Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/Ak3kP69X3U7WihyxermwVD3UU9g.roa
File: Ak3kP69X3U7WihyxermwVD3UU9g.roa (raw, json)
Hash identifier: YsDc2G7UjLXqsGlvopFfnWv8WmGE3w4/dhTrvGMKbBg=
Subject key identifier: 02:4D:E4:3F:AF:57:DD:4E:D6:8A:1C:B1:7A:B9:B0:54:3D:D4:53:D8
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0187095B8A76E1D89FF1749A2327503A85C2
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/Ak3kP69X3U7WihyxermwVD3UU9g.roa
Signing time: Wed 22 Mar 2023 12:46:46 +0000
ROA not before: Wed 22 Mar 2023 12:46:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.37.85.0/24 maxlen: 24
194.37.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:5b:8a:76:e1:d8:9f:f1:74:9a:23:27:50:3a:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Mar 22 12:46:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024de43faf57dd4ed68a1cb17ab9b0543dd453d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:25:b4:0f:5f:6f:f8:4c:99:09:e1:19:c5:
27:d6:7e:14:89:5f:47:ef:01:e4:fb:08:c0:c8:d3:
fa:38:23:56:7c:d1:97:b4:a1:90:5b:30:fb:d7:73:
96:c1:7b:d4:ad:fe:6d:6d:fb:c6:24:02:44:6b:7d:
07:c1:bc:44:af:dd:76:bf:ff:46:74:f6:b8:0e:e8:
47:ac:00:f0:5f:b7:ce:98:4e:64:51:fb:2c:fc:f5:
4d:0d:d3:df:dc:4e:85:18:b2:31:8e:67:57:be:d6:
ad:09:cd:2d:11:d0:13:2a:ae:5e:c4:cf:5e:70:8e:
7b:af:d3:63:be:a3:81:62:61:9c:6b:94:1e:99:7b:
42:10:10:66:6b:ff:45:8e:24:93:0f:0c:d7:30:de:
80:0f:ee:36:e6:f9:22:9e:57:78:c0:ae:a7:cb:92:
ea:f8:40:22:bc:03:ea:7f:b4:d5:19:03:79:0b:d4:
2a:98:55:bd:96:95:d5:71:d3:c6:c3:a0:83:e2:2e:
6a:6c:2e:4c:6a:25:33:88:95:14:48:81:2f:c1:4b:
5b:d7:6b:b6:41:a8:49:af:63:4f:11:8e:c1:3e:ff:
5e:da:3a:f1:21:3a:3b:62:73:d4:10:b7:38:c4:7a:
35:49:50:c0:73:8c:53:90:aa:ca:07:1f:4e:fa:eb:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:E4:3F:AF:57:DD:4E:D6:8A:1C:B1:7A:B9:B0:54:3D:D4:53:D8
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/Ak3kP69X3U7WihyxermwVD3UU9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.85.0/24
194.37.87.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b7:4e:86:51:0d:01:33:d8:e5:50:36:e0:30:7c:ac:7f:74:
78:4d:ae:f2:c2:c0:93:83:48:39:0c:73:a6:fb:8a:3e:00:c7:
22:61:6b:92:68:4e:58:de:12:c6:24:ce:32:0f:bb:75:bf:e9:
5e:c2:b5:43:25:91:d8:0f:55:d5:7e:9e:6b:4d:9d:14:c9:7a:
da:f5:3f:a1:65:e6:b4:36:9f:c3:6e:cc:19:04:5a:45:42:5c:
63:22:19:42:44:82:a0:95:f0:c7:a6:95:fc:59:3f:76:b6:1c:
30:9d:b8:83:2d:2f:08:6a:47:6a:87:fe:26:91:74:69:26:25:
2f:c9:ad:d3:9f:b5:90:bd:8d:22:51:21:94:86:17:b4:bf:3f:
2b:e1:66:1d:8e:d8:d2:0d:9b:b6:31:f3:4b:72:a1:14:3b:d1:
55:6f:91:cb:db:2a:fa:55:9e:b6:9d:80:8d:24:87:79:e7:67:
5d:ac:96:0a:56:23:b1:39:dc:f3:41:b6:31:f8:3e:03:10:73:
67:6e:ba:66:86:16:75:5b:f9:17:4e:5e:c2:32:c0:8a:b2:e5:
c4:2a:e2:85:d5:96:75:a0:fd:42:01:63:79:76:fb:4f:c1:61:
1c:94:2f:0b:07:a7:82:b0:06:01:9d:b2:7c:40:1f:19:d0:06:
08:31:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:59 2024 by rpki-client on console-ams.rpki-client.org