Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fnQsZ6ShF7SDcbS3V03GVhMwP-g.roa
File: fnQsZ6ShF7SDcbS3V03GVhMwP-g.roa (raw, json)
Hash identifier: Qi8ORGT+xJNRQmZdl3H0/NIJfnluxEL1LcJXGkoGNbM=
Subject key identifier: 7E:74:2C:67:A4:A1:17:B4:83:71:B4:B7:57:4D:C6:56:13:30:3F:E8
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D0B3B6FF26C6D28B1362DD3CB22A4C7B4
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fnQsZ6ShF7SDcbS3V03GVhMwP-g.roa
Signing time: Mon 15 Jan 2024 03:47:40 +0000
ROA not before: Mon 15 Jan 2024 03:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jan 2024 04:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:3b:6f:f2:6c:6d:28:b1:36:2d:d3:cb:22:a4:c7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 15 03:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e742c67a4a117b48371b4b7574dc65613303fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:2e:b1:38:f5:88:76:e7:ad:0f:6d:12:be:
61:05:ae:88:14:72:98:83:02:c7:90:22:9e:35:70:
1f:d6:a7:6a:51:e7:4e:4d:c5:cd:57:d5:f5:cc:67:
d1:84:46:bf:3e:0d:73:01:3b:df:f1:4e:69:62:a7:
fb:8d:89:be:ca:1d:d6:01:ea:70:23:2e:8c:f7:c3:
a3:af:ee:e2:da:7f:b4:93:2e:eb:84:80:d2:9b:ef:
83:88:7a:f6:27:90:3a:6e:a0:34:da:84:69:dc:83:
ca:29:54:12:e9:7f:cf:20:19:53:a3:56:39:13:24:
cf:c5:82:46:e2:36:0b:97:2f:7d:48:35:d2:ed:97:
1b:67:f5:3d:1c:e9:bf:a0:62:6b:fd:88:df:80:27:
36:e2:49:4e:10:e1:3a:14:6a:9c:95:e0:d4:8a:df:
5f:fa:a3:68:82:71:00:37:54:72:95:eb:23:74:c2:
2a:0b:fe:30:51:76:05:12:5a:73:36:57:fe:8b:18:
a7:4f:e8:22:5a:90:5c:c9:12:95:9a:76:69:82:b0:
45:72:5e:6a:48:88:c8:ae:88:35:b2:5e:b8:fb:36:
09:f9:2c:b6:41:f3:69:b6:85:d6:26:82:5e:82:c1:
94:a7:87:a0:69:58:15:1c:cd:d4:a4:68:b3:ea:f8:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:2C:67:A4:A1:17:B4:83:71:B4:B7:57:4D:C6:56:13:30:3F:E8
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/fnQsZ6ShF7SDcbS3V03GVhMwP-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0:4::/46
2a03:32c0:3004::/47
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7001::/48
Signature Algorithm: sha256WithRSAEncryption
17:7f:f1:a1:b9:4e:99:6c:e4:a0:2d:37:1a:75:c1:54:cf:43:
df:5e:84:2c:9a:97:25:81:8a:41:1a:30:16:a8:de:6e:ac:2e:
a4:af:10:5a:16:8b:d1:07:7d:f7:62:ba:7e:9c:fd:27:94:2e:
99:06:33:d9:a8:66:eb:12:85:b7:a9:29:69:cb:65:f3:7c:c3:
a2:b3:0b:ad:9a:7b:e4:32:06:80:91:7a:3d:2e:52:58:21:2c:
bc:66:e7:1b:d4:64:99:01:04:23:73:4d:fa:ad:0b:dd:4b:4d:
bd:e9:8e:d4:67:82:6c:7a:62:40:6f:58:0a:66:0f:99:b4:39:
30:83:f7:6d:b9:3a:da:47:66:1c:8f:48:0f:e0:b3:ed:c1:f6:
e0:92:80:c9:1e:0c:21:23:3f:da:76:78:cc:7c:08:5e:21:2f:
66:c0:cc:d8:09:f3:16:3b:33:ca:a7:fb:5d:17:99:2e:11:68:
c6:f4:87:5f:d5:67:0d:5a:e9:16:8b:ff:fd:bd:1f:f3:d4:57:
2d:88:ba:f1:59:7c:a1:2b:02:f2:bf:6f:68:4c:03:3a:b2:83:
90:1d:d7:12:36:b4:b0:49:06:aa:96:d5:b2:cf:ab:fb:a8:b6:
c2:fb:30:d9:2a:f3:7f:36:96:a8:ee:5b:7c:be:6c:0a:7a:79:
0e:db:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org