Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/OIU2dYspC6iMmBScAZJK58jtt70.roa
File: OIU2dYspC6iMmBScAZJK58jtt70.roa (raw, json)
Hash identifier: nYPqOvjCs0tVRwActRfq3eSR3fAk1WIUScHgkr/PhLc=
Subject key identifier: 38:85:36:75:8B:29:0B:A8:8C:98:14:9C:01:92:4A:E7:C8:ED:B7:BD
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 01856BD379D317D702090A4A5E4543CA3381
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/OIU2dYspC6iMmBScAZJK58jtt70.roa
Signing time: Sun 01 Jan 2023 05:34:59 +0000
ROA not before: Sun 01 Jan 2023 05:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21465
IP address blocks: 217.23.96.0/20 maxlen: 20
217.23.96.0/21 maxlen: 21
217.23.104.0/21 maxlen: 21
217.23.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:79:d3:17:d7:02:09:0a:4a:5e:45:43:ca:33:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Jan 1 05:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388536758b290ba88c98149c01924ae7c8edb7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:56:46:1c:0a:7b:50:ab:21:1a:a6:c7:b3:
08:d8:fb:ae:e8:a4:48:7a:1a:f2:6d:71:b5:2b:a5:
a1:49:3f:06:79:de:63:eb:ab:ef:01:1e:c4:06:6d:
b8:6c:74:02:5c:96:83:b2:16:91:c8:20:e0:4a:2c:
8c:6f:70:d6:fb:c7:66:c9:2f:aa:49:9e:8a:6f:a0:
25:a1:70:6f:8f:a7:9a:ec:a2:dd:ba:94:65:ea:65:
49:cd:a5:01:0a:31:2b:6e:c8:00:f5:cb:a1:50:7d:
81:63:9b:f2:de:ea:5c:c0:64:fb:67:db:2c:81:1d:
78:56:98:e9:3a:e3:19:85:81:a2:04:9b:4e:77:08:
6a:9b:35:66:75:f3:d4:f4:bc:69:7e:1a:6b:d5:6a:
dd:3f:2f:0d:42:be:97:11:df:d4:56:bf:a7:d1:9f:
fa:b7:6c:c7:f9:32:92:29:65:f3:b6:f8:7e:77:33:
b8:66:56:9a:c9:1d:78:4d:39:75:7b:1c:eb:2a:10:
66:ce:65:6a:d8:fd:32:91:f1:6f:50:a4:d7:60:19:
d5:06:29:fc:e9:bf:01:48:b4:0d:49:13:d5:23:f5:
87:c8:8d:81:f7:62:4d:12:c0:25:a4:91:a2:0c:57:
d4:ff:87:bf:5a:5f:e5:4f:c6:55:7c:8a:d9:ed:46:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:36:75:8B:29:0B:A8:8C:98:14:9C:01:92:4A:E7:C8:ED:B7:BD
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/OIU2dYspC6iMmBScAZJK58jtt70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:4d:69:3a:11:c6:1a:f9:8c:da:71:b6:ef:97:0a:0a:79:c7:
f6:82:29:33:d9:45:ae:72:1f:45:70:8c:52:8e:ad:76:5d:9b:
77:a6:7d:9b:39:a2:20:b6:a9:9f:a1:22:c5:75:1e:e8:1c:71:
84:76:62:e4:c2:0e:ae:60:15:b7:6e:25:75:bf:d5:a0:85:68:
95:75:73:4c:da:24:e9:82:d6:3a:4a:22:7e:5d:5c:6c:b9:04:
67:61:cd:4c:fc:22:78:1a:be:65:79:a7:ce:37:8d:50:a4:a4:
02:d6:4b:9a:8c:1f:68:a1:9e:7a:07:c6:75:c6:90:c8:33:0d:
c9:26:82:d0:8a:da:12:f5:b8:6a:ea:61:e6:5d:cb:b7:9b:bb:
ac:70:5c:05:56:35:43:88:26:7e:cc:ab:b0:53:15:e6:0d:05:
f4:8c:7a:36:13:72:4b:3c:45:d8:d1:b9:7d:45:41:3a:43:67:
9e:b3:4c:06:50:bf:b6:a4:fd:59:6f:f3:f9:7c:22:0d:53:ed:
92:31:48:f0:1c:b7:f5:de:20:30:59:63:a2:c6:7f:03:85:3a:
e8:b1:3b:17:7e:82:08:20:90:55:43:55:72:18:e6:0a:0a:24:
da:a1:42:2f:67:b3:36:8f:96:94:d9:5a:09:38:00:1b:67:af:
14:81:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org