Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/F7iH7KQb_yXmY33t7vG-m4XsLZ0.roa
File: F7iH7KQb_yXmY33t7vG-m4XsLZ0.roa (raw, json)
Hash identifier: eyrd1D9zvCn53KdZu6EOPVNT0djJHj5cAZMLCUwiWro=
Subject key identifier: 17:B8:87:EC:A4:1B:FF:25:E6:63:7D:ED:EE:F1:BE:9B:85:EC:2D:9D
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 01856BA5864E5916F54E7DE1FD1F43231B84
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/F7iH7KQb_yXmY33t7vG-m4XsLZ0.roa
Signing time: Sun 01 Jan 2023 04:44:47 +0000
ROA not before: Sun 01 Jan 2023 04:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17350
IP address blocks: 204.13.56.0/22 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:86:4e:59:16:f5:4e:7d:e1:fd:1f:43:23:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Jan 1 04:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b887eca41bff25e6637dedeef1be9b85ec2d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:cd:b8:78:29:e2:da:8a:73:c7:ac:28:e0:
12:fc:e3:b2:8c:88:22:36:d0:83:a2:8f:1d:2a:67:
00:a6:db:6b:af:22:36:53:a7:21:fc:8e:c3:e9:de:
60:07:ff:38:f5:8e:94:63:93:55:35:34:17:b6:7f:
6e:8f:3f:72:1e:60:bd:dd:52:4c:2f:41:81:4d:ee:
23:6d:d0:4b:29:e3:e9:3a:bc:0b:1f:9d:f2:c7:01:
97:bf:92:fa:2d:51:81:fb:a4:d2:bf:f6:73:e4:1b:
fd:41:c0:18:6a:54:cd:b3:4b:43:eb:35:de:a7:6e:
be:b8:0d:63:ad:09:6a:26:74:fc:8c:d0:d7:68:6c:
ae:fd:ee:53:8f:e9:cb:62:36:ae:43:58:f4:1f:15:
bf:81:a6:7b:e0:15:e1:9a:84:57:69:69:20:ed:12:
07:63:01:ef:35:17:a8:84:57:5a:22:86:35:66:cc:
bb:66:98:b6:51:aa:92:3e:33:7f:33:bf:f1:06:0d:
81:63:c2:54:c7:b3:c5:d7:10:be:e5:07:73:c0:db:
b9:41:fd:78:0c:a6:1e:72:81:ff:1f:08:96:30:79:
69:77:f1:e2:87:a7:e0:ef:28:ca:88:67:56:4d:58:
26:e2:53:27:f6:85:9e:fd:d3:dd:ed:d3:4d:7b:f4:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:87:EC:A4:1B:FF:25:E6:63:7D:ED:EE:F1:BE:9B:85:EC:2D:9D
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/F7iH7KQb_yXmY33t7vG-m4XsLZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.13.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:ab:ad:f4:10:e5:b8:c2:5b:33:57:be:b5:7d:35:ea:c2:bf:
cc:31:35:1a:66:4b:86:3d:25:90:b0:4a:41:49:6d:13:d4:5e:
3c:9a:90:89:86:a7:09:0c:5d:68:6f:20:a9:65:13:98:1a:a2:
a1:47:d3:92:6b:38:1e:11:71:fa:f9:08:46:43:41:6e:3a:eb:
02:a5:55:53:ec:e0:fe:c6:84:64:8f:4f:33:79:f7:5e:c5:73:
83:83:b9:66:36:e7:65:e3:84:0e:db:ae:66:01:9c:88:bb:c1:
4d:ce:1f:a5:ae:a8:fd:27:f6:bd:d4:e8:1f:c3:8b:2f:d4:b6:
71:a3:27:77:07:6a:1d:3f:ac:e9:ed:dc:c3:cd:9b:1d:e0:e3:
1f:14:1e:4e:69:a2:7b:98:c2:84:45:83:a9:c8:5d:4e:b9:a1:
f2:16:ad:70:2d:43:7e:24:38:94:d9:58:a5:0d:e4:eb:7a:04:
f1:7d:47:93:9d:b0:2c:93:52:d9:a6:70:3a:7a:8c:29:9e:e8:
d2:f9:4e:7e:28:56:b5:b9:60:98:c1:52:fe:68:31:d6:6c:fa:
41:a8:ed:72:bc:51:e6:5b:8f:19:10:34:f3:7c:c3:bf:b0:6f:
05:18:5a:dc:27:f7:25:a3:39:61:17:cd:24:66:59:c1:ab:52:
83:aa:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org