Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/IhyoflDT1hKTjsT0o9N9g9XQfgM.roa
File: IhyoflDT1hKTjsT0o9N9g9XQfgM.roa (raw, json)
Hash identifier: qeDLjNu/STP8/5BeyiLrpw1bKGH7rqXXoHXdWq9/lvs=
Subject key identifier: 22:1C:A8:7E:50:D3:D6:12:93:8E:C4:F4:A3:D3:7D:83:D5:D0:7E:03
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 018CC3494051C42EABD0343A9088482D70D1
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/IhyoflDT1hKTjsT0o9N9g9XQfgM.roa
Signing time: Mon 01 Jan 2024 04:30:06 +0000
ROA not before: Mon 01 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.0.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 00:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:40:51:c4:2e:ab:d0:34:3a:90:88:48:2d:70:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jan 1 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221ca87e50d3d612938ec4f4a3d37d83d5d07e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:77:13:58:f2:5b:85:e0:e6:09:f2:c5:86:
17:52:c2:b8:21:55:21:f5:20:da:4b:89:97:4e:6d:
e8:c2:e6:ff:ee:81:16:2e:af:ee:17:f0:a3:d5:8d:
f0:dc:61:40:f4:94:b0:51:40:0e:97:5c:86:3d:26:
7b:88:7e:47:26:a6:0f:5d:76:7c:b4:a0:77:71:41:
96:82:7c:07:4e:65:6a:6d:90:b2:0d:02:75:bf:82:
d3:92:c9:a2:02:49:55:13:17:e2:8f:57:87:ef:9f:
fd:86:45:41:7a:54:c4:c9:d0:4e:03:2d:9c:06:40:
b1:ed:fa:fe:c6:ab:69:29:0a:a0:9d:3a:e2:ff:ab:
22:43:82:64:c1:08:f2:f0:25:b3:87:a7:a7:5e:e2:
91:7f:97:85:d2:bc:8b:ed:f7:51:33:a9:e6:75:1e:
98:6f:d5:e0:a5:e1:c9:b1:cc:72:41:4e:76:fb:86:
8d:ab:c8:ac:f6:7a:0e:83:04:1f:da:db:8d:96:b0:
94:b2:6a:e9:53:86:cf:79:57:45:50:80:6c:d8:df:
20:8d:e9:e4:b9:d1:99:34:60:30:6f:08:39:d5:2c:
9d:24:fe:21:ea:d1:32:ae:6e:c6:46:72:e3:e7:10:
21:d5:60:06:dd:3b:15:97:3c:4e:ec:84:59:c3:17:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:A8:7E:50:D3:D6:12:93:8E:C4:F4:A3:D3:7D:83:D5:D0:7E:03
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/IhyoflDT1hKTjsT0o9N9g9XQfgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.181.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c9:15:d2:1b:78:76:f9:0b:c3:b6:68:ec:b9:03:ef:84:96:
cd:b2:10:f3:1d:09:48:0e:57:e4:08:48:20:c3:c9:f1:01:85:
3a:ba:08:64:c1:71:ca:f5:12:5b:9c:ab:9d:b5:1b:d9:61:73:
a5:e0:e7:23:ac:4d:69:5e:e0:fe:58:24:19:26:b6:64:3b:a0:
87:21:9b:35:e5:4b:b2:0e:20:dc:39:26:bc:e9:02:2a:ac:8f:
3b:02:9e:fc:1d:71:1d:f1:ff:fb:c2:a8:3e:43:61:0d:dc:1c:
62:89:d5:2c:e7:84:49:7d:b5:3e:e8:0f:e1:44:d0:14:db:d5:
2e:8b:2d:b7:16:14:d6:9e:11:b8:2b:a3:f5:e7:2c:a5:70:92:
c4:dc:3c:72:0d:66:cd:b6:77:4e:4e:f9:35:ac:77:62:86:7d:
b1:f0:38:a9:15:33:6c:b9:b5:72:dd:51:2a:c0:fd:5e:66:49:
e2:c2:31:a1:25:b8:08:f0:c9:54:fd:34:35:fb:63:9c:80:92:
ed:f6:d6:ab:21:00:72:3b:f6:40:6c:ce:98:b6:22:ec:f3:e6:
95:e1:b1:97:55:44:3e:35:bc:80:6a:1e:a6:b7:60:0c:0a:a3:
af:cd:73:aa:1d:6d:16:25:48:13:d2:66:a2:f2:79:9d:f5:3e:
59:ca:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 03:35:54 2024 by rpki-client on console-fra.rpki-client.org