Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L7XdnuHMCfvLm8AwbIjtjJNPJh4.roa
File: L7XdnuHMCfvLm8AwbIjtjJNPJh4.roa (raw, json)
Hash identifier: uq1cm/PHw6HYp0soQFHBMX+hzbN1KxWV5HrWIHvBqgQ=
Subject key identifier: 2F:B5:DD:9E:E1:CC:09:FB:CB:9B:C0:30:6C:88:ED:8C:93:4F:26:1E
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018AACB88B482B88939D5B70C3C587AEF7B1
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L7XdnuHMCfvLm8AwbIjtjJNPJh4.roa
Signing time: Tue 19 Sep 2023 09:14:50 +0000
ROA not before: Tue 19 Sep 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216300
IP address blocks: 217.196.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:b8:8b:48:2b:88:93:9d:5b:70:c3:c5:87:ae:f7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Sep 19 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fb5dd9ee1cc09fbcb9bc0306c88ed8c934f261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:da:65:b0:04:27:61:54:3c:b6:9a:19:41:
e5:79:fb:69:6d:46:f7:ac:95:3a:4b:43:80:9b:cb:
ea:e7:3b:59:34:09:97:ba:44:49:0e:1e:9b:f8:74:
de:c0:f6:f2:d5:e1:4f:a4:89:82:59:8d:a0:bb:3e:
38:46:a9:ad:01:68:02:0d:39:1b:a2:f8:34:3f:0b:
5a:d3:7d:f1:14:eb:f0:1e:37:08:0a:1e:28:d5:10:
ef:cb:8c:c0:83:d4:27:fe:54:4c:36:55:d4:e3:ff:
3a:95:d1:93:d9:cb:36:fc:2b:9d:2f:36:89:bb:56:
03:2c:f9:c3:1c:1c:47:e1:d0:fc:c5:1c:26:15:09:
df:e7:21:cb:ad:39:16:8b:38:33:01:0c:46:76:db:
75:79:7f:9d:41:dc:ea:79:8c:8e:64:e8:9e:89:f7:
85:01:f6:74:5c:1e:6d:3a:91:45:d0:13:51:81:b7:
44:43:8c:9a:46:fb:60:40:05:73:5e:0b:57:f1:0b:
77:34:bf:50:da:63:7d:35:de:ca:c1:a4:32:65:80:
c6:b4:e2:75:13:72:b7:63:98:6a:e2:6a:2b:25:a8:
0c:79:28:17:42:46:8c:e0:4e:42:60:1b:14:04:45:
7d:64:48:cd:27:8a:ed:ef:36:7e:25:76:30:4c:f9:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:DD:9E:E1:CC:09:FB:CB:9B:C0:30:6C:88:ED:8C:93:4F:26:1E
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L7XdnuHMCfvLm8AwbIjtjJNPJh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:36:2e:b0:4b:20:72:21:03:ac:91:20:0a:18:66:62:bd:
ad:6a:a4:e5:c3:92:bb:95:66:af:bd:89:4b:8f:54:87:eb:77:
fe:73:f2:cb:a2:40:64:44:48:11:e2:16:5a:6e:73:19:52:6e:
13:72:07:fc:3d:8e:9d:86:b5:63:af:7a:af:47:77:3a:23:8c:
c0:c9:ed:e9:56:46:a4:ad:6c:2a:24:2f:08:fc:1c:42:ac:9b:
3d:63:d5:07:d8:06:5d:9b:3f:6c:1d:a4:0e:ca:ce:f8:4d:c3:
4c:4c:d5:8d:41:2f:6f:a7:2e:35:1c:9c:6f:f5:c4:fc:bf:ef:
64:c7:e4:bc:54:cd:0e:23:c8:fb:14:fb:1b:7a:6d:82:98:03:
bf:e4:7f:e4:0f:0c:6b:fa:0d:8d:06:09:ef:a4:2b:34:d3:69:
ac:e2:bb:9f:96:27:2b:eb:a1:fa:6c:4d:20:95:64:a4:e3:41:
f5:01:4f:cd:25:15:b7:cf:04:69:4c:45:b6:80:9f:b4:a3:e0:
34:53:4c:4e:fc:ac:7a:53:9a:35:12:8f:29:82:2f:ac:c7:f1:
5d:c8:53:25:85:86:c8:0f:c7:31:2f:e1:37:94:cd:bb:2a:58:
99:53:df:07:0e:78:48:2d:3b:e4:41:24:4a:15:62:0c:14:1a:
9a:bb:aa:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqsuItIK4iTnVtww8WHrvexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjMwOTE5MDkxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI1ZGQ5ZWUxY2MwOWZiY2I5YmMwMzA2Yzg4ZWQ4YzkzNGYyNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN7aZbAEJ2FUPLaaGUHleftpbUb3
rJU6S0OAm8vq5ztZNAmXukRJDh6b+HTewPby1eFPpImCWY2guz44RqmtAWgCDTkb
ovg0Pwta033xFOvwHjcICh4o1RDvy4zAg9Qn/lRMNlXU4/86ldGT2cs2/CudLzaJ
u1YDLPnDHBxH4dD8xRwmFQnf5yHLrTkWizgzAQxGdtt1eX+dQdzqeYyOZOieifeF
AfZ0XB5tOpFF0BNRgbdEQ4yaRvtgQAVzXgtX8Qt3NL9Q2mN9Nd7KwaQyZYDGtOJ1
E3K3Y5hq4morJagMeSgXQkaM4E5CYBsUBEV9ZEjNJ4rt7zZ+JXYwTPmBBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+13Z7hzAn7y5vAMGyI7YyTTyYeMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvTDdYZG51SE1DZnZMbThBd2JJanRqSk5QSmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cRhMA0G
CSqGSIb3DQEBCwUAA4IBAQC2ADYusEsgciEDrJEgChhmYr2taqTlw5K7lWavvYlL
j1SH63f+c/LLokBkREgR4hZabnMZUm4Tcgf8PY6dhrVjr3qvR3c6I4zAye3pVkak
rWwqJC8I/BxCrJs9Y9UH2AZdmz9sHaQOys74TcNMTNWNQS9vpy41HJxv9cT8v+9k
x+S8VM0OI8j7FPsbem2CmAO/5H/kDwxr+g2NBgnvpCs002ms4ruflicr66H6bE0g
lWSk40H1AU/NJRW3zwRpTEW2gJ+0o+A0U0xO/Kx6U5o1Eo8pgi+sx/FdyFMlhYbI
D8cxL+E3lM27KliZU98HDnhILTvkQSRKFWIMFBqau6pP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org