Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6P925KVmehiROuk59VpzsYMMsjQ.roa
File: 6P925KVmehiROuk59VpzsYMMsjQ.roa (raw, json)
Hash identifier: QXv2SK7iP2rBGyrvtgHZzgNYVNOlZnKmazB+EWWIP0o=
Subject key identifier: E8:FF:76:E4:A5:66:7A:18:91:3A:E9:39:F5:5A:73:B1:83:0C:B2:34
Certificate issuer: /CN=07f5ccf6abd7582cc51940a76f99505633982bb4
Certificate serial: 018820E180DC903FA85C3BA52DA55D8BC8BF
Authority key identifier: 07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6P925KVmehiROuk59VpzsYMMsjQ.roa
Signing time: Mon 15 May 2023 19:27:09 +0000
ROA not before: Mon 15 May 2023 19:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.114.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:e1:80:dc:90:3f:a8:5c:3b:a5:2d:a5:5d:8b:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f5ccf6abd7582cc51940a76f99505633982bb4
Validity
Not Before: May 15 19:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ff76e4a5667a18913ae939f55a73b1830cb234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:8a:be:53:2e:9c:bf:02:bd:1f:6f:eb:27:
1d:dd:68:97:70:f8:45:e2:d4:6b:27:25:d0:eb:55:
0b:56:45:56:e6:1f:99:54:2e:6c:2b:39:3c:6d:7d:
54:3e:d7:1d:fa:96:67:be:f3:40:7f:cd:fe:87:4a:
0c:4e:a7:d8:e8:0a:66:f7:85:61:b5:b0:f6:fc:c2:
4e:ba:51:d4:a9:71:a9:9d:21:0e:96:a8:53:06:b5:
d0:a0:03:eb:94:69:9f:60:c7:02:cc:25:3c:72:11:
9f:5c:4d:d3:4d:48:8e:db:89:24:8b:9a:f9:52:0b:
dd:b4:b3:04:c5:48:86:9a:4e:d9:d0:f4:03:a1:2c:
b3:29:01:51:95:26:a7:f8:5b:06:b7:e5:81:7d:a2:
c1:c1:7d:10:60:87:d4:65:0d:11:52:61:2a:10:b1:
a4:63:1d:35:16:0b:1a:8c:44:ec:d1:aa:bb:e6:f1:
1c:8c:f3:5f:75:58:9b:3a:10:f0:a1:28:4c:42:72:
9e:3a:06:00:e6:5e:ad:d2:d2:0d:3e:2e:21:a8:75:
ec:a6:d3:78:87:99:b1:f7:7e:9c:aa:bf:75:cd:9f:
a4:89:d7:b7:a3:78:42:b2:09:d2:08:de:35:b4:74:
e4:fa:ae:0f:97:56:b9:ca:49:9e:d0:0b:b8:12:c0:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:76:E4:A5:66:7A:18:91:3A:E9:39:F5:5A:73:B1:83:0C:B2:34
X509v3 Authority Key Identifier:
keyid:07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6P925KVmehiROuk59VpzsYMMsjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.39.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ea:c3:39:71:4f:53:02:6e:dd:f2:c9:03:f5:61:40:9e:c3:
3b:7d:3c:aa:7a:7c:5b:a0:18:e8:f2:f6:5a:51:b7:ec:5d:b6:
d2:0c:1f:34:9b:60:d8:e2:92:10:eb:a7:2b:47:5f:fd:8c:64:
49:ba:34:27:a8:0e:38:aa:9e:f7:c8:26:b8:df:0f:87:1e:55:
ac:41:88:51:92:6a:cc:0f:0c:ca:36:32:60:17:f6:48:c1:16:
35:b3:c9:0e:63:ec:90:89:89:f1:5d:fe:8e:ef:81:10:4b:8c:
e6:d3:1a:42:b8:a9:27:c0:ee:fd:da:b5:7f:a9:f1:43:ff:bd:
d4:9c:9d:35:30:26:0c:25:11:5a:f0:28:dc:4a:1f:f9:c5:08:
88:a9:85:25:d0:41:07:bb:a8:f4:14:98:76:e9:45:62:1c:f7:
88:99:09:2f:04:64:23:01:37:f9:f9:ea:8a:4a:78:51:58:49:
b8:c3:94:f1:19:17:97:e5:65:0d:95:13:0a:36:02:39:7e:83:
ec:29:32:05:00:5a:8c:29:84:0f:65:4e:7a:25:d2:25:10:c0:
75:53:69:1b:f5:f5:91:56:45:1f:dd:52:a1:0f:3c:79:73:20:
7f:91:84:6d:e8:81:d2:71:f4:63:5a:e4:34:75:3a:98:b1:24:
40:8c:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:48 2023 by rpki-client on console-ams.rpki-client.org