Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DGyJt1kxIwr6pYg2hABua0xmHnU.roa
File: DGyJt1kxIwr6pYg2hABua0xmHnU.roa (raw, json)
Hash identifier: SPKUWN7L3w8DZiXlZHXVmSNwhEvYPbqbpQDcIOhGhBU=
Subject key identifier: 0C:6C:89:B7:59:31:23:0A:FA:A5:88:36:84:00:6E:6B:4C:66:1E:75
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018BAA369E687E2E8DE602C022037E0FDF2D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DGyJt1kxIwr6pYg2hABua0xmHnU.roa
Signing time: Tue 07 Nov 2023 14:36:28 +0000
ROA not before: Tue 07 Nov 2023 14:36:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52016
IP address blocks: 194.190.137.0/24 maxlen: 24
194.190.157.0/24 maxlen: 24
194.226.130.0/23 maxlen: 24
194.190.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:36:9e:68:7e:2e:8d:e6:02:c0:22:03:7e:0f:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 7 14:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c6c89b75931230afaa5883684006e6b4c661e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:3f:9f:93:30:bb:b4:e0:51:6b:81:09:4a:
c1:c0:6f:7d:fe:8a:62:bc:5e:5c:64:37:c0:9f:27:
48:ee:ac:fd:35:1f:8e:f8:29:8d:d5:b3:33:d9:c7:
d6:b4:6e:61:6a:30:e8:13:9f:1b:5b:f6:36:96:74:
f5:67:21:6a:bd:7b:2b:76:74:b7:dc:6d:d2:2b:94:
bf:eb:80:c1:b4:f1:61:b1:70:ca:44:0e:5c:a7:43:
9c:c1:73:f5:17:98:27:74:17:63:03:8e:f4:7e:e0:
69:46:9d:dd:03:28:bf:93:81:33:01:e5:93:41:10:
b8:b8:90:fc:83:d0:d2:c5:a7:4c:25:e5:f3:d8:36:
d0:f5:0a:53:83:d5:a8:87:4d:08:0e:e7:5b:6c:9f:
84:0b:07:1c:fc:b0:e0:30:3a:0c:c3:28:8f:f9:a7:
ae:6f:3b:35:0c:99:e2:da:ae:d6:78:d1:73:98:a0:
44:10:b2:0a:a8:13:27:e3:3b:8a:ef:c1:3c:68:0d:
a9:16:a5:c6:5f:87:ac:c2:33:51:00:61:d1:95:0f:
de:a2:e7:0c:df:df:87:ce:65:2d:2c:39:c7:4c:a7:
a0:aa:05:1a:e1:d3:0b:63:ff:91:1c:69:59:24:6c:
d8:77:78:12:e9:a5:ee:50:07:6e:cc:a9:7f:de:14:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6C:89:B7:59:31:23:0A:FA:A5:88:36:84:00:6E:6B:4C:66:1E:75
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DGyJt1kxIwr6pYg2hABua0xmHnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.21.0/24
194.190.137.0/24
194.190.157.0/24
194.226.130.0/23
Signature Algorithm: sha256WithRSAEncryption
58:26:91:36:1c:e3:6d:fe:06:38:df:f8:45:c4:f7:92:a8:9c:
d2:fa:9f:96:6a:ae:73:2e:61:d9:9f:e4:55:a5:ae:c3:c3:5e:
af:d3:d7:26:3f:10:92:df:1d:51:5c:40:13:93:04:fd:e9:25:
2d:8e:87:68:89:a4:96:e1:cc:e5:e6:3e:c9:47:b4:2b:85:f4:
2c:64:bf:ea:02:22:6f:92:0b:4b:b6:a4:af:c0:f6:7e:40:63:
83:31:f7:07:e1:7d:b5:4f:f4:7a:66:20:6b:f9:07:2b:13:f0:
5a:35:88:69:90:cd:c3:58:29:8e:cd:4b:e9:6a:e2:87:7b:f0:
7e:0d:1b:93:04:db:3d:20:61:79:0a:27:4e:87:b0:a8:5c:a6:
ec:fd:bc:32:c0:eb:42:6a:f9:0e:e0:32:0f:d0:e1:27:81:f7:
28:6a:a9:d4:ed:96:c1:fc:7d:8d:bc:72:35:28:08:80:af:b2:
7e:f7:ab:c6:09:61:a0:6f:36:d1:69:15:34:d8:66:5c:15:cc:
cd:64:db:99:d0:33:3b:bd:0d:4a:91:58:99:b9:f5:d3:39:7c:
d2:54:61:9f:47:2e:50:d8:b7:dd:00:9d:05:e6:59:ec:54:57:
62:45:c5:6f:6b:8f:14:1b:b8:4f:b4:86:f3:43:c9:47:3c:a3:
c1:e4:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org