Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/DOnirWDaRUEuFFfYgpS7qyjVhQ4.roa
File: DOnirWDaRUEuFFfYgpS7qyjVhQ4.roa (raw, json)
Hash identifier: cEgiAorE4eU57MFBJAG5FVO7NSv7LQcLHJfGvi48LSQ=
Subject key identifier: 0C:E9:E2:AD:60:DA:45:41:2E:14:57:D8:82:94:BB:AB:28:D5:85:0E
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 01856CC15F81E0AA6FF68627E628A60E0ECB
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/DOnirWDaRUEuFFfYgpS7qyjVhQ4.roa
Signing time: Sun 01 Jan 2023 09:54:50 +0000
ROA not before: Sun 01 Jan 2023 09:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42171
IP address blocks: 194.0.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5f:81:e0:aa:6f:f6:86:27:e6:28:a6:0e:0e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jan 1 09:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce9e2ad60da45412e1457d88294bbab28d5850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:e2:6b:47:10:0a:4e:44:21:3d:62:8f:45:
75:af:98:ad:79:b1:52:07:bb:2f:42:56:67:e1:cb:
31:eb:6a:f8:4c:c0:d2:8f:61:51:2a:d5:2c:77:6e:
97:cd:1d:2a:5f:13:08:55:5d:4a:22:93:8f:c0:95:
f2:56:3c:38:ef:92:a7:ad:0d:a0:f4:d3:3a:0a:0e:
5a:30:ff:78:d9:6e:7d:ee:b6:10:92:e6:54:11:9c:
c2:19:ed:4f:4f:91:8e:45:c3:3a:3f:5f:bc:3c:f5:
8d:5b:8b:f6:80:9b:7b:af:64:7d:48:4d:31:75:d8:
ed:48:cb:26:72:a0:9e:ca:ec:19:f5:4e:cb:8c:9e:
58:b1:7b:a4:64:a9:11:11:ba:a4:08:41:91:bf:bd:
46:21:a2:72:80:a1:e6:b1:34:09:75:92:0e:cd:2a:
51:36:da:5c:7a:7d:d6:81:f2:70:78:61:c0:b2:b2:
12:14:82:04:48:0e:3e:b3:c3:df:cf:f7:1e:e9:c9:
26:bd:94:d4:bb:eb:75:53:6f:46:8a:3d:60:23:4d:
27:25:5d:5b:d5:1f:15:80:e6:66:be:0a:2c:45:7d:
9d:a8:9f:c8:3e:50:dc:e2:fa:8c:06:8d:e5:29:fb:
37:95:f5:ac:00:3c:a7:7b:fd:d1:01:93:1a:37:28:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:E2:AD:60:DA:45:41:2E:14:57:D8:82:94:BB:AB:28:D5:85:0E
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/DOnirWDaRUEuFFfYgpS7qyjVhQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.128.0/24
Signature Algorithm: sha256WithRSAEncryption
29:12:d8:41:bd:56:40:18:19:e7:fd:7a:44:98:0f:06:76:2c:
59:4f:43:69:d4:78:74:d5:be:49:f4:55:58:36:3d:49:62:21:
9f:ba:d3:13:cc:d9:23:bc:f7:a3:60:46:7a:bf:70:cf:5e:96:
16:f3:b8:90:16:54:07:33:a7:27:a5:d0:1b:c1:be:0e:93:d9:
46:a5:3b:d6:61:75:2b:5e:03:4a:5d:3a:d5:a6:fe:2f:37:48:
ec:c3:92:e5:b6:51:35:91:6a:2b:81:d3:f3:00:91:a9:12:f0:
55:ba:02:98:d9:a3:68:8a:47:77:3b:e3:66:d1:1d:fe:93:d5:
c2:93:aa:8a:49:2c:23:93:56:a0:ea:a4:ad:68:37:bc:67:98:
03:65:4e:f8:b9:18:45:be:3b:d4:8c:2c:40:71:93:ec:37:ce:
75:01:5d:b6:e1:d3:73:f7:fe:e2:14:2d:d3:7a:0b:44:76:56:
19:f9:0e:24:e6:8b:30:1d:78:1f:65:a2:e1:27:c7:0b:71:58:
6d:bf:03:b3:1a:df:2c:a0:04:38:7c:6d:12:26:0e:b7:82:a8:
ca:67:94:fa:d6:7c:3d:c6:e2:1b:ad:97:ab:b8:dd:ec:e9:d3:
a7:25:fa:bd:a9:83:0d:fd:1d:8d:36:30:eb:37:0a:11:0f:e7:
12:e6:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:59 2024 by rpki-client on console-ams.rpki-client.org