Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uWRWy-QATHU9a-CkcDNncGiQquw.roa
File: uWRWy-QATHU9a-CkcDNncGiQquw.roa (raw, json)
Hash identifier: mguY5KIx8meIPvaFfaPlnnp7ZnwD0BHhOC9b0FHlGBM=
Subject key identifier: B9:64:56:CB:E4:00:4C:75:3D:6B:E0:A4:70:33:67:70:68:90:AA:EC
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018A79BA1374BA38BBFFF2FC55191AB95596
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uWRWy-QATHU9a-CkcDNncGiQquw.roa
Signing time: Sat 09 Sep 2023 11:35:52 +0000
ROA not before: Sat 09 Sep 2023 11:35:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 217.196.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:ba:13:74:ba:38:bb:ff:f2:fc:55:19:1a:b9:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Sep 9 11:35:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b96456cbe4004c753d6be0a4703367706890aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:b4:a8:50:db:8e:db:9a:e3:8d:24:34:40:
ee:07:cf:e9:19:3c:53:5c:00:a2:55:b3:bc:2e:a3:
2f:e3:fe:50:92:fa:f3:1a:68:75:79:2a:e5:34:c4:
7f:6f:bd:52:d9:9d:67:15:35:b2:dc:c1:c0:32:b0:
f6:57:57:65:71:22:c8:1d:8e:bb:55:02:93:3f:95:
8e:df:0e:8e:5e:a7:c4:68:d9:1a:ac:ea:82:cf:e9:
a4:39:75:be:3c:4a:2f:13:ac:b4:93:69:21:8e:ee:
1e:9c:a5:b0:7b:d7:7b:cb:51:04:09:5d:3e:ef:00:
01:ad:c6:42:08:9d:03:3c:92:5b:80:4d:da:dc:5b:
c4:e5:ba:27:2a:77:00:63:3f:fc:59:66:db:fa:d9:
89:dc:72:01:9c:53:b9:1f:ce:42:07:92:ef:62:2f:
ff:87:8d:6d:21:c9:87:ce:1d:15:d7:37:45:8d:f1:
3e:d0:ee:75:5f:ac:e4:00:b0:bd:04:32:60:f4:87:
f8:31:17:26:ea:55:69:94:34:c9:ec:5d:e2:8b:b2:
28:b9:4e:3b:8e:1b:e4:db:2f:e9:f2:e7:98:ba:cc:
e9:f8:f3:c5:a2:0c:dc:c9:8e:79:a3:06:84:df:3f:
1a:57:92:e0:a8:b4:1a:a6:51:ae:b2:57:ec:c6:45:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:56:CB:E4:00:4C:75:3D:6B:E0:A4:70:33:67:70:68:90:AA:EC
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uWRWy-QATHU9a-CkcDNncGiQquw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b5:9d:f6:6c:87:42:7d:9a:4c:6d:eb:31:34:b8:e3:c0:3d:
da:44:06:01:78:3f:3f:37:8c:14:86:ce:97:4d:55:53:d7:7f:
d4:09:29:09:f1:5d:1d:bc:7d:7b:56:f5:0c:40:8b:ce:a8:5e:
44:d6:91:0a:5f:49:7d:7c:0d:37:84:0a:d6:9a:c1:76:99:15:
b2:ca:bb:1f:23:48:47:f2:9f:d6:b5:6d:79:7d:db:db:c7:1e:
4f:17:6f:d5:60:46:53:ab:f0:17:67:e1:44:0f:f6:09:fb:2c:
dc:89:a9:0b:25:75:a4:29:06:ff:77:00:1c:ae:d2:c0:74:cd:
cf:17:4c:85:cd:eb:ac:c6:62:b8:de:fb:75:9c:5f:20:12:da:
64:80:51:95:4f:2f:d2:00:18:76:53:30:1d:f0:eb:43:04:08:
5a:b9:3f:f5:08:da:78:fe:ad:db:50:95:f2:19:82:19:b7:a5:
f5:0a:35:b5:d7:52:af:76:49:bd:e2:75:33:2d:4f:1e:97:93:
92:ae:fb:32:57:51:61:58:36:0f:a5:3c:82:c7:a2:75:60:23:
20:78:28:4e:d0:72:d8:df:36:73:06:78:af:f4:d8:03:d1:e2:
eb:4f:c0:b0:55:88:67:83:54:4d:14:cc:57:9d:72:7a:74:bc:
5c:53:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org