Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/IYvS474oWsgt7370ykZn6A7dOAg.roa
File: IYvS474oWsgt7370ykZn6A7dOAg.roa (raw, json)
Hash identifier: lvQnEe8NAcfQzj2SUwB4GaoumQVMzfSZ9N5mgDNmEfI=
Subject key identifier: 21:8B:D2:E3:BE:28:5A:C8:2D:EF:7E:F4:CA:46:67:E8:0E:DD:38:08
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018F0576A7FB1F28C299248D6B74E8836281
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/IYvS474oWsgt7370ykZn6A7dOAg.roa
Signing time: Mon 22 Apr 2024 11:00:13 +0000
ROA not before: Mon 22 Apr 2024 11:00:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 193.135.137.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 08:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:76:a7:fb:1f:28:c2:99:24:8d:6b:74:e8:83:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Apr 22 11:00:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=218bd2e3be285ac82def7ef4ca4667e80edd3808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:d4:97:04:08:cf:75:5a:35:26:1c:c9:3e:
d2:37:4b:d8:ae:20:6f:b6:e8:82:4c:96:e3:67:6d:
11:06:95:1b:1a:65:d5:0d:f2:ef:76:3a:7f:10:58:
54:16:b6:1c:0a:37:a6:b5:af:aa:71:47:8b:6c:a2:
21:2b:b5:e4:fa:ca:42:ef:d3:ca:17:fe:0a:c8:42:
af:1f:6f:af:9c:4e:bd:73:f9:66:c1:cb:6a:e0:41:
22:59:fc:b6:aa:d1:b3:21:83:54:c5:46:2d:97:0a:
7d:0c:45:22:b1:ea:7d:bf:5f:fd:4e:dd:91:46:59:
08:b1:8a:29:4f:84:6b:5b:b3:02:0f:f9:34:87:82:
7d:f9:66:18:71:19:d1:a0:23:50:37:db:a1:9e:d1:
b0:5f:76:f4:6c:cf:76:a0:da:34:38:3e:80:9a:07:
fd:f8:63:36:9a:46:89:4e:92:a6:82:b2:a4:db:08:
6c:b9:6b:7b:ab:0a:5f:b3:32:9a:dc:92:68:ec:51:
84:64:bd:8f:f7:e9:73:50:fb:4e:bb:86:f2:69:be:
b7:67:44:0f:f3:54:84:76:db:2d:6f:15:63:23:d0:
c5:c7:61:b0:9b:ac:7c:78:c1:62:38:b8:30:2c:d0:
82:ba:71:3b:b2:e1:ca:30:f0:87:13:db:e3:21:42:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:D2:E3:BE:28:5A:C8:2D:EF:7E:F4:CA:46:67:E8:0E:DD:38:08
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/IYvS474oWsgt7370ykZn6A7dOAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.137.0/24
193.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f8:13:9e:f1:93:db:cb:7d:85:6e:db:7a:c6:7d:3f:67:e1:
9d:d8:3c:6d:3d:09:f5:62:98:09:10:9b:a0:bc:63:c0:92:14:
d3:25:37:5c:25:16:92:db:42:65:b9:f9:eb:90:e2:30:a3:c5:
15:bc:a2:96:40:ac:66:73:8b:f9:cc:33:f3:a2:c1:71:20:fd:
62:95:3c:35:51:ae:80:4b:71:5d:07:45:04:72:5b:87:39:f0:
18:09:9f:be:60:c5:9d:1c:e7:e1:f1:b8:38:48:e2:90:3d:ee:
f2:85:43:98:01:45:13:47:3f:0d:76:30:9e:a9:b5:26:68:07:
cf:17:bd:e2:07:8c:da:ee:74:f0:09:50:00:8b:70:d7:90:c9:
1e:6b:75:96:56:30:9b:f4:8a:fb:b4:7b:8d:12:2c:4f:28:ef:
ea:dc:81:1e:d7:1f:16:3b:00:02:ba:84:e1:4f:88:72:16:9e:
fd:31:b7:fb:81:b4:89:76:74:81:57:ef:16:c7:6f:76:4b:c1:
de:90:eb:7c:6e:10:ea:c4:8c:33:b6:18:c2:4b:a5:e9:51:3a:
a9:6e:bd:45:5f:81:ae:0f:71:78:00:ee:8d:66:af:fb:cb:ad:
3e:9b:52:a6:eb:1a:e4:6c:46:ae:df:fc:2d:c7:dc:45:88:76:
62:da:a9:21
-----BEGIN CERTIFICATE-----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Generated at Thu May 2 11:40:21 2024 by rpki-client on console-ams.rpki-client.org