Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/s-40JGMrCx-O7f4A2wQlKeCSNjg.roa
File: s-40JGMrCx-O7f4A2wQlKeCSNjg.roa (raw, json)
Hash identifier: Qb43zHT0AJkiglcPMwE+kZ7glnUgFxqFPHiIOzifE20=
Subject key identifier: B3:EE:34:24:63:2B:0B:1F:8E:ED:FE:00:DB:04:25:29:E0:92:36:38
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 018CC4254DB80CFB112810F745D799548578
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/s-40JGMrCx-O7f4A2wQlKeCSNjg.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201319
IP address blocks: 194.56.64.0/21 maxlen: 24
194.56.0.0/18 maxlen: 24
194.56.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 11:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:b8:0c:fb:11:28:10:f7:45:d7:99:54:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3ee3424632b0b1f8eedfe00db042529e0923638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:2f:c8:52:e5:6f:bc:2d:be:5a:f0:9c:f5:
55:49:b2:b3:7c:e1:14:8a:e2:fe:35:a5:7f:2e:4e:
2f:2f:7c:57:b3:b7:91:22:db:3f:f3:09:b5:1a:ef:
af:27:cc:c0:2e:17:b6:3e:94:81:79:51:75:f1:71:
d4:24:a2:d2:ed:90:c9:85:78:4e:77:8a:c0:dd:a2:
a6:71:71:d1:de:b8:42:71:8c:f1:ec:07:74:28:8f:
62:2f:dd:f4:da:40:bc:ca:20:a5:94:0c:98:53:6c:
0a:4a:a0:c2:96:17:71:6b:09:83:64:96:e8:96:f4:
7f:72:7d:06:fc:b8:6c:c0:7b:62:1b:d7:ec:f2:fb:
d2:6b:62:45:6e:87:af:40:e9:16:5b:08:e6:34:ac:
85:98:0f:7e:72:fd:a8:63:6f:5b:d3:79:7d:f3:3f:
f7:2c:87:6b:ad:ce:7a:0a:e3:fa:4a:3a:13:83:94:
c4:47:e9:b7:43:16:b5:ae:4e:71:31:7a:ca:1e:79:
e2:23:95:4f:e5:1f:5c:6d:30:cb:2d:97:59:e4:a2:
22:91:a8:91:ab:80:cc:28:dc:d3:44:54:0f:97:2f:
1c:e0:dc:ab:c0:bc:b7:cb:46:fd:e7:c1:11:1f:2d:
89:ed:b2:d8:52:98:99:41:f7:cb:de:f4:2b:6a:42:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:34:24:63:2B:0B:1F:8E:ED:FE:00:DB:04:25:29:E0:92:36:38
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/s-40JGMrCx-O7f4A2wQlKeCSNjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.0.0-194.56.71.255
Signature Algorithm: sha256WithRSAEncryption
0f:58:eb:63:00:6e:b9:8e:0f:d3:be:b7:9d:c0:7c:be:b7:81:
8e:d5:29:8b:5a:05:7f:f3:c7:fe:28:31:13:df:1e:9d:17:44:
e2:51:e5:9d:27:ca:9b:0f:31:1a:eb:f4:c0:d5:e7:9f:ba:58:
cc:7e:53:fd:d9:83:1a:35:c8:4f:a5:86:2e:3d:46:11:a2:61:
88:5a:f1:92:54:4e:16:32:d2:1d:d8:e9:57:f9:84:8b:87:9f:
5e:65:b5:b7:42:a4:13:3a:33:ef:75:48:df:19:1c:92:29:29:
e5:27:22:6b:4d:06:0e:5f:69:f5:ac:a7:ce:14:4d:5c:dc:03:
20:3d:bd:82:56:62:81:d1:08:3a:53:f1:5b:60:b9:fd:10:2c:
d5:cf:34:28:b7:d4:68:08:eb:91:fa:fb:c0:fe:5c:ee:2e:7b:
e4:5b:eb:a1:61:70:80:18:a9:48:65:6f:2c:fa:68:9d:b2:60:
8d:b1:c9:00:e0:64:4d:71:6d:50:ae:a7:05:70:0b:f3:13:67:
f7:f1:74:59:1f:4a:05:85:6e:a8:9a:32:69:b5:e2:68:ee:81:
67:9e:97:fa:c0:b6:cc:13:9b:e9:f6:84:fc:6a:e4:2d:64:40:
fc:ee:2a:a1:c2:02:b9:60:d9:4b:ba:03:49:47:d3:8c:26:27:
fa:f0:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:00 2024 by rpki-client on console-fra.rpki-client.org