Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/fW0n01stnwOsgvq7oOOCY2Llnsc.roa
File: fW0n01stnwOsgvq7oOOCY2Llnsc.roa (raw, json)
Hash identifier: 7ebgvGry3A/q1noHul37v8Tb3ne9Qt1uhpJd+xCpt00=
Subject key identifier: 7D:6D:27:D3:5B:2D:9F:03:AC:82:FA:BB:A0:E3:82:63:62:E5:9E:C7
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 0186EE4C5BF7806A06A4455C20196628EFC7
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/fW0n01stnwOsgvq7oOOCY2Llnsc.roa
Signing time: Fri 17 Mar 2023 06:40:27 +0000
ROA not before: Fri 17 Mar 2023 06:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 194.33.125.0/24 maxlen: 24
194.33.126.0/24 maxlen: 24
194.33.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:4c:5b:f7:80:6a:06:a4:45:5c:20:19:66:28:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Mar 17 06:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6d27d35b2d9f03ac82fabba0e3826362e59ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:90:40:e6:42:41:ae:12:f2:39:a7:3d:96:
3c:84:e0:37:6f:22:02:7e:89:75:07:c1:60:71:31:
73:1b:cf:f8:29:0f:7f:76:33:5f:b7:90:91:0a:08:
67:50:de:f4:d1:dc:a3:43:fd:53:4b:67:39:d7:29:
19:0a:57:1c:a6:99:26:2f:ff:e7:63:37:1b:86:ef:
3c:f0:0c:ad:cc:05:0c:7d:cc:8e:71:e8:ce:14:4b:
66:37:c8:ba:c6:bd:76:67:80:0b:8d:28:b2:2a:3d:
a7:ce:65:99:a6:a3:ee:09:6e:12:e8:fe:7b:ea:df:
f6:9f:b6:30:20:01:7b:24:63:25:6e:24:79:81:2d:
24:9f:2d:6c:39:1d:51:03:8c:8a:1e:c7:4b:a0:47:
b4:6d:a6:03:7b:f5:f4:cd:1e:41:18:a7:ac:b3:4e:
1e:5b:ec:ce:31:65:c2:6f:27:51:34:ad:b2:ae:ba:
f3:09:44:63:60:34:28:89:b0:15:32:92:06:10:78:
31:47:33:a2:4d:18:60:43:73:8e:28:4e:63:99:1b:
53:52:a2:99:42:8b:38:21:27:4d:49:c8:52:f2:2c:
10:b2:b4:35:6c:43:6b:50:2c:a0:4a:5a:98:8e:3a:
17:9c:dd:1a:f4:2e:36:51:1d:f3:2c:f6:55:17:1a:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:27:D3:5B:2D:9F:03:AC:82:FA:BB:A0:E3:82:63:62:E5:9E:C7
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/fW0n01stnwOsgvq7oOOCY2Llnsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.125.0-194.33.127.255
Signature Algorithm: sha256WithRSAEncryption
2d:53:46:72:40:32:64:db:cf:43:38:00:fb:8e:e8:57:f5:d8:
f6:11:6f:10:9e:ce:12:5b:96:32:ec:3d:1b:f5:6a:07:c6:e0:
21:c4:09:cd:9c:1f:6b:97:6f:35:f4:cd:18:10:97:bd:a6:fd:
93:47:e5:2e:ac:26:92:80:70:04:e1:73:79:9b:03:50:bd:63:
1f:1e:ae:a8:2e:2c:f0:b3:09:3d:11:a2:a9:20:b5:5c:8a:59:
d8:06:f4:ad:02:6a:43:61:47:ea:c3:7f:ca:95:ce:15:03:72:
b0:08:12:2f:a7:49:8d:a3:10:f9:e6:ea:11:f7:56:c1:f5:1b:
bd:14:96:a2:60:41:e9:5f:9c:7e:ba:4f:b7:8d:9e:f1:8d:18:
fa:b2:e8:bb:96:4f:5f:7c:d3:4a:3c:b8:15:f0:86:1a:b2:37:
07:55:97:b7:84:5b:33:2f:cb:d0:cf:6d:7e:6f:1c:c5:a5:eb:
99:b5:8a:fa:f0:c9:8f:1e:9b:a5:5f:2b:e1:5a:d5:59:22:91:
ec:f8:2d:93:d9:fd:52:a9:7b:80:a0:cf:0c:67:1c:03:67:82:
c2:49:00:40:05:be:e0:7f:76:48:57:ed:aa:9c:59:61:0e:90:
e4:8f:5e:07:00:64:fc:3e:a9:49:44:28:4c:ad:e1:d0:67:97:
e9:5e:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:13 2024 by rpki-client on console-ams.rpki-client.org