Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/phcXEaUrScSQv6fFDZi3jsfYckY.roa
File: phcXEaUrScSQv6fFDZi3jsfYckY.roa (raw, json)
Hash identifier: gpJjGM7vT8IAhnDN+aKWM8bitTnWPZoGJscGj7HtmpU=
Subject key identifier: A6:17:17:11:A5:2B:49:C4:90:BF:A7:C5:0D:98:B7:8E:C7:D8:72:46
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 0186EFE6D30306CAA39E18656E698B22AD15
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/phcXEaUrScSQv6fFDZi3jsfYckY.roa
Signing time: Fri 17 Mar 2023 14:08:47 +0000
ROA not before: Fri 17 Mar 2023 14:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202908
IP address blocks: 194.124.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 09:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:e6:d3:03:06:ca:a3:9e:18:65:6e:69:8b:22:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Mar 17 14:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6171711a52b49c490bfa7c50d98b78ec7d87246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:d6:89:01:c6:4c:b7:cb:32:77:ed:18:af:
41:03:6d:0e:52:91:9e:10:2c:91:d5:94:56:39:38:
2b:a4:8d:92:bd:32:23:31:75:7c:43:1f:a8:21:3a:
18:85:26:d4:91:bc:66:68:5f:aa:f2:c9:47:07:86:
b8:64:ab:5d:7f:13:ce:c7:1b:03:16:e0:a9:66:7c:
1b:e2:cf:a8:7f:ea:8f:1f:4d:37:12:70:2a:17:9b:
37:50:ce:54:8b:c3:41:3d:7c:08:87:e8:d7:ad:8b:
9a:7a:e0:fb:c3:db:64:3e:8b:33:da:b8:00:85:e2:
5a:00:aa:ad:da:75:20:0b:c7:81:af:52:b7:da:15:
24:60:d6:89:05:58:b2:7d:58:4a:1a:74:49:bb:45:
e5:fa:47:95:34:bd:96:24:93:60:d4:f4:ea:24:d9:
b0:da:25:dd:1d:a9:0e:d1:90:0f:52:a3:c6:6e:7e:
12:fb:16:e4:67:db:da:19:bc:c1:59:07:47:43:e7:
b1:91:f4:14:9d:ef:35:44:11:36:86:b9:50:39:a3:
2e:17:8c:37:2c:6c:4d:d9:8f:b0:97:1c:da:d3:06:
89:d2:1b:ef:27:b9:5b:1c:43:38:f9:3e:c9:28:ca:
29:41:4b:42:4c:13:11:77:00:49:b8:26:f3:3c:2e:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:17:11:A5:2B:49:C4:90:BF:A7:C5:0D:98:B7:8E:C7:D8:72:46
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/phcXEaUrScSQv6fFDZi3jsfYckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:91:94:63:b3:07:56:a8:44:e7:7a:25:e7:8e:f3:6a:6f:0c:
fc:71:d3:53:cb:a6:70:8b:37:30:88:64:4a:78:ad:d5:0d:b0:
ee:0e:47:6a:96:e7:9a:95:b0:7b:93:00:79:47:59:d2:5e:35:
71:2d:2f:1b:ef:7c:44:da:0d:e3:7d:db:ff:08:bc:ae:f0:5d:
ab:a8:01:0c:cf:a6:0e:1c:b4:9e:17:2d:25:0f:b3:24:d7:2e:
a1:d9:87:5b:8b:5c:cc:9b:72:28:e4:2d:59:d6:3c:d4:99:1a:
fa:70:e5:d1:a7:96:35:64:d9:93:b9:fb:ed:89:76:c8:c7:9d:
4b:34:fb:7f:f8:35:48:97:0c:de:e4:71:19:65:41:79:a7:6b:
e0:a0:d1:ee:08:80:08:a2:cf:cb:3c:e3:ba:88:c2:0a:25:58:
c5:76:a2:b5:59:6c:cb:03:a8:0a:65:2b:8e:73:74:d9:bb:5f:
df:d8:58:83:29:15:78:ac:87:f8:82:35:ef:79:b5:07:14:bc:
53:4b:77:0c:49:63:02:d0:2d:d6:c6:a8:f2:68:3a:e4:c5:dc:
2d:fd:e1:4c:e7:29:91:53:87:92:e1:9d:18:3b:4c:1e:38:37:
19:4f:06:f5:ea:9c:2d:88:dc:8a:aa:e3:7a:3b:5e:10:ed:84:
6e:89:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org