Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/0ryHQbFYQrujwy7ViJCVcWskR_Y.roa
File: 0ryHQbFYQrujwy7ViJCVcWskR_Y.roa (raw, json)
Hash identifier: iP9gI59wIAJ8mSVsC5zF8HuiGk+1AbIwXuBI2qiCV6U=
Subject key identifier: D2:BC:87:41:B1:58:42:BB:A3:C3:2E:D5:88:90:95:71:6B:24:47:F6
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 01856FD51AA8210F08F83B02A8B9E83EB1D5
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/0ryHQbFYQrujwy7ViJCVcWskR_Y.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.104.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jan 2023 15:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1a:a8:21:0f:08:f8:3b:02:a8:b9:e8:3e:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bc8741b15842bba3c32ed5889095716b2447f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:5f:57:31:21:93:04:45:fe:9e:e3:4a:65:
d0:65:9f:8e:2d:98:e7:f7:04:f0:ad:d2:4b:18:93:
ea:0d:61:99:5e:90:80:52:16:21:30:95:8f:a7:5e:
58:01:b1:3d:fa:60:a9:cc:e8:36:cb:61:84:e4:73:
52:8f:db:d5:f1:21:77:de:33:cd:52:8d:24:ea:8e:
ec:1f:51:7a:65:c4:5b:3d:0d:cb:89:80:58:d6:02:
6e:ed:e0:0b:58:34:a4:4e:77:bc:71:63:06:79:cd:
d8:3d:43:02:e7:5c:c9:97:2f:82:12:c3:e9:09:08:
0c:6d:48:1a:d9:72:eb:3b:fa:a5:87:2a:b9:12:f7:
8b:2f:54:b6:7c:44:d2:6e:8e:93:9c:67:5e:6a:50:
92:1d:b4:87:d5:eb:28:c8:61:7a:58:28:31:9b:49:
ec:47:ff:db:9b:5b:1c:d2:66:97:93:3f:99:c3:95:
35:54:03:d8:65:99:89:61:69:b7:a4:21:15:19:8a:
8b:97:5f:96:c5:7c:5d:bf:3e:e8:c1:bc:29:a9:58:
01:08:61:2b:9e:25:08:9b:44:97:33:ae:32:0f:2a:
39:02:0f:6c:f4:35:fe:9f:e5:e8:e8:58:00:79:01:
83:e0:83:6a:0f:fc:cf:29:b0:d3:7d:9b:f2:76:28:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:87:41:B1:58:42:BB:A3:C3:2E:D5:88:90:95:71:6B:24:47:F6
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/0ryHQbFYQrujwy7ViJCVcWskR_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.149.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d7:e8:53:2a:10:dd:5d:e6:d8:58:f7:eb:4f:7b:d3:20:37:
91:2d:10:45:8c:f1:55:8f:87:9d:b3:ea:2c:aa:bc:7b:60:10:
ec:c4:77:49:07:18:58:23:5e:ea:85:f3:2f:78:79:32:41:aa:
5c:e4:07:53:37:73:a7:8d:0f:8b:71:8f:99:8d:ef:2a:f5:97:
4b:b9:a2:e1:25:3e:36:e7:c4:a5:79:61:b4:19:a1:28:22:80:
92:37:db:73:4f:76:77:f2:f8:8c:d1:c5:c8:1e:2a:e2:5a:4b:
d9:46:35:d8:c1:2d:94:c8:b3:3f:66:3e:f2:cd:87:a8:65:52:
94:a8:6b:dd:49:4c:db:14:bf:0e:e7:5a:40:85:9f:9d:ed:49:
75:1a:8a:c3:84:c9:40:41:e3:51:f3:af:a3:c6:0f:c3:e1:bc:
76:a2:22:e6:07:05:76:61:11:8d:8b:4c:82:e2:77:7d:23:b0:
c3:35:90:1b:7b:75:63:cb:c2:98:36:c1:62:5d:0e:3c:e9:92:
c1:64:a8:c7:8f:2e:d1:06:85:65:f5:08:eb:6b:83:23:06:8d:
3e:7d:76:76:81:7f:15:19:e8:ee:c7:63:48:72:c8:d8:cd:14:
4b:32:38:05:1a:af:04:88:cc:bb:db:e5:5e:38:9c:cf:74:20:
0a:5d:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:41 2024 by rpki-client on console-ams.rpki-client.org