Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/_GSh8RgJDB2pB3pVIwBlLTT5MwY.roa
File: _GSh8RgJDB2pB3pVIwBlLTT5MwY.roa (raw, json)
Hash identifier: CQL2evfpNMTDI7LRF2em3ac/8EjlZ95uzjF7eBVC8/s=
Subject key identifier: FC:64:A1:F1:18:09:0C:1D:A9:07:7A:55:23:00:65:2D:34:F9:33:06
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0189E63852263B3183D3613CA4625B8083E6
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/_GSh8RgJDB2pB3pVIwBlLTT5MwY.roa
Signing time: Fri 11 Aug 2023 20:09:58 +0000
ROA not before: Fri 11 Aug 2023 20:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206728
IP address blocks: 217.197.107.0/24 maxlen: 24
217.196.103.0/24 maxlen: 24
217.196.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 07:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:38:52:26:3b:31:83:d3:61:3c:a4:62:5b:80:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Aug 11 20:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc64a1f118090c1da9077a552300652d34f93306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:46:ee:06:61:08:6f:49:0e:0b:6c:a4:85:
b1:09:f2:30:3f:32:73:4b:d8:45:d6:6d:36:25:a0:
fa:f1:49:a6:c1:80:9f:ad:93:28:ec:02:87:07:58:
8e:63:26:3c:e7:fe:de:23:a1:a3:f8:53:bf:29:52:
c1:fd:3c:f0:7b:91:2a:4d:83:a3:5e:28:e7:eb:85:
71:0a:1f:d3:07:1c:59:bf:9a:7b:e2:36:3c:e5:d5:
56:7c:6a:8f:1b:9d:4d:42:75:9d:75:1a:d7:07:85:
7b:95:10:e4:24:df:bb:a6:d3:04:01:ed:97:55:c3:
8c:88:ea:6b:8d:86:6d:c2:5d:28:43:c7:53:aa:64:
2a:b2:4a:25:5d:e0:ac:bc:7d:b7:8c:f1:f3:dd:ea:
ac:58:e8:ba:1b:21:fc:85:e4:3e:ed:ca:96:5d:92:
49:6a:5f:93:56:66:9f:df:5f:c8:ab:79:96:d3:d2:
a7:be:4a:d0:2f:dc:38:a4:53:cd:ed:ad:d3:78:07:
18:81:7c:42:fc:04:81:e9:9d:99:88:e3:8b:0e:ed:
42:70:60:69:20:3e:a3:ec:43:12:46:30:fd:dd:f7:
b9:30:b1:5a:72:86:7e:fb:55:f1:4f:64:b6:ca:2d:
3c:de:94:f0:1b:3c:d0:8b:75:ea:96:a3:1d:a2:a7:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:A1:F1:18:09:0C:1D:A9:07:7A:55:23:00:65:2D:34:F9:33:06
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/_GSh8RgJDB2pB3pVIwBlLTT5MwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.102.0/23
217.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f0:23:42:79:d5:39:c0:5b:d3:92:7c:07:08:6d:43:59:b3:
89:ee:0e:9c:30:44:19:70:2a:b1:66:e7:80:33:56:32:af:ef:
e0:df:fe:25:8f:6f:6a:96:5a:60:d3:d5:1e:75:bc:78:f8:5c:
da:cd:0a:11:d1:89:7a:63:4c:f4:61:6e:2d:05:e5:d3:4b:85:
66:2e:0a:e7:24:f1:be:34:b6:6e:0b:53:7d:88:70:9f:6e:73:
8a:3e:cb:0d:48:f4:35:b1:fb:8d:f8:e0:5a:3f:0e:d0:91:b6:
bb:0e:8e:10:89:0a:83:0a:70:9c:f2:a4:8c:4a:56:05:30:d8:
2e:fc:ff:10:7f:4a:37:98:7c:89:8d:49:18:1f:fe:03:42:e4:
f1:25:67:49:ef:92:19:5c:c2:e4:26:5d:a6:64:fa:30:3e:c4:
a1:65:05:e5:5f:c6:0e:f8:48:de:a2:ce:5a:c3:50:84:4b:a7:
6c:0d:93:53:83:05:b2:17:c7:3e:c3:5b:af:84:dc:44:aa:b7:
b3:7b:c6:bc:20:ac:60:2a:aa:eb:31:33:24:b5:83:90:22:5c:
ec:d0:de:9d:f0:ee:4d:cd:a5:dd:5f:e1:ff:62:d6:92:cb:1d:
ca:66:4a:82:90:4f:77:49:9a:df:c4:62:46:5e:b9:5b:4f:93:
dd:c9:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org