Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0OMytLyk33pMkzHxWc9w83nCjgA.roa
File: 0OMytLyk33pMkzHxWc9w83nCjgA.roa (raw, json)
Hash identifier: V3izs45Tonp3FvMX1HxsCEYs6EiLs22A4G/ooY/cDPE=
Subject key identifier: D0:E3:32:B4:BC:A4:DF:7A:4C:93:31:F1:59:CF:70:F3:79:C2:8E:00
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 018CEB1B3FD410C7D16AE6A35C28AE4C96BA
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0OMytLyk33pMkzHxWc9w83nCjgA.roa
Signing time: Mon 08 Jan 2024 22:04:40 +0000
ROA not before: Mon 08 Jan 2024 22:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33333
IP address blocks: 212.97.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:eb:1b:3f:d4:10:c7:d1:6a:e6:a3:5c:28:ae:4c:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 8 22:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0e332b4bca4df7a4c9331f159cf70f379c28e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:b5:c0:0a:29:09:eb:79:20:22:16:b2:4e:
8d:c9:22:90:01:e0:c7:04:7b:9a:c1:a1:04:01:76:
ee:07:f2:a6:35:91:2c:b9:7b:a1:f6:1c:2f:21:b8:
77:8b:4b:04:8a:02:00:3d:2f:ae:24:5f:1c:d1:73:
26:4b:49:25:25:5a:07:e6:59:20:ea:4b:a0:fd:77:
9f:7b:8a:22:d4:28:9f:e1:a4:a7:10:d2:d4:a8:06:
0f:55:01:02:39:a8:e6:b7:d2:74:8a:1b:b9:95:27:
5e:9d:b6:a7:ce:cb:ff:ef:43:fe:c5:28:bd:25:f8:
ca:2c:c8:c0:49:1d:8e:75:28:29:fe:21:29:75:51:
2f:d7:c8:18:01:80:44:24:c6:a0:aa:38:2d:41:6e:
0c:6d:47:f1:0e:3d:2f:c3:64:fb:ab:68:50:8c:37:
96:8c:89:da:14:ba:77:89:65:f4:71:b3:c3:8f:66:
8e:b8:9e:89:75:00:ba:19:d8:a1:6f:0c:88:47:f0:
74:2f:c9:08:3a:ad:33:45:6d:aa:4e:2e:60:7c:11:
eb:f6:79:9f:3e:d3:c1:7a:f5:8d:de:9a:99:be:41:
21:73:42:d3:ca:3e:1a:3b:e2:6b:fe:ee:3a:c1:c2:
57:39:3b:0c:6f:a7:85:0a:1f:b6:4d:68:c7:fb:04:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E3:32:B4:BC:A4:DF:7A:4C:93:31:F1:59:CF:70:F3:79:C2:8E:00
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0OMytLyk33pMkzHxWc9w83nCjgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:aa:54:65:da:de:ed:c5:d1:da:8c:9b:00:78:a7:22:47:6a:
36:32:dc:14:c5:a4:b8:3c:fe:82:e0:92:cd:a1:92:e4:56:ae:
49:bc:72:ec:e5:43:3d:c7:35:35:7d:b6:65:0d:fe:28:c0:37:
67:62:f8:71:50:09:88:3e:4d:58:7d:17:03:fa:70:d4:86:4b:
a2:55:b9:57:c3:6e:2f:97:d3:03:ec:6c:c6:7c:98:9c:00:f6:
01:2c:5c:2d:12:4e:72:6b:51:f9:8a:51:47:e1:50:04:3d:88:
ab:7d:f9:0a:e5:15:06:22:3f:f0:f1:6e:8d:5d:2f:a1:f7:0a:
e4:88:fa:7d:bf:3f:ee:f7:df:40:5b:f1:e6:2f:a8:8f:2b:c8:
56:93:a4:48:1e:b1:ef:af:8e:05:ca:45:4b:fa:f6:53:7c:e4:
8c:63:3b:7b:8b:a2:cb:1c:89:29:02:a4:8e:b1:36:18:93:49:
49:d4:e4:22:cd:78:f0:6b:42:28:5f:ff:28:c3:a8:19:c8:e8:
c0:5a:93:e9:65:5d:f8:56:9c:16:1a:e3:b9:d3:97:c7:1c:23:
35:f5:c9:bf:dd:46:3d:86:29:49:cf:5e:5b:52:dd:7c:f1:78:
68:45:66:87:70:a1:f4:bb:d5:a2:44:f1:73:6e:df:a2:36:73:
a0:7e:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 11:02:45 2024 by rpki-client on console-ams.rpki-client.org