Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/uK-svH0Jq2y7a7HysVpqxRxsMo4.roa
File: uK-svH0Jq2y7a7HysVpqxRxsMo4.roa (raw, json)
Hash identifier: yISddSUiP5O92BEZVn4lYzdqwq0DbjH3qkYYawC+1q0=
Subject key identifier: B8:AF:AC:BC:7D:09:AB:6C:BB:6B:B1:F2:B1:5A:6A:C5:1C:6C:32:8E
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 0185BB2E5BAB1C34D15E9E1D87D7ED8E685C
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/uK-svH0Jq2y7a7HysVpqxRxsMo4.roa
Signing time: Mon 16 Jan 2023 15:24:15 +0000
ROA not before: Mon 16 Jan 2023 15:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200777
IP address blocks: 194.55.16.0/20 maxlen: 20
194.55.26.0/24 maxlen: 24
194.55.30.0/24 maxlen: 24
194.55.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 12:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:2e:5b:ab:1c:34:d1:5e:9e:1d:87:d7:ed:8e:68:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 16 15:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8afacbc7d09ab6cbb6bb1f2b15a6ac51c6c328e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:0f:e3:52:44:09:af:fe:e2:e8:d8:0f:f2:
47:c5:fa:a1:a1:b8:1e:e9:42:d5:16:08:d0:bf:5a:
76:ed:df:79:b3:cb:cc:cc:24:43:a6:14:6e:5e:86:
ed:48:43:a0:c5:3d:f9:74:d1:c2:41:ca:6e:34:cd:
ee:3c:4b:8c:f8:db:2a:cb:37:a9:b8:94:ea:4d:0a:
45:45:a3:b9:0a:12:44:52:67:2f:7b:b0:d2:1b:4b:
49:1e:8b:4d:2c:01:7c:cc:8c:d9:1a:6f:3d:7d:81:
ef:72:d8:82:68:f0:e3:7d:96:a0:85:48:29:68:95:
5f:f7:5a:c7:6f:74:f0:c0:05:ea:b9:71:c4:04:3d:
fa:53:57:dd:d3:a6:55:d2:64:1c:fb:a7:12:fd:93:
6e:83:74:29:45:4b:ab:95:77:bf:34:ad:4c:94:0f:
f2:1f:56:2d:67:b3:8d:8b:d8:81:09:7c:5d:d0:bb:
dd:f8:56:fd:b9:85:6f:6d:2c:d5:3b:38:f1:7f:ae:
24:fe:42:c0:0f:93:c7:7a:1f:d5:5c:a5:ad:68:aa:
e3:83:24:95:d6:66:f0:9b:af:cb:64:5a:61:3a:49:
4b:3d:6f:b7:04:d0:ce:5c:a6:4c:1d:00:61:b1:2b:
9b:44:0c:10:c6:d7:ed:f2:b3:d2:6f:ae:eb:ae:3f:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:AC:BC:7D:09:AB:6C:BB:6B:B1:F2:B1:5A:6A:C5:1C:6C:32:8E
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/uK-svH0Jq2y7a7HysVpqxRxsMo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:19:6a:b0:61:04:4c:83:c5:c9:9d:44:a3:92:15:6a:fa:1b:
15:2a:b1:6e:bd:4a:e2:87:e3:51:20:16:26:74:14:dc:0f:f8:
25:65:bc:ec:91:76:67:97:f1:3e:8b:3d:d1:59:d0:5e:0f:da:
a8:69:bd:5f:b8:a0:c3:29:ad:31:4b:eb:04:88:83:3b:22:c4:
bb:5e:a9:e8:f3:0d:e4:79:2f:51:56:70:cc:4f:73:b6:17:df:
7c:8b:ff:ad:6e:38:5c:2f:35:58:1e:fe:d1:6e:9f:2f:a4:cd:
1e:3f:12:46:47:84:40:a4:18:2a:c6:1d:00:c9:14:c9:31:a9:
36:25:f7:8a:13:37:36:ad:0b:9b:45:8e:cd:8d:b1:df:48:da:
c2:78:2f:78:0e:39:02:b4:3e:72:0f:70:d8:1b:bf:53:b9:8d:
3c:3f:c1:92:4e:a7:18:41:18:26:f4:7e:3a:7f:e3:22:26:25:
68:ee:14:a4:94:13:08:f0:bb:82:6c:94:b8:9e:96:ad:db:ca:
5b:46:3b:7b:9f:47:55:a3:53:04:c1:87:d1:50:70:4d:c0:4e:
df:1d:70:7d:4e:cf:59:cb:a9:f5:d4:a4:d9:c9:2d:58:88:94:
27:00:d2:67:8e:fd:a9:ac:48:9c:8c:22:d5:88:6b:d7:5e:ac:
e0:94:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org