Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/0iuk-ohdPqYS-bFUQHY5es0RWE4.roa
File: 0iuk-ohdPqYS-bFUQHY5es0RWE4.roa (raw, json)
Hash identifier: YSFzhx3rR0fLcLFVsFNkgZXBu4/oRdvbOpYo+G3Zv+4=
Subject key identifier: D2:2B:A4:FA:88:5D:3E:A6:12:F9:B1:54:40:76:39:7A:CD:11:58:4E
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 01856E8B3BA14810EDEDEB1C25DB9F8EA5A3
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/0iuk-ohdPqYS-bFUQHY5es0RWE4.roa
Signing time: Sun 01 Jan 2023 18:14:56 +0000
ROA not before: Sun 01 Jan 2023 18:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20658
IP address blocks: 217.170.224.0/24 maxlen: 24
217.170.225.0/24 maxlen: 24
217.170.226.0/24 maxlen: 24
217.170.230.0/24 maxlen: 24
217.170.231.0/24 maxlen: 24
217.170.232.0/24 maxlen: 24
217.170.233.0/24 maxlen: 24
217.170.227.0/24 maxlen: 24
217.170.228.0/24 maxlen: 24
217.170.229.0/24 maxlen: 24
217.170.237.0/24 maxlen: 24
217.170.238.0/24 maxlen: 24
217.170.239.0/24 maxlen: 24
217.170.234.0/24 maxlen: 24
217.170.235.0/24 maxlen: 24
217.170.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:3b:a1:48:10:ed:ed:eb:1c:25:db:9f:8e:a5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Jan 1 18:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d22ba4fa885d3ea612f9b1544076397acd11584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:e4:82:47:bd:d9:f7:18:c6:7f:fc:c5:75:
6a:8c:1f:ae:a4:a9:05:48:a9:5f:3e:ad:ea:61:ca:
6a:95:86:22:16:7f:c9:1e:1a:da:dc:59:97:79:41:
9b:ee:ad:0d:c5:cc:48:c5:5e:48:80:ec:be:96:31:
7d:07:fd:40:8a:97:01:e2:21:9d:05:cb:b0:69:d9:
62:43:28:87:ae:fb:aa:0b:d4:0b:ea:25:89:6e:a2:
a3:b9:2e:e8:18:34:77:39:0b:e8:06:ac:57:ba:c1:
51:67:64:c0:f6:18:63:04:21:6c:6d:fc:f3:16:3e:
ca:f5:70:05:2c:f0:c3:d8:8e:0e:1d:22:42:e6:db:
bf:0a:9b:ae:0a:80:8a:58:e4:46:31:ea:ac:77:1d:
b4:3f:50:d3:b0:1e:a9:1b:b4:21:44:54:8d:78:af:
d9:08:bd:b5:86:4f:6a:e9:3d:6b:0c:e9:d9:a5:a0:
0a:e9:b2:86:29:18:20:0b:c7:ee:10:aa:dc:7c:74:
97:9e:40:af:b3:28:26:da:20:1d:bd:a6:26:5d:a6:
fb:62:68:b7:97:40:d1:66:7a:23:16:01:12:2e:fe:
08:6b:31:cf:40:4f:66:10:bc:c5:bc:36:fa:4d:cd:
98:db:ae:d7:7b:76:e6:d7:4d:1c:e9:7e:58:59:a1:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:A4:FA:88:5D:3E:A6:12:F9:B1:54:40:76:39:7A:CD:11:58:4E
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/0iuk-ohdPqYS-bFUQHY5es0RWE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.170.224.0/20
Signature Algorithm: sha256WithRSAEncryption
59:04:48:24:c1:d9:54:5d:aa:70:89:1e:f6:88:95:aa:81:e0:
dd:6e:4a:fe:22:2c:c7:a3:5a:63:46:76:ff:48:b5:e4:69:d5:
77:8f:f7:fd:3b:a8:a3:e0:87:f5:a4:8c:f6:64:4f:46:73:b7:
ed:ff:30:ce:f8:49:03:9c:54:90:56:c6:b1:dd:ac:f9:af:a1:
1f:f8:a8:f9:96:21:01:68:c2:86:90:f1:62:40:82:b7:96:70:
68:5f:41:44:51:78:02:73:7f:ea:40:4f:e4:81:a9:3c:fd:4a:
a2:98:e1:2a:80:e0:03:d6:21:5f:98:a4:57:14:af:d3:5c:ff:
b7:4e:90:f5:18:0d:8e:1e:0f:fb:23:b9:7e:71:da:5d:20:04:
3d:aa:90:f6:dd:7c:1e:43:eb:78:18:7f:23:78:23:43:c1:10:
92:e6:9a:02:54:a0:15:b4:aa:d9:12:dd:8b:df:1e:7b:49:d0:
9f:b9:fd:84:57:b3:c2:d0:d8:83:2f:f1:ef:ee:a9:d0:aa:59:
b2:d2:66:76:40:76:a3:81:8e:c4:cf:37:8a:4d:9b:05:4d:2d:
41:4a:8e:35:16:15:4a:81:c1:1c:73:ae:8d:5f:a6:d0:6e:4e:
78:44:42:be:67:8a:d1:d8:ee:f9:f8:01:d7:bf:b2:3b:b9:2d:
81:04:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org