Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ezB25xWmBhGp1GHKo2ZnqI4CU-g.roa
File: ezB25xWmBhGp1GHKo2ZnqI4CU-g.roa (raw, json)
Hash identifier: UTcMXrPziLWXdc75QD0g5IR41t6RZ1JAfljTBF2mPv8=
Subject key identifier: 7B:30:76:E7:15:A6:06:11:A9:D4:61:CA:A3:66:67:A8:8E:02:53:E8
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018B3D05691FB0719CE413017CB51A810A23
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ezB25xWmBhGp1GHKo2ZnqI4CU-g.roa
Signing time: Tue 17 Oct 2023 09:44:06 +0000
ROA not before: Tue 17 Oct 2023 09:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:05:69:1f:b0:71:9c:e4:13:01:7c:b5:1a:81:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 17 09:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b3076e715a60611a9d461caa36667a88e0253e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:bd:6d:d0:13:5c:9d:2f:2b:11:51:e9:ca:
c1:1e:2a:49:b3:c6:99:d4:e7:ab:55:4a:e7:d1:32:
74:66:2c:32:ef:5f:d7:27:a9:c1:9e:eb:d3:07:23:
01:46:e0:f7:f0:51:46:33:62:4a:90:22:d9:d0:d4:
12:64:4a:ab:3a:36:5a:fd:b6:01:0a:8b:a4:d9:51:
62:5d:c1:7e:c6:6f:3e:b3:b4:34:0d:32:f4:29:2c:
c7:81:08:5a:b1:9d:e2:1d:ba:f8:40:02:cf:5c:e4:
ee:cf:56:74:f7:96:b1:6d:70:bb:29:4c:b2:27:01:
bf:b7:ab:02:0d:b2:8a:7a:10:d3:65:b6:53:3c:b2:
cb:cb:f4:86:f0:61:52:20:96:61:8e:85:54:ee:b3:
13:6b:15:9c:57:5c:ec:da:c9:6e:7a:b6:12:6d:de:
ba:13:aa:0f:61:87:e9:55:a3:ce:9f:12:92:ac:31:
07:2a:20:fa:0f:05:4f:53:7e:8b:99:74:c5:21:43:
e7:2d:63:1a:ff:73:96:9c:72:64:7f:b5:62:61:bf:
c2:c3:53:92:cd:38:6f:93:ba:10:b2:0d:c7:66:74:
52:53:f3:ee:74:f0:18:c8:dc:94:b7:9f:14:59:97:
cb:37:cd:a5:0c:79:7f:19:4f:2f:43:85:da:e5:02:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:76:E7:15:A6:06:11:A9:D4:61:CA:A3:66:67:A8:8E:02:53:E8
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ezB25xWmBhGp1GHKo2ZnqI4CU-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3a:a1:07:28:35:e1:6e:60:3b:5d:c7:ad:81:7f:0e:8c:5d:
df:ae:8b:4c:6d:69:3a:07:a1:46:da:f5:f3:c6:b6:5e:73:27:
85:02:76:64:95:9c:cf:2b:df:93:1d:67:97:ec:c9:e1:a3:24:
5a:0f:0f:7d:49:6a:2f:42:29:5a:37:40:e4:a7:0c:1e:e5:3b:
c2:b8:78:99:1d:3f:fd:d7:9b:ca:05:3e:aa:d0:f9:ed:8d:23:
5e:6f:c5:1c:24:ba:c2:94:b1:a7:81:c6:4b:10:35:74:29:e6:
bb:a7:d9:a7:e6:82:27:11:a3:ef:53:cc:bb:f3:58:ba:d7:1e:
e6:db:7e:40:db:57:12:54:1f:d2:35:2f:a3:a0:1e:58:a4:31:
e9:4c:72:3e:04:b4:d3:9b:a3:26:75:4d:fd:7d:5a:59:28:c1:
b7:f1:79:1c:9d:42:cd:4a:0a:c2:94:f3:6a:23:3e:f0:ef:9f:
4e:37:64:f5:81:ca:4f:5d:04:5c:9f:7b:ea:a7:71:77:0e:4a:
c2:dc:53:7d:29:b1:51:ee:dc:fc:2c:68:69:31:9f:67:a0:fb:
8a:e3:bc:99:a2:c0:02:cb:aa:28:30:b7:62:bd:3b:20:06:09:
5f:d6:ee:f1:7f:c7:5a:7e:b0:76:eb:d7:d4:7b:3e:bc:70:d6:
8b:78:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net