Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pq8Q_t21p4obsMhkKB2TBhjUzWA.roa
File: Pq8Q_t21p4obsMhkKB2TBhjUzWA.roa (raw, json)
Hash identifier: D9EOUk/RFoHgaS1QAj75OwwjgYzXKNeLYS0lsLynLSA=
Subject key identifier: 3E:AF:10:FE:DD:B5:A7:8A:1B:B0:C8:64:28:1D:93:06:18:D4:CD:60
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C2FD5602BAB4DE1425D660F6B28C5223A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pq8Q_t21p4obsMhkKB2TBhjUzWA.roa
Signing time: Sun 03 Dec 2023 13:19:22 +0000
ROA not before: Sun 03 Dec 2023 13:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205463
IP address blocks: 194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 19:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:d5:60:2b:ab:4d:e1:42:5d:66:0f:6b:28:c5:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 3 13:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eaf10feddb5a78a1bb0c864281d930618d4cd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:57:9e:f3:2b:8e:4e:b6:79:cc:01:d2:c4:
19:c8:8e:f4:f1:ca:ad:a5:05:30:3f:d8:5a:dd:97:
75:54:a2:ac:39:74:d0:61:88:18:66:17:ad:a0:1b:
e5:b7:9a:88:cc:06:66:c6:df:df:99:84:a1:b7:51:
58:19:81:3e:42:1c:d7:00:46:b0:b0:24:ea:ba:75:
4a:65:51:73:a4:4a:b8:48:30:1d:f4:7c:c5:bd:0c:
7f:2d:2c:53:c9:ea:cf:48:3f:8c:75:55:45:00:e3:
00:68:a2:1d:86:ca:c4:0b:b9:1e:1c:e9:dc:7d:8a:
a1:f5:f8:dd:61:12:9f:d7:6f:b4:0c:dc:6c:15:33:
77:3f:5b:51:d6:a8:24:12:10:8f:58:f6:60:9f:48:
3f:6e:c9:4a:6d:f9:13:c2:1c:55:b7:b4:bb:69:61:
7b:7a:17:94:bd:c3:11:e4:9d:24:3b:a5:0d:77:4b:
27:36:62:5e:c5:bf:a5:ff:6f:18:2a:21:ac:f9:20:
49:1e:16:e1:ac:08:f4:bf:74:b7:d9:e5:f4:8c:b7:
41:a1:4d:21:5f:c0:b8:cf:81:05:23:60:59:b2:06:
22:6d:af:c1:2f:34:db:b9:32:09:4e:26:79:da:6d:
a0:44:f1:c3:46:e1:9e:8f:70:39:70:81:5d:e6:aa:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:10:FE:DD:B5:A7:8A:1B:B0:C8:64:28:1D:93:06:18:D4:CD:60
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Pq8Q_t21p4obsMhkKB2TBhjUzWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2f:81:2c:3e:6f:10:ce:17:ea:b4:e3:5d:0f:ee:eb:1e:c3:
07:9d:72:39:a4:b7:b4:24:fa:ec:ee:d2:a5:b0:62:28:fa:70:
81:ee:f5:a9:a6:ff:71:2b:4b:0c:d7:f7:17:fb:41:ef:cf:15:
89:75:f7:62:12:91:d5:6b:83:61:00:3f:0f:0e:25:2e:4a:a6:
ed:11:29:f0:3c:54:b5:ac:76:77:4e:89:90:66:b9:51:d9:29:
06:d1:04:3b:e9:69:43:fc:17:1e:42:ab:93:b4:42:d9:31:e5:
c5:82:bd:94:cb:1a:80:64:47:e9:26:f5:9e:16:80:1b:9f:6b:
e6:c7:6e:24:41:44:fc:e2:8b:ef:16:9b:b3:1b:53:8e:11:b8:
9b:4d:fb:1c:49:12:98:90:0e:d4:cb:da:9f:00:0c:ed:65:42:
c9:4a:e4:c5:63:32:44:24:52:9f:9d:0e:07:7b:cb:d9:eb:62:
5b:a7:78:df:b1:f6:ce:c7:d5:81:62:69:56:ca:4e:4f:00:cd:
ef:91:b1:58:6c:16:e9:f6:68:a4:86:0e:b2:64:08:f4:f3:6d:
ba:73:cc:87:25:ae:b2:c8:16:00:75:f6:45:3b:8b:1b:e6:e7:
1b:01:df:d0:d9:85:4c:a5:44:9a:0d:02:70:14:ac:97:90:02:
9e:2d:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org