Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9ty3IZoQcX-wMcBuphrKk64_7-Y.roa
File: 9ty3IZoQcX-wMcBuphrKk64_7-Y.roa (raw, json)
Hash identifier: KE+J78+e17RqllNTfkHEqRjjBlr+ZtS12JivSAvtWc4=
Subject key identifier: F6:DC:B7:21:9A:10:71:7F:B0:31:C0:6E:A6:1A:CA:93:AE:3F:EF:E6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0193C77CC2E2AF303C60E036C7DF7922AF94
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9ty3IZoQcX-wMcBuphrKk64_7-Y.roa
Signing time: Sat 14 Dec 2024 23:24:22 +0000
ROA not before: Sat 14 Dec 2024 23:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212177
IP address blocks: 128.0.117.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Dec 2024 08:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c7:7c:c2:e2:af:30:3c:60:e0:36:c7:df:79:22:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Dec 14 23:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6dcb7219a10717fb031c06ea61aca93ae3fefe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:fa:41:03:89:ac:b9:5a:1d:83:d0:40:37:
e7:1d:37:36:40:60:2b:5d:b9:40:25:1c:22:bf:78:
8b:26:e8:ca:1e:bd:28:3a:ea:38:87:f4:80:cd:9f:
37:26:1f:79:7b:39:da:62:e8:70:a0:3e:5e:b0:9a:
9a:8a:c3:ff:2c:42:d3:b8:86:e1:a3:ca:2c:a8:86:
34:ae:f4:28:bc:b6:a6:d2:60:12:99:a6:85:4e:29:
ed:69:ac:c4:83:9b:52:0f:eb:8a:28:2a:b3:42:c3:
57:72:52:13:ea:fe:ec:6b:e1:c3:66:a5:e7:98:bc:
2c:51:85:64:60:0a:a1:01:bf:a5:8a:fd:6b:b8:71:
53:ef:a8:60:4c:a4:af:00:bb:fa:5d:62:97:0f:bf:
d3:36:61:1e:a1:73:8b:b2:7a:0d:12:a4:44:9f:42:
8a:fe:6b:40:3d:28:a8:7e:a0:fc:94:5a:e9:03:85:
7a:b8:f6:e6:64:f6:e6:c2:ef:99:0d:ea:52:84:e2:
18:f3:95:90:b0:b5:7f:51:33:8f:a0:28:17:5a:f5:
7f:ce:35:bb:78:ff:ba:0f:ca:2b:0e:7b:22:85:31:
bf:bb:d2:be:79:3d:e7:7e:dc:8a:9d:87:8f:92:71:
08:d5:58:53:ba:b1:06:4a:37:6f:ec:87:ea:80:a1:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DC:B7:21:9A:10:71:7F:B0:31:C0:6E:A6:1A:CA:93:AE:3F:EF:E6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9ty3IZoQcX-wMcBuphrKk64_7-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.117.0/24
Signature Algorithm: sha256WithRSAEncryption
87:30:b8:93:7c:9b:0d:22:28:51:17:8e:e8:2e:23:09:e3:e4:
a0:20:8d:3f:ce:ba:9a:97:81:1c:f3:b9:2a:e7:53:ed:b6:d8:
76:c3:6e:a4:d5:31:b8:fb:02:70:77:0c:8c:bf:46:ba:99:26:
34:5b:09:7c:df:ed:75:f7:14:59:00:bf:03:95:ed:8a:0c:68:
8b:02:a4:1f:3e:ce:2c:03:ee:c9:67:87:2d:67:9e:ff:84:3d:
21:1a:a2:bf:8a:38:dc:33:9e:2d:4a:93:a7:56:3b:02:a4:88:
3d:82:1b:24:49:dd:d9:dd:c0:bb:89:2f:74:f8:bb:f2:4f:12:
51:06:5d:28:f2:df:9f:bb:8e:67:ff:a9:00:bd:46:4c:0d:cf:
dc:be:d6:d3:ef:95:0c:6e:48:19:80:11:3a:f6:ba:ee:44:b2:
1f:0e:5b:73:4f:4a:4c:e8:05:2f:fa:16:9e:38:5f:ff:5e:76:
0d:25:3a:a0:5b:17:c2:2d:88:c0:ff:44:b5:ed:8b:7d:f3:8a:
5e:ce:8a:3d:cb:86:45:ef:5d:4d:40:76:3d:fb:26:e6:fa:76:
c9:13:f5:77:bc:36:9e:a9:66:eb:a1:91:18:b7:63:42:3a:03:
78:9c:d8:b4:ef:8f:f4:70:9e:3b:da:3b:24:ee:62:9e:c8:eb:
4c:92:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:47 2025 by rpki-client