Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/CMjFMbSHz56Ig6i1Whu6D8-jThk.roa
File: CMjFMbSHz56Ig6i1Whu6D8-jThk.roa (raw, json)
Hash identifier: JEPDYSpYFZGVkXiyp2YmZX063Kz2hKysSEcubAv1Whs=
Subject key identifier: 08:C8:C5:31:B4:87:CF:9E:88:83:A8:B5:5A:1B:BA:0F:CF:A3:4E:19
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01857321C398FAD7A9A1959F3EBE3965CB74
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/CMjFMbSHz56Ig6i1Whu6D8-jThk.roa
Signing time: Mon 02 Jan 2023 15:37:50 +0000
ROA not before: Mon 02 Jan 2023 15:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 217.29.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:c3:98:fa:d7:a9:a1:95:9f:3e:be:39:65:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jan 2 15:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c8c531b487cf9e8883a8b55a1bba0fcfa34e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:4d:52:73:84:46:e1:30:95:27:77:d0:0e:
2f:07:7e:66:bd:e9:4c:5c:af:d7:4b:c2:a6:c3:c3:
34:15:bb:e7:95:08:8c:c6:59:20:71:2b:a8:19:c4:
64:38:96:25:b8:57:07:5e:d3:81:8a:45:cd:60:a4:
b1:aa:b0:48:27:f5:09:00:d9:58:c8:fc:56:bd:62:
18:f8:f5:0b:c9:a9:32:24:f4:7d:16:1c:de:c7:85:
c7:83:59:62:55:75:e5:c8:6f:01:81:8f:b7:ad:2c:
8d:21:33:19:26:0a:7f:6d:7e:96:0e:81:6e:d3:31:
7e:44:b2:b1:19:94:46:ff:da:d8:87:b7:34:4f:2f:
60:96:9b:6a:59:f9:04:8a:71:63:90:9b:8d:7c:9c:
a1:18:b2:62:a9:c1:84:de:83:b8:b9:80:17:4c:9d:
09:f3:7c:88:89:f5:e5:dc:82:09:ee:da:b7:63:75:
6f:3d:e3:3d:0b:a6:93:c9:a4:05:f8:a2:50:d8:76:
c0:b8:16:66:9e:40:5c:93:3d:1a:92:d1:f5:88:3a:
10:01:1a:f8:77:f1:8f:0c:9c:ae:b3:a3:40:24:32:
10:89:36:60:a4:4c:19:84:51:39:a4:5d:d6:49:08:
7f:29:27:41:78:0f:7e:a8:f7:80:c4:af:48:ff:0a:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:C5:31:B4:87:CF:9E:88:83:A8:B5:5A:1B:BA:0F:CF:A3:4E:19
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/CMjFMbSHz56Ig6i1Whu6D8-jThk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.242.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e3:d1:89:fe:28:7a:45:e0:9b:22:4f:13:ab:36:62:dd:87:
fc:6c:27:75:61:d6:2a:e3:86:8d:ef:6f:17:9d:76:c0:70:c2:
df:79:52:fe:8b:3a:f2:69:5c:f3:96:06:40:a7:d9:18:64:63:
0d:d5:d8:1a:50:24:ba:45:e5:4b:fd:0a:17:7c:7e:14:c7:c1:
fe:37:60:4f:9a:0f:88:f0:90:a8:24:bf:ec:a7:20:7a:29:bd:
c4:74:3c:ea:2c:6b:6b:1d:82:1c:4f:2d:88:dd:04:63:fa:1d:
61:76:dd:88:f7:bb:b5:de:a6:98:02:7e:8f:e9:63:dd:50:fb:
14:be:13:b5:df:08:cc:e1:16:15:2d:4c:9d:f3:1d:64:9c:75:
09:9c:3b:57:95:7a:2e:49:d5:8d:69:35:14:e5:af:c0:ac:cd:
16:27:b6:01:8f:98:26:a9:d6:85:ee:48:05:5c:13:eb:53:b9:
da:88:7e:27:7d:f3:4a:32:cc:c2:bc:9e:0b:51:66:fa:80:c0:
d6:c7:97:ad:45:50:30:0f:03:aa:74:32:47:74:05:51:75:02:
ed:c3:bd:02:eb:27:7d:39:fe:4e:db:a1:0d:5e:b6:23:3f:f8:
ef:2a:cd:c2:fe:8c:b0:cb:22:59:c5:2a:99:1f:7d:5b:db:79:
12:75:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org