Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PX_dXY0PUIzizvuVUBxmO7Ax7MQ.roa
File: PX_dXY0PUIzizvuVUBxmO7Ax7MQ.roa (raw, json)
Hash identifier: J2AfOUBdgzEPEBJn4d+xVpUUgrqbYTafOUZ0B/BXDi0=
Subject key identifier: 3D:7F:DD:5D:8D:0F:50:8C:E2:CE:FB:95:50:1C:66:3B:B0:31:EC:C4
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018570707C9C7BCD54DDC6DECC9AA217F010
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PX_dXY0PUIzizvuVUBxmO7Ax7MQ.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 217.25.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7c:9c:7b:cd:54:dd:c6:de:cc:9a:a2:17:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7fdd5d8d0f508ce2cefb95501c663bb031ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:a7:86:33:66:5a:dd:c0:26:a5:df:22:c0:
fa:f3:d6:7c:d9:18:8c:b8:63:bf:e5:ed:52:ba:de:
52:44:0e:23:1a:1d:84:81:d5:e8:6a:32:cf:97:d8:
99:2f:ea:2e:6f:63:de:b5:a0:b3:95:b4:c9:a9:20:
e8:62:06:a1:a2:58:fa:62:a4:55:46:85:d3:3a:d0:
f3:fa:54:a7:fe:7e:57:da:f7:76:db:f7:31:74:31:
e7:82:e4:4a:f6:cb:1a:35:47:88:90:0b:d0:df:1a:
33:a5:e1:5a:7c:b0:eb:e0:4f:ad:c2:ea:c8:cc:c5:
78:de:02:71:cd:5a:4f:73:0d:6d:ef:51:ab:12:ae:
53:49:b5:da:2d:55:90:73:d0:8a:92:d6:bc:13:8c:
22:72:69:26:16:fd:4d:4a:ee:a6:a0:62:e6:55:7e:
26:55:9c:f0:69:83:4e:de:d0:15:9d:8c:0c:d2:c7:
62:60:5b:3e:a6:ae:85:62:0c:c4:86:d5:c7:d4:c2:
f7:49:00:14:6d:43:d5:ac:eb:28:e5:ee:7c:5d:15:
74:52:b0:1d:70:d0:b5:a9:f0:fc:7f:29:2a:2e:0c:
a7:66:5b:cb:a0:93:83:63:1a:88:d6:b7:0b:13:76:
36:ed:43:5b:79:3e:15:d7:fb:74:2b:6b:51:c3:06:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:DD:5D:8D:0F:50:8C:E2:CE:FB:95:50:1C:66:3B:B0:31:EC:C4
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/PX_dXY0PUIzizvuVUBxmO7Ax7MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c5:f1:fd:a9:d4:eb:02:a8:2e:33:82:f7:9f:fd:e1:77:de:
38:54:53:2d:99:64:1b:41:7a:82:8a:ca:f9:33:f2:0b:83:9b:
4d:2a:91:02:b1:1e:6e:a2:88:df:64:67:08:a8:3f:e4:ee:3c:
8b:86:c1:76:fc:d8:d7:05:6c:fb:ef:0a:08:a7:da:ef:23:ea:
7a:8c:74:34:89:76:ca:3f:e8:c6:c6:be:70:9a:64:74:dd:a9:
d9:94:df:ec:5a:03:c2:22:13:79:ee:28:31:7b:1d:c6:a8:bb:
0f:55:95:3f:a1:1c:d2:38:b2:41:ac:b2:f9:11:91:2b:eb:a4:
93:02:97:1b:ed:44:1c:ca:b1:28:0a:bf:aa:b9:18:88:4d:7e:
2b:c0:f0:74:e5:33:33:f1:1a:9c:be:26:db:5a:7a:6f:10:dc:
64:5e:af:69:40:ef:1f:41:21:64:c8:5b:cf:20:71:cd:da:86:
06:1d:cd:15:10:27:17:71:f8:0d:40:8b:e4:ed:d4:0d:94:18:
5a:db:8b:5e:ea:f0:ec:b6:19:07:2b:5a:80:8c:e3:70:a8:10:
48:55:05:2e:6a:b2:a6:49:05:dd:fa:42:04:b4:92:2c:e2:f4:
9c:96:9a:d5:3f:77:1d:a0:a8:80:8b:44:94:c8:85:34:6b:4a:
03:89:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:13:00 2023 by rpki-client on console-fra.rpki-client.org