Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/T-Ii0DsAJZbF3lovne-BiOUwEVg.roa
File: T-Ii0DsAJZbF3lovne-BiOUwEVg.roa (raw, json)
Hash identifier: pCo/i7QzW7oKn+XMiuoT/YCNi+E4Hb/GTqBY3XhRx3A=
Subject key identifier: 4F:E2:22:D0:3B:00:25:96:C5:DE:5A:2F:9D:EF:81:88:E5:30:11:58
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 018C1B69B44B3EBF3294E231E1DADC59AC12
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/T-Ii0DsAJZbF3lovne-BiOUwEVg.roa
Signing time: Wed 29 Nov 2023 14:09:21 +0000
ROA not before: Wed 29 Nov 2023 14:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31477
IP address blocks: 194.13.8.0/22 maxlen: 24
194.13.12.0/23 maxlen: 24
194.13.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:69:b4:4b:3e:bf:32:94:e2:31:e1:da:dc:59:ac:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Nov 29 14:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe222d03b002596c5de5a2f9def8188e5301158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:57:57:e0:23:e6:8d:a2:bb:8b:dc:cd:39:
b4:9d:70:9a:76:eb:c0:fd:ea:0d:56:51:c5:b8:62:
63:75:f7:b1:f0:47:13:93:f7:f3:f0:e2:5b:31:81:
9a:64:47:b7:d2:8e:46:db:dd:df:bb:c6:32:00:e6:
f0:cd:f8:f7:7a:79:06:b0:e2:d0:e1:80:db:32:fd:
00:fe:cb:0b:17:71:0e:8f:5e:c0:86:7a:92:bc:5a:
56:30:38:32:e3:2c:58:17:da:d0:29:84:4e:0f:0f:
c8:10:3a:af:50:a9:82:cd:1a:8e:12:b6:c2:44:f2:
79:14:8b:29:a2:56:a5:f2:5e:7b:4c:cc:1f:4f:26:
3e:01:dc:97:4c:f0:fb:8e:4f:5a:e6:b2:19:b7:81:
62:fe:cc:5a:0f:62:84:c6:88:b1:97:01:d9:ab:c4:
54:c5:a8:82:6a:d9:a1:47:9b:e9:c2:16:32:32:fe:
77:33:68:de:a7:c5:a4:21:54:ef:27:ba:c8:15:3a:
97:3e:99:37:85:67:aa:bf:03:79:0c:5c:7b:ae:5e:
d7:a1:49:8c:df:f7:53:26:3d:8f:ab:02:66:a0:e9:
26:5a:3c:96:a1:a4:73:89:65:16:97:25:b1:f2:d2:
63:94:85:be:d9:84:57:a8:85:76:75:2d:e9:41:65:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:22:D0:3B:00:25:96:C5:DE:5A:2F:9D:EF:81:88:E5:30:11:58
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/T-Ii0DsAJZbF3lovne-BiOUwEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.8.0-194.13.14.255
Signature Algorithm: sha256WithRSAEncryption
29:e8:79:e6:b7:ef:ca:f2:89:6d:bc:ea:47:8f:2c:a5:30:53:
d8:59:d3:67:04:49:ad:fb:62:35:ac:1c:76:00:16:db:51:45:
4c:c1:4b:1c:2b:b1:1b:4b:fe:95:81:23:d2:34:b0:3d:6e:5d:
41:7a:46:95:87:bb:e8:b6:d9:46:ed:27:d5:54:e5:06:98:36:
62:2e:52:39:55:4e:07:be:fc:5d:19:ec:75:3c:07:a4:19:7a:
62:12:82:c7:91:f2:e9:20:2d:a8:5d:04:03:63:23:16:7a:07:
d4:c6:7b:c3:3c:bc:5b:db:f6:96:30:b0:94:e9:74:bd:42:c2:
b6:55:0b:01:1a:13:9e:0a:63:15:1b:3c:38:60:54:1a:3a:1d:
cf:8a:b3:7b:14:e6:e0:00:70:13:00:d7:6d:2a:37:c1:b9:4b:
08:9e:30:dd:ef:7b:d2:07:2b:92:fb:42:8b:6c:12:bf:ad:a3:
5e:7d:21:18:0e:9d:89:60:73:60:e1:d6:ab:cc:79:75:7a:90:
71:33:b1:8e:60:43:a5:5a:89:2f:e0:3f:49:bf:c3:4c:b2:98:
1a:68:f9:a5:61:f7:ff:7d:0b:c4:eb:5f:50:7c:5e:65:cb:44:
48:64:f6:3f:63:73:7b:fe:63:55:80:cf:da:7e:d2:87:22:be:
8e:85:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:54 2024 by rpki-client on console-ams.rpki-client.org