Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KcibHOEUFQGg3ZorkovtOXjlW1c.roa
File: KcibHOEUFQGg3ZorkovtOXjlW1c.roa (raw, json)
Hash identifier: juhF32Mx1oD9dRHN5/X/VUCYVrDRIztGbrRjKi+AjJA=
Subject key identifier: 29:C8:9B:1C:E1:14:15:01:A0:DD:9A:2B:92:8B:ED:39:78:E5:5B:57
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B1A2870F7D9DF73AB6A32E914EE618
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KcibHOEUFQGg3ZorkovtOXjlW1c.roa
Signing time: Wed 25 Jan 2023 11:30:33 +0000
ROA not before: Wed 25 Jan 2023 11:30:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395753
IP address blocks: 217.79.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b1:a2:87:0f:7d:9d:f7:3a:b6:a3:2e:91:4e:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:30:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c89b1ce1141501a0dd9a2b928bed3978e55b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:6e:14:85:92:a6:32:4f:9f:82:da:29:4a:
57:b1:5d:e3:94:67:0e:e0:7d:93:ce:53:89:e1:35:
5b:6d:ac:32:5e:60:d7:e9:c9:30:bb:7b:f6:ff:03:
20:b2:7e:f3:2b:5e:cf:30:c8:f4:3a:a7:72:d2:6a:
8d:1d:69:27:a0:ba:32:05:0e:1d:d8:ed:7b:ec:0d:
47:3e:43:9a:9f:fe:ef:3a:a4:88:e5:1a:44:4f:47:
1d:06:3d:a6:bf:e0:ec:5a:aa:fb:f8:a2:71:4f:79:
a9:0e:08:ee:21:7c:ea:88:d2:50:ff:b9:bd:15:d8:
78:29:33:3e:24:ec:a2:47:14:d5:ca:06:39:e9:1c:
99:2e:55:19:0b:92:fe:67:36:f4:e6:a4:9b:e2:cb:
fc:59:8d:46:7c:6b:a5:97:fa:77:76:82:b6:47:07:
a6:6e:cc:44:79:19:b7:91:02:d0:85:78:73:c4:50:
c1:0e:0a:d6:e9:b5:07:5d:1f:75:e1:33:a8:99:9c:
72:b0:73:fb:64:ed:7e:ce:63:54:2e:ef:a8:66:10:
7c:cb:46:5f:bf:28:53:55:45:de:87:8a:9c:75:9b:
82:4a:32:80:fd:1e:51:78:82:01:71:ad:2b:db:99:
49:9c:08:02:d8:ef:0b:89:ff:43:7d:43:34:76:f3:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:9B:1C:E1:14:15:01:A0:DD:9A:2B:92:8B:ED:39:78:E5:5B:57
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KcibHOEUFQGg3ZorkovtOXjlW1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:68:cb:7b:ff:88:73:2d:f2:24:88:02:74:9b:50:53:72:51:
95:66:93:fe:2d:d3:ec:a1:63:b3:ce:50:cc:b7:f8:e4:1e:00:
6f:27:80:e0:81:70:b2:f2:8e:e4:61:ac:59:94:70:4f:c9:2d:
70:1c:3b:ec:2f:b6:59:16:90:bb:90:c7:d0:21:25:ce:07:fd:
3f:a7:7c:9b:59:d9:b8:93:6b:cf:2b:63:cf:9a:3d:5d:80:82:
ff:c8:20:7c:c7:40:04:0d:98:8d:ab:c2:ad:19:b2:bb:f4:5c:
a5:38:61:0d:0a:25:fd:2e:0a:bc:f1:d1:46:1f:f5:b7:c2:4f:
55:0e:66:55:7d:f2:f0:be:41:56:4b:2f:2f:d2:2e:ca:2a:30:
33:81:89:43:99:4c:21:ca:a4:b7:80:c8:3a:cd:e6:8a:56:f1:
7a:03:47:64:e2:e3:64:77:45:9a:84:50:c5:0d:a0:d0:a4:17:
34:19:60:6a:ed:73:1f:2d:11:41:75:e3:a7:18:24:8f:73:be:
a7:16:0f:6c:f5:a2:11:4c:8b:b1:86:9b:51:72:c2:a1:81:3f:
9b:ab:07:c1:5a:cd:09:4a:24:af:72:bc:74:ac:49:8e:20:7e:
97:22:ea:af:71:17:8f:90:f3:bd:56:16:24:5d:ec:5d:fb:3f:
27:37:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:53 2024 by rpki-client on console-fra.rpki-client.org