Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/rK7hSgb4r-5eB-fLwj-v6NRfB5M.roa
File: rK7hSgb4r-5eB-fLwj-v6NRfB5M.roa (raw, json)
Hash identifier: OL+dYk/9T41uabQOn3aWVVGJ3pYc2KmQHJE3e/CkRFo=
Subject key identifier: AC:AE:E1:4A:06:F8:AF:EE:5E:07:E7:CB:C2:3F:AF:E8:D4:5F:07:93
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 018B150B7B7E0316528452A595B0A9556CC9
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/rK7hSgb4r-5eB-fLwj-v6NRfB5M.roa
Signing time: Mon 09 Oct 2023 15:25:55 +0000
ROA not before: Mon 09 Oct 2023 15:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43006
IP address blocks: 217.70.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:0b:7b:7e:03:16:52:84:52:a5:95:b0:a9:55:6c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Oct 9 15:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acaee14a06f8afee5e07e7cbc23fafe8d45f0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:6c:6e:16:34:cb:08:6f:55:40:e2:c5:ff:
95:be:95:13:3a:3e:23:86:4c:7a:9e:b5:3e:2f:ee:
1d:d9:2e:1b:dc:51:f0:1e:59:21:45:d3:6a:57:2f:
64:57:4e:d9:3d:e7:9c:e8:d8:f1:c0:0b:33:c7:cf:
cb:10:5d:87:26:e6:aa:04:d0:8e:e6:76:42:c3:e8:
9d:33:db:2e:b8:a4:62:43:02:ed:2c:22:b0:d3:22:
40:7f:51:c5:e9:c7:5a:8c:76:27:39:8b:91:d0:75:
ee:02:bf:f5:89:37:36:10:0d:d0:8f:95:b0:cb:ee:
5e:ae:91:28:72:66:9b:f4:76:f9:b4:bb:6f:7e:df:
62:ce:58:14:04:61:f4:d2:00:6a:19:2b:d9:ce:ea:
2a:04:ca:74:cc:35:35:c5:72:b1:75:83:d6:50:30:
5f:4f:9e:c3:be:97:26:0e:7f:35:fd:50:c9:7a:6f:
84:5b:a2:ab:3c:00:af:a1:b8:21:2e:98:c4:b6:e4:
fc:1b:b2:ab:de:d4:6a:5e:a3:eb:8e:3a:a2:4b:49:
8d:15:ff:6b:55:10:cd:0a:15:52:eb:65:10:46:dd:
f0:fc:7c:74:cf:37:14:64:19:15:b3:59:d3:f8:b5:
41:3e:7c:e4:68:16:2f:df:3b:ca:c2:10:b5:d0:08:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:E1:4A:06:F8:AF:EE:5E:07:E7:CB:C2:3F:AF:E8:D4:5F:07:93
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/rK7hSgb4r-5eB-fLwj-v6NRfB5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.70.224.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:55:46:64:8b:b6:eb:7f:3f:e1:fc:26:92:ec:d3:6f:61:46:
20:0d:43:20:59:bd:2f:d2:d7:56:67:ac:14:70:e2:3a:63:59:
b1:ae:fc:31:14:68:38:92:6a:e2:d2:7c:42:e5:6c:48:ec:e8:
55:9d:9f:e2:ce:de:8c:9a:dd:d4:8f:44:d3:b5:16:0d:52:16:
10:16:66:df:d1:51:6b:ce:b5:a8:1b:0e:f8:53:19:2b:39:44:
57:a2:df:94:ee:d3:2b:4a:7d:7a:ee:19:24:cb:16:df:11:c8:
5a:29:a7:9c:15:74:fc:5e:1e:dd:e1:a3:21:08:0b:3e:90:07:
27:d4:08:56:0c:2d:c5:99:81:1d:26:8b:50:b5:8f:b7:9d:bb:
27:6e:fe:d4:7e:76:57:8e:6a:0f:cb:a5:13:ce:0c:6f:f3:36:
57:72:c9:a5:bf:7e:e9:4f:b9:0f:ed:c9:e5:87:7e:e3:e4:ea:
ba:f3:ef:e4:88:5d:be:0e:99:56:21:bf:81:9d:67:07:60:69:
a0:9b:42:69:4e:40:66:c4:5d:30:69:33:08:57:76:9a:14:db:
e1:93:a0:3f:1f:f6:63:0d:b5:02:70:5e:96:68:17:c9:b7:8f:
f8:86:e1:6b:79:47:46:89:c4:b1:a2:90:ac:dc:57:95:34:f7:
e2:74:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:46 2024 by rpki-client on console-ams.rpki-client.org