Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pt3BnSY72_EHOwNYjuLGFZNKRNY.roa
File: pt3BnSY72_EHOwNYjuLGFZNKRNY.roa (raw, json)
Hash identifier: vLmChq6L5EsXM8WlcEr5reMA/GQHszRdR+/RYqAjMDw=
Subject key identifier: A6:DD:C1:9D:26:3B:DB:F1:07:3B:03:58:8E:E2:C6:15:93:4A:44:D6
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018BF60E1C621256282CB95FD211D9DF3C9A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pt3BnSY72_EHOwNYjuLGFZNKRNY.roa
Signing time: Wed 22 Nov 2023 08:03:21 +0000
ROA not before: Wed 22 Nov 2023 08:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49063
IP address blocks: 194.226.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:0e:1c:62:12:56:28:2c:b9:5f:d2:11:d9:df:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 22 08:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ddc19d263bdbf1073b03588ee2c615934a44d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:e8:cf:34:dd:21:17:c4:95:75:37:23:42:
a8:d6:61:74:7b:c5:6c:bc:98:12:43:e1:02:1b:8f:
12:d4:b1:98:46:3c:4d:7b:39:b9:a1:f9:f3:83:51:
a3:08:48:ca:3b:72:cf:a1:e9:14:75:57:65:ce:8f:
13:28:53:fb:86:ce:c4:1b:fd:33:52:9d:25:1a:6d:
9d:1c:26:7c:c3:50:3a:1c:83:85:2b:99:3a:68:fe:
f4:7f:35:e8:08:94:a0:cf:5c:d4:31:0c:74:ff:e3:
50:a1:a2:a9:d1:8b:f1:30:30:60:0d:0f:60:53:79:
bc:e8:1c:0d:ae:0a:a9:24:62:e4:37:f1:58:37:0a:
df:be:7d:90:58:34:4f:da:5b:ad:a1:c1:24:48:42:
a8:f4:5f:04:e4:87:66:0f:40:2a:9d:eb:99:d8:9c:
bc:a0:46:0c:1d:e3:97:47:0c:6e:ff:76:3d:ba:f3:
20:24:1a:61:d1:c8:5e:4b:99:27:95:04:87:ae:6c:
3e:c4:4a:1c:8a:a6:52:be:4e:b1:ce:ed:1c:82:90:
50:67:04:c8:6d:16:a5:61:1f:de:9d:c0:af:d8:bb:
9c:bd:20:c5:2b:36:83:0b:ec:c3:8b:d6:a8:b4:43:
74:e3:bc:b9:fd:bb:da:3d:30:38:b9:8f:2f:b8:91:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:C1:9D:26:3B:DB:F1:07:3B:03:58:8E:E2:C6:15:93:4A:44:D6
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pt3BnSY72_EHOwNYjuLGFZNKRNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:83:6a:07:69:49:dc:88:6d:66:39:2d:2f:13:2f:70:ab:c2:
90:66:d5:41:f8:3b:d6:af:2f:61:5f:be:b6:b3:c7:99:68:8d:
68:2b:cf:32:8a:6f:3e:d0:91:0b:5d:32:a5:1d:b7:4b:3b:f3:
2a:6c:d6:06:70:91:27:43:13:e8:48:01:7c:85:66:b7:bb:3a:
05:6e:f6:dd:f0:f5:92:df:22:b3:18:fc:01:b4:6c:74:1f:a9:
f7:6e:56:13:89:fc:dd:f5:de:c2:2a:c4:ae:27:c1:16:67:63:
f5:d1:33:57:5e:f7:f2:74:ca:52:2c:fb:b3:98:dc:b3:97:b9:
23:aa:31:0d:c7:11:e6:51:e5:eb:ae:2c:26:e1:77:cc:aa:4c:
25:2f:11:57:eb:a0:f8:a6:11:6b:32:ad:d7:29:27:4a:5e:0a:
14:08:f8:84:73:b5:19:0c:4b:5e:0a:ca:d9:4d:e7:d1:a1:ef:
50:35:99:b7:a8:9e:16:1d:c2:80:af:e2:9c:be:a1:b1:16:df:
68:de:82:ee:67:a5:42:41:50:32:da:14:2f:46:2f:6c:70:53:
84:e0:12:fc:0a:6b:d8:a7:6f:4d:a4:ee:da:86:34:3c:17:7a:
56:a8:73:c0:66:d2:8f:f3:14:71:7b:11:d6:0d:ad:4d:d5:c4:
4e:94:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org