Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/F6OUHI8b3v2uFvO92ZkFc1ZVWwo.roa
File: F6OUHI8b3v2uFvO92ZkFc1ZVWwo.roa (raw, json)
Hash identifier: qytqxupoy5gtAz84i/cywgwTVrXfBJrIusXeictIYHk=
Subject key identifier: 17:A3:94:1C:8F:1B:DE:FD:AE:16:F3:BD:D9:99:05:73:56:55:5B:0A
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0185710BE36F85948EB61032E254627A9135
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/F6OUHI8b3v2uFvO92ZkFc1ZVWwo.roa
Signing time: Mon 02 Jan 2023 05:54:42 +0000
ROA not before: Mon 02 Jan 2023 05:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 188.64.17.0/24 maxlen: 24
188.64.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e3:6f:85:94:8e:b6:10:32:e2:54:62:7a:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jan 2 05:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17a3941c8f1bdefdae16f3bdd999057356555b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:b4:8c:b7:a9:66:2a:d2:fd:bd:cd:77:fd:
fa:75:4c:6d:5b:f5:77:0f:b9:45:66:a7:19:36:a1:
8e:21:f0:23:57:36:9c:a6:4c:ca:31:55:93:32:0d:
5f:e9:4f:db:9a:18:e5:73:81:ea:e1:48:07:46:7e:
ab:3f:f1:8e:ce:16:41:bd:1d:ce:d9:70:5a:8b:48:
2f:3a:85:ec:66:8c:77:2a:da:e3:d2:f4:06:d4:75:
32:71:93:3f:e3:70:cf:63:84:54:7b:92:1b:12:59:
b5:9a:3c:e1:f4:d2:77:1b:70:5b:57:d8:61:60:68:
9d:1c:5d:8a:92:cd:09:a1:bc:0c:20:24:a4:1c:97:
77:d1:35:b8:0b:ae:f2:b8:7e:9d:98:f0:3c:7d:09:
0c:a1:91:a6:6a:8e:ac:63:63:b6:10:69:ff:56:b2:
0e:93:79:80:b1:2b:41:61:74:95:4f:23:25:a5:a5:
fa:11:7a:88:f6:80:74:b4:bd:88:30:2f:85:15:6a:
68:10:08:6e:da:c2:38:17:0e:e5:cd:98:8c:e2:2c:
46:a8:52:f2:8d:f8:69:2f:1c:aa:db:59:b0:8a:cb:
a4:77:ab:da:7d:53:7f:50:1f:62:0c:ac:db:2d:29:
b0:6d:4d:b0:2e:53:e4:45:11:56:b9:99:33:b2:c2:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:94:1C:8F:1B:DE:FD:AE:16:F3:BD:D9:99:05:73:56:55:5B:0A
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/F6OUHI8b3v2uFvO92ZkFc1ZVWwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.17.0-188.64.18.255
Signature Algorithm: sha256WithRSAEncryption
9b:6c:ea:41:c7:b3:7e:8c:f9:54:6c:94:c5:79:46:98:de:ac:
60:d0:05:6b:f9:de:6e:cb:30:b3:aa:f9:ed:96:48:f6:81:cb:
cc:a8:74:9d:98:2c:4c:22:3f:e1:2d:8e:73:d1:2b:2e:8e:47:
d3:bb:a9:31:24:76:7d:56:b3:c7:44:e2:a5:38:fb:7c:f9:68:
ae:a7:0b:73:92:e5:49:f0:60:36:9c:00:50:dc:2a:9f:f1:4f:
74:f2:40:f7:c1:ef:ba:c7:cd:8d:21:57:62:e3:ec:91:3c:d0:
51:7d:01:39:44:2c:b6:b3:fa:af:7f:c4:4a:1d:1e:69:fc:a6:
f0:58:b4:8d:54:56:0b:d8:75:12:16:49:30:08:93:0e:f1:e7:
33:e2:30:da:86:fc:ba:57:66:9a:f0:c8:ef:2e:0b:b3:86:a7:
39:b7:36:3f:24:f6:c9:c8:1a:c3:1d:8f:5e:78:15:40:2a:54:
9b:9d:70:da:15:1a:3f:f2:91:61:c8:45:94:a4:0b:f7:9a:db:
5e:3d:4f:7a:38:ec:81:6a:a4:fa:15:c4:ad:14:d8:18:be:b5:
55:3e:8a:c0:4b:f1:a8:5b:f1:fd:0d:74:6b:93:a9:b3:db:b0:
e6:33:1b:58:a0:8e:69:ca:d5:ec:d1:cb:b9:3d:76:10:7a:da:
18:e5:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:36 2024 by rpki-client on console-fra.rpki-client.org