Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/sEZAf7yRM1wGFji6TA6vjS1gWXU.roa
File: sEZAf7yRM1wGFji6TA6vjS1gWXU.roa (raw, json)
Hash identifier: CYID/yjSpzsGhmEgnPGnazMnu3A+8HP0+nJptnAc7mM=
Subject key identifier: B0:46:40:7F:BC:91:33:5C:06:16:38:BA:4C:0E:AF:8D:2D:60:59:75
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 018C2FEC435C75E2D5EE72687240C706791A
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/sEZAf7yRM1wGFji6TA6vjS1gWXU.roa
Signing time: Sun 03 Dec 2023 13:44:22 +0000
ROA not before: Sun 03 Dec 2023 13:44:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41720
IP address blocks: 217.197.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:ec:43:5c:75:e2:d5:ee:72:68:72:40:c7:06:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Dec 3 13:44:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b046407fbc91335c061638ba4c0eaf8d2d605975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:77:04:05:ed:aa:42:d5:b8:b1:46:62:29:
d7:3d:a2:c0:e3:33:c9:54:87:c2:cc:d0:13:e2:0b:
fa:dc:87:92:44:7f:a1:49:90:17:e9:83:6e:78:12:
c8:ab:d8:31:fe:01:b9:7d:f3:a3:ed:81:11:5e:5f:
f6:b9:22:34:91:ca:00:ed:c6:eb:1a:8d:8a:90:3e:
38:1b:7e:8f:fd:63:eb:39:05:df:e0:3d:34:66:79:
8d:ae:7b:59:e5:30:40:6a:57:20:2a:21:c6:6c:3c:
3b:87:8b:f4:59:cb:2d:0d:b3:4c:13:81:58:c2:ff:
90:41:5f:2b:cd:f0:68:23:89:a1:a7:60:88:a8:b5:
2d:5a:8f:ea:6c:5f:dd:d8:39:16:66:5f:a3:f0:fa:
7a:42:9f:b2:08:89:d5:55:09:1f:bd:dc:21:52:f2:
4c:c7:2d:f1:34:12:90:3c:ac:9f:76:08:c8:28:fd:
13:81:17:f9:b1:5e:bc:e4:ea:e9:c5:e6:c8:ec:f2:
f7:83:bd:84:e9:f1:4e:d7:26:87:c9:41:f6:d4:36:
f3:00:88:15:f5:22:c6:46:4e:f8:54:55:ca:e1:75:
71:28:aa:64:b9:e5:7d:6a:84:d1:c1:ff:5e:0f:d3:
37:49:08:40:80:50:87:a3:78:e1:be:fa:73:13:d4:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:40:7F:BC:91:33:5C:06:16:38:BA:4C:0E:AF:8D:2D:60:59:75
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/sEZAf7yRM1wGFji6TA6vjS1gWXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ec:13:ae:74:78:fd:40:f9:73:eb:bc:c8:93:38:48:1c:5f:
07:fb:81:b7:c4:aa:d1:26:f0:28:07:02:e6:d5:ac:48:92:cd:
c9:f7:25:69:6b:41:0e:a2:55:a4:ee:2f:3c:3b:fe:12:0f:49:
1a:55:fd:4c:b4:d6:d7:0c:b8:db:4c:70:f7:b1:09:20:fa:8e:
e2:bb:fa:1c:d6:bb:b2:f1:f9:a6:a9:f8:51:0e:47:24:b9:1a:
11:b4:86:36:ea:e2:50:83:a1:66:49:7e:46:e6:2e:a5:0a:5f:
f7:79:80:ac:6f:45:e6:4f:c0:5b:8f:ae:61:a6:10:27:27:c1:
e4:7a:e8:f2:64:c9:f6:c4:a0:95:ac:12:34:1c:7a:73:92:79:
6f:d3:1b:33:ee:fd:1a:8d:c8:16:9f:33:a8:7e:90:59:39:8d:
89:c1:f4:78:06:5b:49:09:c4:dd:b6:47:9a:97:37:ce:a7:88:
51:69:db:11:f5:c4:9b:c8:d5:a7:a4:6e:e8:e1:13:fd:b0:66:
c3:a0:93:6c:ad:f4:45:bd:80:73:de:4e:bc:8e:1f:d1:3f:f0:
68:ca:be:7c:fb:61:e9:bc:19:6d:82:75:08:71:ed:98:c1:df:
d7:ed:ac:2d:ea:05:96:e3:c5:a6:5c:0d:6c:40:4d:b8:5a:73:
70:51:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org