Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/2uxlHsWSROzZbCssuz-OTsLZnEw.roa
File: 2uxlHsWSROzZbCssuz-OTsLZnEw.roa (raw, json)
Hash identifier: T2rgYj87LlnfKcT2oFWgjbtI7YrWHHnHKOzLrYzOZ7M=
Subject key identifier: DA:EC:65:1E:C5:92:44:EC:D9:6C:2B:2C:BB:3F:8E:4E:C2:D9:9C:4C
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 018DCC06B58836007268213466038B66D447
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/2uxlHsWSROzZbCssuz-OTsLZnEw.roa
Signing time: Wed 21 Feb 2024 14:16:48 +0000
ROA not before: Wed 21 Feb 2024 14:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215602
IP address blocks: 194.164.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 15:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:06:b5:88:36:00:72:68:21:34:66:03:8b:66:d4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Feb 21 14:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daec651ec59244ecd96c2b2cbb3f8e4ec2d99c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:d4:bd:93:0f:64:19:7f:91:fa:b3:1e:8d:
fd:46:d9:85:82:3d:5c:6d:32:ec:3e:b3:f5:ae:75:
6d:f0:3e:8e:81:fd:07:83:d0:14:f8:ae:e2:a3:d6:
5a:6b:26:8d:cb:df:fd:97:2b:0e:a2:2c:fa:08:f9:
bb:73:3d:a5:8b:9f:c8:d9:43:c4:16:d6:df:91:92:
f0:15:ed:52:9d:0b:41:cf:8a:7f:ac:b3:30:44:82:
96:a4:ed:66:07:a9:29:e6:16:19:d1:8b:90:f0:58:
88:4f:ce:3e:ce:55:18:7b:f5:dd:c5:20:f2:59:43:
88:c7:34:9f:46:0f:37:96:fb:58:8a:9a:48:54:f1:
ad:f9:d4:56:08:ec:ad:32:40:c4:5b:52:0e:bf:02:
76:59:d8:df:07:0d:06:05:77:c0:b1:98:7a:dc:e8:
32:94:bb:15:41:ce:6f:50:9f:67:b3:3a:55:62:db:
34:1b:b8:25:3a:e8:18:e7:57:2e:50:5b:af:3c:57:
5d:5f:0a:10:8c:28:18:10:d0:81:68:28:65:70:e4:
3f:ea:96:74:70:11:66:4f:80:82:be:cd:1f:82:fe:
a4:7e:a4:a4:9d:20:22:f8:bd:bd:d3:8e:ba:ed:17:
aa:37:e1:cd:63:fa:78:04:b7:7f:3e:1d:94:f5:c5:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:65:1E:C5:92:44:EC:D9:6C:2B:2C:BB:3F:8E:4E:C2:D9:9C:4C
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/2uxlHsWSROzZbCssuz-OTsLZnEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.244.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6f:a1:a5:dc:36:87:c8:4d:64:7f:55:b2:a9:58:05:b8:44:
33:10:87:1a:f4:fb:a4:43:7a:45:9d:49:47:49:b2:d6:d2:72:
32:73:ee:64:51:57:bf:e6:a2:aa:ca:66:99:ba:81:2b:af:3c:
4f:e6:a4:23:c2:ec:f5:05:ec:cb:d1:4f:10:cc:45:d6:b4:57:
06:4d:2d:c9:57:e3:b9:fa:23:7d:67:45:54:12:ec:7b:51:51:
f6:0d:10:90:61:1f:9d:2a:67:bd:92:1c:66:f1:e9:f3:0e:dd:
a0:1e:48:6f:b3:e0:91:9c:ee:52:c0:2a:ce:32:8f:23:5f:ff:
c9:cb:00:28:23:f6:03:c3:68:2d:4f:43:7d:a1:f8:e5:c2:08:
b0:9b:1c:17:b6:b2:94:98:30:9f:c2:2e:64:28:54:67:b4:09:
87:6a:22:2f:94:e8:98:0a:fb:3b:d0:b1:16:87:53:a3:14:bb:
35:1b:7d:fe:20:60:19:37:69:26:56:d9:30:d4:79:f5:b5:0d:
2d:e3:b7:19:4e:fe:d9:39:23:d7:9b:09:0b:e5:6b:fe:9b:ca:
05:6e:ed:7f:f1:d8:06:3e:5b:b9:d5:ad:7c:8b:f9:71:af:c6:
24:7e:ca:47:8a:94:7e:85:b4:29:99:ce:4b:86:f9:67:c9:6c:
ab:80:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org