Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/QYe5gH3VJKCeY5n0dI3BUbROgj8.roa
File: QYe5gH3VJKCeY5n0dI3BUbROgj8.roa (raw, json)
Hash identifier: LbKtK6BCdjvz78dDNyGzQE7r248s+Whphsbmwu9N2uI=
Subject key identifier: 41:87:B9:80:7D:D5:24:A0:9E:63:99:F4:74:8D:C1:51:B4:4E:82:3F
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018FBEC612DC7CC1D944FB2C3B36664605C3
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/QYe5gH3VJKCeY5n0dI3BUbROgj8.roa
Signing time: Tue 28 May 2024 10:36:42 +0000
ROA not before: Tue 28 May 2024 10:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 217.60.236.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 13:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:c6:12:dc:7c:c1:d9:44:fb:2c:3b:36:66:46:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 28 10:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4187b9807dd524a09e6399f4748dc151b44e823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:f4:58:63:86:ce:ab:ae:9d:2b:91:27:0a:
5f:03:b5:81:b5:57:e8:97:93:93:77:3a:b8:c9:a9:
25:6d:25:55:df:6e:9f:e4:17:31:e3:19:91:f0:27:
0b:42:2a:26:b3:09:a4:c7:f5:ef:70:db:a2:0f:5c:
cc:11:70:af:f9:54:52:41:d8:d0:0a:a3:02:3a:9f:
8f:33:17:83:0e:4e:87:a9:e3:62:75:59:c1:a4:cc:
55:a7:8d:52:40:dd:ae:ef:76:3f:af:32:37:17:8a:
82:c4:6a:95:b9:e0:43:ea:9c:dd:a5:5c:c9:23:d3:
6b:c2:02:6e:55:2e:9e:ba:32:5d:ca:83:43:fb:c8:
8e:0a:39:eb:66:a7:71:0e:4e:1e:38:39:bc:ba:0e:
fc:e6:a5:12:b0:ab:d7:a8:9d:94:ba:55:ea:d1:2e:
f9:45:5c:3e:6a:e7:10:f2:26:d4:db:87:14:c9:7c:
a2:6b:59:01:2c:e2:f9:49:5a:de:3f:e8:bc:8b:b8:
9b:ab:cd:fd:df:1b:fa:33:86:6e:02:e9:7e:0e:30:
83:29:cd:3c:df:c2:fa:16:2d:07:22:83:07:6c:93:
f6:83:85:37:cc:32:75:a9:bb:99:49:0a:9a:eb:d8:
df:b5:6f:2a:50:32:02:ae:37:8a:2f:2d:00:9b:05:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:B9:80:7D:D5:24:A0:9E:63:99:F4:74:8D:C1:51:B4:4E:82:3F
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/QYe5gH3VJKCeY5n0dI3BUbROgj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ec:5c:07:02:67:55:99:6f:8d:80:d0:30:ae:94:18:66:ec:
08:2d:c9:40:5b:11:39:4a:ce:07:b8:53:48:9c:a2:af:e5:11:
91:2f:15:b3:fd:2f:a5:34:3d:e1:f9:69:ef:5b:e4:b0:98:19:
de:e5:6b:2c:04:a0:b9:e6:18:9d:f3:37:4b:e8:26:a0:48:19:
2b:fc:40:10:2c:a1:ba:d4:7c:f7:c2:73:4f:40:a1:63:34:15:
62:30:df:05:44:98:79:3f:d9:3b:96:65:16:f9:c3:e5:de:20:
3a:ff:37:9c:76:8c:57:42:46:37:b3:4c:7b:82:d1:f1:3b:bf:
ba:f4:28:97:b1:32:f9:30:0d:48:5f:1e:37:f8:30:62:53:66:
74:9b:b8:a3:b9:f6:80:68:74:91:b1:f0:87:48:58:2e:9c:b2:
dd:d8:76:b5:fc:24:c8:cc:1c:23:28:c0:6d:76:31:35:74:51:
65:27:46:78:cc:c8:7c:c7:40:0d:5a:df:6e:4e:a3:18:19:d3:
a7:71:42:ea:18:6f:30:ed:44:de:30:f5:69:3b:cb:89:ac:e0:
75:93:06:59:33:64:e2:a4:24:14:af:22:ba:48:b5:14:0b:fd:
43:9e:b7:58:c0:85:9c:1b:29:ba:20:29:ad:9e:8c:b0:6a:b1:
4d:6e:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:09:50 2024 by rpki-client on console.sobornost.net