Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dXSVZ1HgY0Y0vCgMHOfgLQnzUog.roa
File: dXSVZ1HgY0Y0vCgMHOfgLQnzUog.roa (raw, json)
Hash identifier: 0zIxujwbsbQZy19RIdmKFpoHLg4O/trKCkPJiqqJuH0=
Subject key identifier: 75:74:95:67:51:E0:63:46:34:BC:28:0C:1C:E7:E0:2D:09:F3:52:88
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E904728CE0B08C49D8807F6602A9A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dXSVZ1HgY0Y0vCgMHOfgLQnzUog.roa
Signing time: Mon 02 Jan 2023 08:34:55 +0000
ROA not before: Mon 02 Jan 2023 08:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212220
IP address blocks: 194.226.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:90:47:28:ce:0b:08:c4:9d:88:07:f6:60:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7574956751e0634634bc280c1ce7e02d09f35288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:87:22:36:80:fe:f3:8f:e1:50:62:a5:df:
bf:7d:2d:e2:b8:8a:f0:bb:a2:ed:d3:2e:87:8e:25:
a0:c3:8e:60:17:4e:80:27:be:bf:21:8a:52:b1:60:
98:e7:4d:d8:2c:31:e8:85:6d:00:d4:f6:69:16:c1:
aa:ff:53:45:29:a4:9c:95:ec:ba:f4:ab:2e:eb:58:
04:c0:01:47:82:e0:27:cc:5d:32:63:1c:c3:54:c4:
1e:a8:78:61:3c:d9:1c:1b:94:d8:3e:97:dc:33:28:
77:1a:89:16:19:22:78:53:87:d3:f4:11:ea:71:cb:
e7:cc:e5:c3:7e:b6:07:31:b4:68:64:21:4a:67:af:
e9:81:bd:2c:07:5d:63:31:dc:12:5e:3b:26:6c:f1:
60:3a:29:4d:ea:1d:82:06:6a:16:03:21:57:ac:04:
36:36:20:b9:32:a5:fa:9e:ae:e7:bb:94:44:a5:b6:
65:3d:4c:d5:7d:12:e9:db:e1:ac:a5:d2:d6:ef:49:
ab:60:79:43:1f:de:2a:5d:f3:eb:c3:28:04:da:56:
fc:5b:15:cf:64:21:58:55:e0:61:5b:f9:ed:66:29:
2a:3c:3d:c2:42:a6:9f:90:5d:5b:25:e6:02:92:a4:
09:6a:f3:60:ee:52:c5:69:81:fc:fb:6d:6e:82:f4:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:95:67:51:E0:63:46:34:BC:28:0C:1C:E7:E0:2D:09:F3:52:88
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dXSVZ1HgY0Y0vCgMHOfgLQnzUog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d8:34:7b:08:d3:62:bd:02:01:e6:3a:41:2e:b7:89:51:87:
d3:38:a3:3c:11:bd:3a:1c:f2:7f:42:84:68:54:5d:6f:08:3d:
36:e6:23:e2:80:eb:c8:6e:10:70:4c:39:23:ac:01:c4:24:fc:
d7:fa:4c:5d:02:9a:a6:ec:bc:79:78:9f:e6:4d:99:b7:5d:18:
7c:42:60:bb:a8:b8:c1:45:fe:06:e7:0f:15:a1:63:88:93:ba:
9f:1d:8c:69:df:b0:de:0e:22:4d:b2:fc:5e:c2:a6:67:11:51:
5a:a9:11:a9:91:53:2a:9e:95:7f:4e:56:61:11:c7:54:84:82:
6f:ac:ac:ce:fd:f8:0e:27:a9:88:50:f8:b0:fe:d1:11:2e:fe:
22:dd:0c:c3:fd:a4:14:76:9b:a3:22:bf:73:38:aa:b3:a8:c1:
db:af:92:08:32:d2:c1:4e:1f:4b:2a:59:5b:5d:15:53:ec:65:
35:5e:6c:e9:c1:d1:be:9f:9a:03:cd:6c:45:cc:7f:e8:a6:7b:
dc:46:ca:66:f3:45:34:ec:fd:cd:7f:70:c1:fe:bc:4c:d8:8f:
16:13:f8:0d:d3:f9:91:b7:73:e0:ac:25:c8:55:53:47:2e:42:
94:fd:0e:8e:c2:70:41:f9:0e:6c:00:f5:92:d6:c6:0e:c6:c0:
97:df:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org