:b5:
47:b0:f0:97:e4:2a:d8:ae:af:80:0a:5a:39:97:82:
0e:82:fc:ad:c7:59:6f:5a:72:1a:84:32:08:2e:54:
31:09:ac:0e:c8:7a:19:13:35:d5:17:3b:01:fc:df:
f1:00:9f:1a:6c:1b:d7:5b:69:f7:d8:59:8d:11:9c:
ee:ab:b3:4b:bb:3d:56:e1:95:88:48:2c:bd:8b:f4:
78:29:ba:c1:39:ec:db:8e:f9:0e:f3:09:90:b1:f4:
a3:f4:2d:66:aa:df:ce:16:64:d4:2a:c9:75:e7:50:
56:c5:41:17:23:28:3d:ed:e1:09:05:9f:33:f6:e9:
0e:31:3c:ff:c6:bb:51:98:cc:c7:b7:27:6f:be:c7:
9e:62:6b:10:0e:5a:fa:88:bd:20:f9:b5:0d:64:19:
49:57:96:c3:2d:48:1b:46:ad:14:65:85:bb:3d:f1:
4b:47:30:87:f9:7c:78:b2:79:59:a9:ac:23:76:82:
f8:f7:38:fe:2d:18:95:76:be:b2:fd:59:ba:01:cf:
2e:07:c5:f7:ab:40:b8:33:84:f4:45:4e:42:a1:e8:
8b:e6:bc:e7:3b:50:df:ff:c1:c7:2f:50:6d:7a:ab:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:E8:B8:3E:3D:8D:10:18:3E:CB:2B:A6:54:C3:D5:CA:D2:4E:06
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/EbDouD49jRAYPssrplTD1crSTgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:27:a6:9e:0a:c8:29:1e:c3:8b:88:67:41:b9:3d:3a:8b:9d:
e5:20:4a:dd:31:22:ec:ea:7e:46:74:ab:e2:6b:2e:34:b1:0d:
31:d0:9f:77:21:44:13:02:c9:e3:13:70:5f:ba:38:19:ac:59:
04:53:c5:90:c5:5b:9b:5d:ee:e9:07:b1:19:fc:3c:14:96:bb:
a4:c6:0c:f4:ac:c4:7b:39:c1:f4:b3:bf:f0:6f:eb:42:51:24:
21:61:de:80:87:22:cd:8f:52:e8:2a:72:41:18:cd:9a:58:d1:
4e:06:87:61:37:2c:89:5d:66:bb:bb:0e:71:b4:fc:9b:27:1b:
9d:2f:00:fd:db:99:6b:73:ae:66:5c:f1:34:7e:cb:a8:8b:54:
0c:19:b0:4b:17:bc:58:8d:21:23:cc:42:31:6d:ea:30:5f:1b:
82:5e:6e:03:67:a9:62:99:3b:e5:09:a1:67:4a:23:d4:9f:8b:
6e:33:a8:0b:27:d1:d5:26:94:79:bf:52:6a:fd:98:14:8a:e4:
d2:18:5b:c4:1a:cc:3e:a0:e3:4b:c3:9b:ba:2d:76:80:80:36:
fe:a5:50:a5:5a:9a:60:a9:cb:17:2b:a7:39:1c:51:63:76:c8:
24:e8:30:6d:15:a8:f3:f1:cd:48:62:c7:cb:01:aa:8d:4f:dd:
a5:d3:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org