Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/Ahz5yJpZpW7l1qPThL9fJ4U7IrM.roa
File: Ahz5yJpZpW7l1qPThL9fJ4U7IrM.roa (raw, json)
Hash identifier: r1MGoDePSWPXS7o4Er1lApedmvmQyk5h7dpuI1rJojw=
Subject key identifier: 02:1C:F9:C8:9A:59:A5:6E:E5:D6:A3:D3:84:BF:5F:27:85:3B:22:B3
Certificate issuer: /CN=07f5ccf6abd7582cc51940a76f99505633982bb4
Certificate serial: 01865E1591E34E793D5A0045E1C0574F90F0
Authority key identifier: 07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/Ahz5yJpZpW7l1qPThL9fJ4U7IrM.roa
Signing time: Fri 17 Feb 2023 06:35:17 +0000
ROA not before: Fri 17 Feb 2023 06:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 217.114.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:15:91:e3:4e:79:3d:5a:00:45:e1:c0:57:4f:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f5ccf6abd7582cc51940a76f99505633982bb4
Validity
Not Before: Feb 17 06:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=021cf9c89a59a56ee5d6a3d384bf5f27853b22b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:9f:5a:1a:e8:87:ba:03:7d:71:c1:44:1b:
64:aa:ea:a2:0a:f6:26:d0:8e:4c:6d:91:b1:42:be:
b4:57:f3:e3:89:b6:9a:d0:03:9f:0e:59:8a:a1:2e:
e4:1d:0b:47:8a:60:e7:2a:18:3d:0a:66:80:85:e6:
46:4c:da:9f:7c:f2:f4:74:ab:e1:22:e5:54:04:98:
ba:66:1d:ff:73:cd:27:3e:22:88:93:6e:de:3c:a5:
ba:74:0d:ae:15:38:cc:74:76:2f:43:a4:2f:e4:0e:
8c:f6:d2:f9:7f:18:d8:8c:87:b9:7b:c7:d6:95:fd:
fa:cb:61:b1:e4:db:3a:68:a1:d7:22:01:d0:af:1a:
35:94:d7:06:0b:9d:21:fd:4c:9d:15:51:fe:be:30:
ab:15:cd:3c:dd:45:44:90:48:21:88:03:ba:01:44:
2f:71:19:86:01:10:12:ca:25:00:12:c4:fd:38:44:
aa:a2:45:8b:b6:2c:38:71:d0:f5:cd:da:e9:02:77:
41:d2:04:80:d7:b5:03:89:66:18:e4:46:61:87:c8:
bb:6c:19:9a:1a:fa:d0:6c:51:c9:57:d8:39:a2:c6:
fb:e7:4b:cc:f3:ba:a4:f8:13:81:98:7d:cb:91:d5:
b1:9a:5f:dd:2c:32:c3:0f:07:fb:44:63:d7:6b:fa:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:F9:C8:9A:59:A5:6E:E5:D6:A3:D3:84:BF:5F:27:85:3B:22:B3
X509v3 Authority Key Identifier:
keyid:07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/Ahz5yJpZpW7l1qPThL9fJ4U7IrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bb:8c:58:ce:57:3d:c1:b1:21:d9:95:7d:be:a8:e0:b5:1d:
07:ac:3c:2b:41:6b:29:a9:98:16:22:d7:02:80:35:e6:bb:6f:
13:ae:7e:a6:5e:35:35:c8:7a:22:4f:d4:ae:45:2e:3b:c9:e5:
43:18:14:6c:98:c7:03:62:4a:83:13:9f:79:9f:d4:9b:86:19:
26:e0:d8:33:7f:20:fd:80:0a:2c:98:d3:5d:1f:1e:d7:a5:2f:
80:c9:11:6f:6d:2d:18:73:e8:c9:2a:e8:11:0f:24:12:32:ab:
16:35:b5:76:97:c2:74:16:58:02:5e:2c:d9:04:dc:8d:d3:a1:
a2:00:22:a1:f9:e1:4d:4c:74:1f:7c:20:3a:73:e1:5c:a3:75:
20:a4:28:c7:83:fe:82:7e:91:46:d7:6a:75:50:3d:b3:60:2d:
bf:8d:f2:c5:9a:8a:78:c6:b0:c9:8d:37:88:c0:3d:a6:d5:6f:
ca:e9:23:2a:cf:6b:b8:81:3e:c2:56:d7:07:81:60:5c:f9:46:
86:cd:48:4e:cd:b5:52:bb:0a:a9:5c:0a:b0:c5:ce:68:ed:cf:
16:ac:55:a4:dc:75:29:96:0e:17:f1:9c:b3:6c:45:cb:1b:75:
4e:b2:2c:49:d8:5a:07:6f:21:d7:ec:20:04:89:7f:d0:27:fc:
90:b5:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:48 2023 by rpki-client on console-ams.rpki-client.org