Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9knVKQ0zz8eLuiip8ar8cIcfqic.roa
File: 9knVKQ0zz8eLuiip8ar8cIcfqic.roa (raw, json)
Hash identifier: 7ZlZMU5ebQS/pSwwuHQvJsu6GMEeDXVYW+R2mesCmZc=
Subject key identifier: F6:49:D5:29:0D:33:CF:C7:8B:BA:28:A9:F1:AA:FC:70:87:1F:AA:27
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 0186E00BFBCC509DB21495FC660023C8743B
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9knVKQ0zz8eLuiip8ar8cIcfqic.roa
Signing time: Tue 14 Mar 2023 12:15:27 +0000
ROA not before: Tue 14 Mar 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200777
IP address blocks: 194.55.16.0/20 maxlen: 20
194.55.26.0/24 maxlen: 24
194.55.30.0/24 maxlen: 24
194.55.25.0/24 maxlen: 24
194.55.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:0b:fb:cc:50:9d:b2:14:95:fc:66:00:23:c8:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Mar 14 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f649d5290d33cfc78bba28a9f1aafc70871faa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:20:9a:41:97:15:ea:89:75:78:62:99:0c:
38:71:58:ea:01:9c:9a:2e:92:f9:82:af:cb:51:ce:
9b:5e:43:a4:eb:14:20:57:48:64:76:54:88:d6:e4:
d0:e6:8d:80:19:63:e9:ac:d2:be:9a:2e:2e:00:f1:
85:52:d1:12:ca:1a:7e:7d:58:61:a3:fb:e2:90:85:
ca:aa:06:5f:73:59:84:87:68:ef:d3:5e:3a:b9:53:
08:36:01:67:77:70:a6:73:15:4d:13:2e:dd:d0:f7:
41:41:8e:0c:3a:54:03:52:fc:0f:90:67:f0:17:10:
51:94:f0:60:40:f7:31:18:7b:bc:da:c4:66:5b:a4:
9d:47:ee:18:e7:b2:53:1b:b3:e3:c7:e2:27:dc:23:
a1:a6:f9:43:fe:86:67:2c:29:e7:1f:06:a0:0e:de:
4b:9c:4a:91:06:87:d4:2d:17:a7:31:b4:fb:61:68:
40:ab:33:99:89:5f:e3:da:95:1e:a2:f9:81:e1:23:
8a:29:35:10:f9:f9:74:89:10:fc:66:6e:10:8a:7d:
98:37:54:18:1c:90:c9:d9:80:d0:04:f9:70:46:18:
df:ec:bd:7e:f6:c3:da:1c:33:c7:64:ec:cf:97:3d:
29:c0:77:ed:cc:1e:8e:22:6c:3e:7a:6d:ae:ea:6e:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:D5:29:0D:33:CF:C7:8B:BA:28:A9:F1:AA:FC:70:87:1F:AA:27
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9knVKQ0zz8eLuiip8ar8cIcfqic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:f9:9f:7c:7b:fe:43:63:d6:16:2a:95:a9:a6:54:50:35:2e:
4c:61:48:e5:9f:0c:ba:6b:0f:52:7f:d3:0b:f3:d9:de:5f:43:
7c:d4:21:1d:8c:bc:a0:dd:8f:19:50:85:c7:ab:47:f7:93:a8:
0d:4b:45:cd:a4:b8:10:b7:f9:08:69:ec:2a:d2:b6:4a:e1:ca:
25:a7:2d:7c:60:98:5a:9c:6b:32:44:23:3c:e1:3c:6c:e0:1d:
ba:01:8d:9f:be:b0:84:19:a4:ca:e7:e5:8b:ab:1f:de:26:05:
5d:77:59:be:40:7f:b8:36:fc:ab:a9:0e:3e:62:c4:53:55:47:
ef:cb:5a:60:6e:16:c8:44:14:7b:f1:c3:ec:98:93:2d:d4:0c:
c7:87:9d:bf:b7:c9:a8:80:b8:bd:32:0d:53:10:09:93:d6:99:
92:db:b3:76:ad:6d:8a:00:74:7d:c9:b0:6f:f0:93:93:b8:24:
f5:76:6c:a6:07:83:fb:11:32:ca:38:67:14:be:0c:0e:42:2a:
f7:2d:66:88:ed:05:5a:ef:d9:32:d4:a0:a7:59:21:b8:60:f4:
3d:09:31:a4:85:8b:c1:ec:81:aa:9c:31:c2:83:5d:44:d0:1e:
c9:f1:27:c3:ac:ac:c7:d3:71:17:15:1b:80:d2:96:88:3d:3e:
11:d7:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org