Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/M6uhR5Wwh60Rr3RC-oC8NLxBQbo.roa
File: M6uhR5Wwh60Rr3RC-oC8NLxBQbo.roa (raw, json)
Hash identifier: ROjZkbB1DrxKEcUSJdu+lEALr5pI+mYffrgHpBEFldo=
Subject key identifier: 33:AB:A1:47:95:B0:87:AD:11:AF:74:42:FA:80:BC:34:BC:41:41:BA
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 018F7CB546276028C306418B9FBBB1E13067
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/M6uhR5Wwh60Rr3RC-oC8NLxBQbo.roa
Signing time: Wed 15 May 2024 14:43:25 +0000
ROA not before: Wed 15 May 2024 14:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209824
IP address blocks: 217.113.54.0/23 maxlen: 23
217.113.54.0/24 maxlen: 24
217.113.55.0/24 maxlen: 24
2a13:e700::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:b5:46:27:60:28:c3:06:41:8b:9f:bb:b1:e1:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: May 15 14:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33aba14795b087ad11af7442fa80bc34bc4141ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:56:e4:29:68:68:1d:13:cf:1b:cb:9b:d8:
dc:6e:71:88:8e:17:44:21:36:eb:a3:e9:3a:3b:92:
30:75:27:0c:6d:98:26:2a:ec:c0:90:f4:b7:70:8d:
fb:95:fb:42:55:56:28:72:54:5b:2b:aa:c0:63:a8:
65:f6:4f:d6:34:8b:ed:1f:36:c6:bf:1d:4a:6c:1b:
43:a9:90:19:22:60:1c:db:c8:ce:54:45:80:86:16:
2c:21:2b:e7:06:49:73:c5:d1:5b:b1:58:1e:15:a0:
8e:6a:77:0c:e8:ea:48:f3:17:2c:5e:de:df:4d:b0:
e6:d4:f9:29:ee:d9:bb:ab:68:14:3e:3a:8d:7e:2b:
eb:fe:b9:62:3e:f3:05:c8:63:51:1d:2e:1b:1d:e6:
3d:9d:ff:9a:04:4b:0d:bb:04:b3:ab:e9:02:6c:c6:
4a:e7:d4:e7:c8:17:a5:43:a4:09:c4:7c:e0:ee:be:
1e:5c:45:25:75:05:6b:d6:a6:dc:26:4a:5a:b3:1e:
5d:77:1b:0c:e9:0d:cf:b4:d4:49:f1:85:54:f8:d1:
f7:e9:f5:86:e6:e3:ab:88:97:f3:0f:19:f2:99:6d:
e1:a5:e9:ce:fb:fa:77:71:61:2d:d7:d5:90:4d:e8:
90:05:07:c5:fc:76:b7:d1:93:95:a4:46:c2:81:84:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:A1:47:95:B0:87:AD:11:AF:74:42:FA:80:BC:34:BC:41:41:BA
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/M6uhR5Wwh60Rr3RC-oC8NLxBQbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.54.0/23
IPv6:
2a13:e700::/48
Signature Algorithm: sha256WithRSAEncryption
1a:07:1c:66:4b:a8:97:a3:6a:29:8c:be:cd:4c:0f:57:8e:69:
df:d0:da:ca:a9:bc:48:b4:0b:a8:96:a4:18:97:1d:d1:84:47:
41:09:52:61:71:4d:dd:87:8f:31:74:84:b3:af:05:a8:98:97:
ab:75:79:d9:26:8f:15:09:d0:0e:1e:01:58:f2:43:c7:41:e6:
0d:c2:d7:52:22:ea:fa:44:64:d7:de:22:21:d7:84:bd:cc:87:
bd:98:a2:33:da:30:38:02:30:ad:fd:a3:99:a2:0a:a2:c7:67:
90:6e:51:5c:fe:01:81:42:e6:67:af:ea:73:f3:c1:15:62:1c:
92:96:80:14:35:d3:94:ba:3b:b5:18:0f:a3:be:93:90:5a:08:
c7:a5:c0:68:c1:3c:bf:88:86:17:fb:f1:77:fb:90:f9:ff:fd:
1c:f8:94:d8:6f:78:29:7d:ca:ed:55:9d:f6:26:1e:a7:31:83:
f0:7d:f6:2d:29:b0:c1:c5:27:3c:56:88:3b:25:4a:fa:1f:e2:
27:5d:f2:20:dd:d9:38:93:90:7f:bc:38:6a:2c:11:c1:75:3f:
93:f3:79:c2:29:d8:4f:ea:aa:05:09:2d:cf:99:48:fa:f4:20:
7e:c2:96:2d:2a:f8:74:c0:4e:57:25:4d:27:87:f0:71:11:4e:
9c:4b:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:56 2025 by rpki-client