Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/F8L-JUxOnVJCI-iYtSPHlXczh5c.roa
File: F8L-JUxOnVJCI-iYtSPHlXczh5c.roa (raw, json)
Hash identifier: hbLDYeWA/+4Kx7TflXAESEBt35ipo99v0jgRxuFvhy8=
Subject key identifier: 17:C2:FE:25:4C:4E:9D:52:42:23:E8:98:B5:23:C7:95:77:33:87:97
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CD383A19B2510F8304715AD7433EC6584
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/F8L-JUxOnVJCI-iYtSPHlXczh5c.roa
Signing time: Thu 04 Jan 2024 08:07:48 +0000
ROA not before: Thu 04 Jan 2024 08:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 09:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:83:a1:9b:25:10:f8:30:47:15:ad:74:33:ec:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 4 08:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17c2fe254c4e9d524223e898b523c79577338797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:66:d6:b2:29:18:a7:84:6b:b8:9e:8c:52:
34:3a:c5:2e:98:e4:7b:bd:04:44:f2:0c:88:db:91:
5f:57:95:33:10:bb:81:dd:d1:12:de:52:99:86:af:
f0:b5:7f:e2:78:d3:1a:39:17:3e:a9:8b:2b:c9:49:
e7:e9:50:12:4b:80:5b:39:39:38:92:6b:76:77:e0:
d8:83:98:0a:b9:40:62:4e:53:31:b1:8c:75:a2:05:
23:8e:f5:32:71:41:22:40:24:e2:96:9a:9d:86:32:
40:d3:ff:01:ae:1f:12:fb:6c:21:39:b9:9e:6b:70:
ea:bb:30:60:49:8c:7f:75:72:24:79:f6:eb:db:27:
dc:11:c5:05:cc:17:82:05:b7:6c:dd:39:85:9a:3d:
b8:b0:7a:59:f9:c2:74:2c:e5:34:af:79:60:32:97:
87:09:19:da:9f:a7:00:6c:d3:9b:ae:c4:4f:08:c2:
d2:3c:52:d0:d3:a8:af:d9:dc:7a:38:f0:33:2c:e9:
67:b3:6d:04:64:fc:fc:a7:bf:9e:c8:e4:85:ff:75:
4a:cb:7b:93:68:9e:f7:87:1a:a1:5d:6d:82:b7:85:
77:bc:c3:3a:87:db:fc:98:61:1c:4e:1d:69:65:90:
55:85:cf:e5:6d:91:90:fa:2d:fa:23:8a:a2:03:8b:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:FE:25:4C:4E:9D:52:42:23:E8:98:B5:23:C7:95:77:33:87:97
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/F8L-JUxOnVJCI-iYtSPHlXczh5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
109.111.32.0/20
176.221.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:1a:e8:5b:ec:55:01:e5:9b:5b:71:40:4a:53:f0:45:64:4b:
50:7d:10:fd:0b:a6:2e:bb:47:fd:ee:a9:d0:0f:98:69:7f:11:
a8:ac:dc:cf:0c:b0:93:28:16:b7:55:3c:cb:0a:7f:fc:cd:b1:
d6:51:b6:2c:fe:39:78:f7:99:9a:54:ac:06:5b:73:39:6f:7a:
a4:c7:07:41:c2:b9:48:6f:01:6b:53:d0:9e:a9:b2:49:c1:28:
b1:b4:a7:59:ee:27:94:3e:41:c4:ec:22:fd:ee:3e:81:46:ea:
48:e7:d5:fb:70:55:78:3d:4b:6d:1c:00:d3:a8:db:28:8b:8a:
a7:00:53:fa:96:d1:04:de:f4:ac:93:0e:84:ec:a5:c7:5e:96:
48:3e:fd:b7:d0:97:f9:8f:b6:fa:ca:3e:c2:13:da:06:0f:e7:
8c:2b:38:62:09:fa:9c:de:dc:6f:b8:ce:5a:37:cb:cf:95:ac:
f1:e0:96:ed:42:97:c5:16:b3:ed:48:0a:db:7c:9a:93:7e:58:
d7:4a:0f:38:91:3b:b7:b5:cd:7e:e1:da:e9:1d:f5:35:e8:1e:
3b:67:12:f2:34:97:4a:4f:45:01:4c:35:1a:69:72:24:66:c4:
96:43:d4:02:d4:a1:f6:ef:c8:77:9f:56:37:a2:d3:91:37:84:
5a:5b:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 14:03:18 2024 by rpki-client on console.sobornost.net