Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/ACcPpnQFplvXi55qWg6Y2wabfQ4.roa
File: ACcPpnQFplvXi55qWg6Y2wabfQ4.roa (raw, json)
Hash identifier: 1ZKcHncV2rY/NHOaxDVOYJEJymSu72RVx5hTCDbGZmk=
Subject key identifier: 00:27:0F:A6:74:05:A6:5B:D7:8B:9E:6A:5A:0E:98:DB:06:9B:7D:0E
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 018DAEA21B60FF547A79BF16BC7DE7A58DC1
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/ACcPpnQFplvXi55qWg6Y2wabfQ4.roa
Signing time: Thu 15 Feb 2024 21:17:55 +0000
ROA not before: Thu 15 Feb 2024 21:17:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 15:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:a2:1b:60:ff:54:7a:79:bf:16:bc:7d:e7:a5:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Feb 15 21:17:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00270fa67405a65bd78b9e6a5a0e98db069b7d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:8a:17:2b:e9:13:7c:98:5d:70:ff:b2:b6:
61:13:7a:87:ad:76:a3:4b:16:c6:33:8d:0f:9c:e2:
48:49:d4:0e:2c:e5:cb:ac:e9:78:ba:4e:4b:32:ad:
00:39:54:97:8e:78:7c:ac:18:78:af:2c:89:9e:3c:
0d:d3:91:c8:3e:f5:f0:55:96:5e:34:03:93:23:4b:
fe:e0:bd:ac:b0:19:4b:73:89:ed:8c:0d:9b:9d:26:
53:8f:dc:94:be:88:d3:80:a1:3a:84:6f:04:67:20:
61:59:3c:c3:60:ef:43:af:1c:37:16:c3:c5:0f:96:
60:d5:60:c2:de:12:b6:75:28:bf:02:88:26:4c:f0:
1c:dd:a5:8c:14:91:eb:4b:ae:18:96:37:cf:78:ba:
07:e2:ec:54:ad:f7:b2:d8:90:00:12:be:68:99:93:
da:97:e3:53:4c:a0:ed:24:83:78:89:b2:93:d9:70:
aa:9d:08:a1:62:66:3e:62:1d:5e:d6:94:ce:da:f7:
4d:40:81:37:bf:68:c5:e1:39:5f:76:ff:8d:01:be:
41:6c:6e:03:2b:72:c6:41:9b:1e:dd:09:d1:74:4c:
7f:2e:08:97:26:c5:7e:d2:8c:f9:f4:36:cf:e5:2b:
9c:e3:11:ee:1f:89:9c:82:79:70:50:d4:a4:c5:41:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:0F:A6:74:05:A6:5B:D7:8B:9E:6A:5A:0E:98:DB:06:9B:7D:0E
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/ACcPpnQFplvXi55qWg6Y2wabfQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
33:62:b1:ef:b8:67:a0:0a:cf:7c:7f:3e:8f:d5:e9:f3:0d:c5:
ea:1e:fd:99:2b:cf:a0:7a:f8:0f:bb:95:32:d4:50:35:9c:57:
e6:b7:0f:98:db:6c:e5:2c:20:54:bf:f4:02:b4:a0:05:cc:25:
33:12:c8:bc:d2:dd:4c:60:72:69:1a:94:41:90:86:f0:a6:fd:
cf:af:e8:2a:63:82:a4:b3:dc:c9:5d:1c:59:24:fc:74:f4:b3:
6d:f3:b9:07:3b:d9:e4:e3:31:af:7a:22:9c:67:45:50:0c:24:
87:ed:6b:d2:a0:a4:d0:16:4d:3c:0b:ce:1b:3d:7c:2c:54:84:
3d:2f:c3:d5:9e:4c:de:8f:77:5c:98:99:f6:19:98:1f:28:39:
ca:4e:2c:70:2e:71:80:5f:0f:39:2b:34:b9:f2:46:09:40:4e:
33:1a:ab:ee:be:12:de:31:7d:8c:06:f7:e5:58:88:7f:b5:69:
0a:85:47:27:51:c5:f8:6f:38:b8:a3:84:63:a7:9e:9e:fe:37:
38:1e:4f:34:3a:12:77:47:43:eb:46:2c:c3:35:23:f6:8d:e4:
b9:e5:73:b5:69:31:be:51:e8:b9:1e:1b:11:f4:8b:5e:c2:1b:
b0:1c:c5:e7:f4:03:83:33:46:e7:65:d7:bf:ba:cd:e0:9a:94:
f8:b6:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:53 2024 by rpki-client on console-ams.rpki-client.org