Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pNcdPjGoXaM3MDeGiKOgEoZYx0U.roa
File: pNcdPjGoXaM3MDeGiKOgEoZYx0U.roa (raw, json)
Hash identifier: 8E4JNOlZ+nUEwp01Jkbls/8lC7D8Go1sAryfDThrhd0=
Subject key identifier: A4:D7:1D:3E:31:A8:5D:A3:37:30:37:86:88:A3:A0:12:86:58:C7:45
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B1A22F4062E2810991E23B69162169
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pNcdPjGoXaM3MDeGiKOgEoZYx0U.roa
Signing time: Wed 25 Jan 2023 11:30:33 +0000
ROA not before: Wed 25 Jan 2023 11:30:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33371
IP address blocks: 217.79.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b1:a2:2f:40:62:e2:81:09:91:e2:3b:69:16:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:30:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4d71d3e31a85da33730378688a3a0128658c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:10:70:6a:92:20:22:a2:be:de:05:87:99:
b7:69:69:42:5a:b0:20:71:ee:df:fb:7b:f5:5e:85:
14:00:79:a6:dc:b7:99:cc:5e:4f:f5:e4:42:5d:fe:
8e:5b:2a:eb:36:ad:fc:91:22:af:96:c7:28:a0:ff:
8a:03:6d:31:a6:35:50:b9:77:ca:66:5a:37:90:09:
25:46:fa:d0:27:6c:0a:f3:0a:48:d4:10:45:2a:04:
24:1c:a7:8e:4e:1b:90:05:c5:73:81:9e:48:64:20:
6f:97:0a:3b:9b:c1:09:d3:d6:da:3e:aa:36:e4:99:
6d:ac:49:22:b1:52:d5:30:cf:46:6d:31:ba:6a:f1:
6a:ff:d6:91:58:7d:38:a5:d8:6b:dc:ed:8c:b5:9b:
c8:0d:58:5b:da:7f:24:ab:e6:91:d1:1e:c1:1d:80:
78:36:92:35:89:62:38:0e:3a:21:6e:57:ac:86:11:
33:07:b4:a5:9c:6e:0d:0c:82:f6:bd:f4:07:20:cc:
de:a9:36:30:8b:31:18:d4:65:f0:e6:c2:40:bb:3c:
bc:49:cf:dd:f2:da:dd:1a:8a:a8:8c:e2:b3:fd:27:
4a:f1:84:85:ad:82:ec:37:db:3f:33:df:2d:37:a6:
1b:fd:f9:a6:bf:3e:0b:05:38:cb:49:aa:7a:3b:41:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:1D:3E:31:A8:5D:A3:37:30:37:86:88:A3:A0:12:86:58:C7:45
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/pNcdPjGoXaM3MDeGiKOgEoZYx0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:05:55:67:ea:04:c6:26:98:08:7a:92:12:d1:f1:01:0b:
ab:44:f3:67:d9:5b:e5:73:0c:a0:18:ed:61:a6:21:23:50:98:
14:a5:fb:85:51:f5:d5:6d:25:41:89:db:41:aa:e0:29:3b:4c:
3a:92:05:e4:c6:70:37:d7:8a:0f:0d:e2:dc:b2:fb:5b:80:3d:
5a:c3:c4:ae:bb:58:80:b0:a5:16:af:09:a3:6e:7d:b5:7a:d2:
9b:75:8b:81:7a:fe:14:20:f7:4e:0f:f2:6c:1d:f2:db:75:ea:
b8:e4:90:6b:2b:c6:fb:fb:85:6f:e8:c0:7f:48:d3:68:9a:5e:
00:d1:14:b1:5a:09:cf:08:c9:c9:b7:fc:cf:b2:ac:bb:1e:31:
a1:b5:21:6b:6a:f9:79:f6:51:b8:58:b5:5d:0a:1b:57:26:ae:
e9:5e:ca:98:8c:82:1f:6e:e9:f9:d7:16:b8:58:d4:d2:ac:6c:
42:e7:45:d7:70:2e:ba:9a:ef:d3:b7:ba:0b:12:2a:98:ce:b7:
1e:c6:67:ac:41:ca:90:5c:dd:7b:d0:e5:cf:1f:33:5d:4e:80:
cd:41:bd:c4:e6:60:79:d9:e9:d5:2a:e1:78:de:13:d6:0d:7c:
90:f1:f7:13:26:34:17:fc:6b:d4:0e:9e:8a:77:ba:f1:94:e1:
d7:28:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:58 2024 by rpki-client on console-ams.rpki-client.org