Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/k0C5GPpTcZ3U1Z8DywKVGjqyk_0.roa
File: k0C5GPpTcZ3U1Z8DywKVGjqyk_0.roa (raw, json)
Hash identifier: BUj0h06cLcc/1MKaZ0CRSALihV3fNsVegr0GY1wZZHY=
Subject key identifier: 93:40:B9:18:FA:53:71:9D:D4:D5:9F:03:CB:02:95:1A:3A:B2:93:FD
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018D35CE57B8DF6BABCACCB6BB9659B1B617
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/k0C5GPpTcZ3U1Z8DywKVGjqyk_0.roa
Signing time: Tue 23 Jan 2024 10:12:11 +0000
ROA not before: Tue 23 Jan 2024 10:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 217.196.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 20:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:ce:57:b8:df:6b:ab:ca:cc:b6:bb:96:59:b1:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 23 10:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9340b918fa53719dd4d59f03cb02951a3ab293fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:2b:b0:c3:77:0b:31:aa:4f:92:0e:cc:7f:
ce:f0:bc:df:a8:37:3b:9c:7d:ee:1a:a8:db:20:9e:
09:ac:0c:38:5a:6f:86:94:88:a8:94:1a:72:91:33:
10:b3:65:a1:40:a9:f2:84:5e:5b:03:9b:12:14:3b:
e7:43:6d:ed:20:5c:64:d4:9b:ab:97:f8:1c:5d:f3:
5a:e9:07:10:c2:2b:a4:3d:e7:f8:40:64:95:15:93:
c3:86:09:a1:6e:b6:f3:41:f0:a2:e1:0e:66:91:88:
09:31:4d:d1:52:3c:ba:c3:ff:7f:01:72:7e:44:85:
50:c9:30:1f:c9:7d:4f:07:6c:f1:0f:46:62:e5:0e:
ed:03:0b:c7:34:0b:0b:34:d7:49:ba:fc:f9:38:c8:
3d:56:aa:2a:78:0a:7f:a1:2d:45:90:1f:de:45:38:
bf:81:bb:e3:37:3c:9c:65:66:14:20:2f:c3:1b:a1:
52:0c:e7:1e:5e:e9:1f:8f:b0:fc:ae:5c:11:9b:2d:
dc:97:19:20:20:c3:d7:3a:a6:99:02:5b:35:84:e8:
d6:f8:39:0e:e6:f0:47:b0:4a:98:d9:27:ef:c6:07:
b2:91:ef:37:d3:b9:31:e8:60:cc:43:55:a7:fe:ef:
77:4e:03:5c:34:45:ef:12:2b:70:68:4a:c4:ec:9c:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:B9:18:FA:53:71:9D:D4:D5:9F:03:CB:02:95:1A:3A:B2:93:FD
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/k0C5GPpTcZ3U1Z8DywKVGjqyk_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:af:d6:5e:fb:1a:b6:b3:59:f5:d5:41:4b:2e:2d:0e:c3:af:
56:ee:03:67:a2:db:99:c7:6e:6f:51:8a:01:09:ef:67:73:5f:
60:05:a5:49:3b:bb:e8:56:1c:69:cc:51:35:3a:45:7b:b8:2d:
0d:47:78:71:04:44:89:6b:9a:d6:f9:a5:54:40:77:50:51:c8:
49:0a:dc:d7:be:f0:97:ce:29:35:d9:99:df:90:0f:ed:3e:71:
60:a1:ca:84:ce:75:26:45:8d:7c:dd:85:a2:87:84:29:f1:58:
db:26:3f:c1:57:07:d2:6a:46:41:09:79:74:5d:aa:c6:3f:c6:
96:9d:84:6a:e6:b5:39:94:23:35:ce:7a:10:b1:57:5b:bd:6d:
18:e3:78:c3:12:92:5b:5e:11:d8:ed:85:d6:3c:31:54:2a:13:
19:80:78:21:38:b5:82:9e:75:ec:b1:1f:70:ad:6c:9d:c3:c4:
11:ef:91:48:8e:ce:6c:29:c4:4f:f6:cd:95:d0:69:8c:fb:69:
4c:4a:f3:7e:0d:b2:65:e7:36:4a:c1:fd:70:ae:ec:46:28:d2:
07:4b:72:81:7a:34:7d:a7:dd:d4:77:13:16:a8:18:8d:25:e0:
f9:0b:38:68:f4:1e:23:88:18:0b:29:f7:48:9d:76:10:65:62:
5b:00:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:03 2025 by rpki-client