Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/9uAHmHwkLwx7FlhAd-84Sti1iY8.roa
File: 9uAHmHwkLwx7FlhAd-84Sti1iY8.roa (raw, json)
Hash identifier: QRkzvPHpyqD3MXxiXKDOcVpo9Wpsf/+4y3FjOTlb6Kw=
Subject key identifier: F6:E0:07:98:7C:24:2F:0C:7B:16:58:40:77:EF:38:4A:D8:B5:89:8F
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018BF1D1367996789AD4A54145DFB062DD90
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/9uAHmHwkLwx7FlhAd-84Sti1iY8.roa
Signing time: Tue 21 Nov 2023 12:18:21 +0000
ROA not before: Tue 21 Nov 2023 12:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 217.119.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:d1:36:79:96:78:9a:d4:a5:41:45:df:b0:62:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Nov 21 12:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e007987c242f0c7b16584077ef384ad8b5898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:aa:a8:86:0a:5f:d2:16:ad:ed:20:95:e6:
52:fb:60:0a:9f:77:f4:5c:85:69:90:83:03:46:f8:
84:3f:88:fd:96:08:82:84:40:e1:eb:97:25:c5:16:
a3:bd:5a:f2:e5:71:6d:cf:e1:d7:83:92:ef:f8:36:
d2:8a:1b:74:76:e9:ae:9d:72:3c:83:43:43:7f:f3:
e8:fb:58:2c:88:93:ef:27:2e:2f:40:89:40:7b:3d:
b2:35:0a:df:d8:75:f6:8d:1e:dc:0a:bd:f0:98:fb:
5d:2e:ff:d4:c3:85:fe:96:41:ff:a6:e0:2a:76:91:
6a:04:96:3a:fb:ba:0f:60:eb:e9:b6:e0:be:24:58:
c9:79:4c:dd:01:00:63:49:55:e8:15:2a:f8:d2:e3:
7a:4c:d6:30:bf:aa:e1:04:bd:f1:07:20:23:f0:c6:
6e:87:a8:ca:f3:76:0d:1d:14:f9:41:fe:b2:7c:67:
2b:c3:fb:2a:bb:99:5b:2b:bb:55:d5:2a:32:99:50:
fb:77:7a:b8:cf:58:10:dd:fb:55:a2:24:db:b9:f6:
a9:01:51:f2:94:71:31:0a:de:06:27:4e:63:3b:19:
40:bf:74:4e:f7:b6:83:35:05:4d:d4:41:2a:87:40:
d8:44:99:10:27:e8:ad:62:03:ba:17:c0:aa:5e:62:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:07:98:7C:24:2F:0C:7B:16:58:40:77:EF:38:4A:D8:B5:89:8F
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/9uAHmHwkLwx7FlhAd-84Sti1iY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2b:12:9f:bc:32:71:1e:97:3d:42:16:c3:87:03:c1:35:de:
4b:b9:6c:aa:c7:86:04:98:a3:96:cc:85:71:d9:16:63:a3:35:
48:eb:37:46:1f:d5:06:bb:f6:f1:7b:39:ac:6c:c2:07:de:e8:
60:ee:1e:fd:57:15:d8:e2:16:6d:89:c1:41:62:e9:69:0b:ba:
01:f5:ff:c7:7d:2c:d5:c1:ee:5b:11:f3:4d:f6:39:e2:30:94:
70:26:51:0d:eb:96:19:8f:b0:cd:d4:ae:a1:d8:5a:e5:0a:c1:
28:47:65:11:95:f2:69:e5:97:2a:43:ae:65:00:d8:f6:93:9d:
83:89:c3:b0:f7:f3:5c:ab:26:bb:12:97:26:9d:d1:ed:c6:1b:
ee:38:bb:d1:21:28:d6:e8:cb:67:ed:55:04:54:ba:02:35:19:
ae:78:a2:75:73:c9:8a:1d:d7:53:78:91:c6:d7:19:6f:56:a7:
48:7c:42:0d:60:95:b9:2b:2f:b6:a6:3b:3c:bf:7b:06:22:92:
bf:13:97:9a:16:36:49:28:da:90:e7:9a:ca:16:5d:9d:0a:af:
24:3f:f1:84:20:2a:86:5a:a1:df:b3:98:04:dc:b3:de:9c:92:
a5:a4:32:fd:e5:f3:fa:3e:09:b9:d3:a4:a6:d4:41:4a:a1:f5:
7c:54:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org