Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/fBiraFxQl8TJ7_h1C3STHEnCaSk.roa
File: fBiraFxQl8TJ7_h1C3STHEnCaSk.roa (raw, json)
Hash identifier: elSNWwjqPugbJA3Hh24oiaOqlKe7+3KXgEnCUmcYL0w=
Subject key identifier: 7C:18:AB:68:5C:50:97:C4:C9:EF:F8:75:0B:74:93:1C:49:C2:69:29
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 018570CBEB70A7EE1D912CD7F303318B46F2
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/fBiraFxQl8TJ7_h1C3STHEnCaSk.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44400
IP address blocks: 194.33.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:eb:70:a7:ee:1d:91:2c:d7:f3:03:31:8b:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c18ab685c5097c4c9eff8750b74931c49c26929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:3b:6f:8f:10:15:08:47:1b:34:fb:90:5c:
0f:ef:bd:05:ba:25:11:68:c4:e7:02:92:d6:b2:87:
7a:b9:c0:0e:9d:3c:be:58:4a:c1:eb:07:2a:42:35:
6e:4b:71:ff:53:67:ef:83:f9:55:4c:21:12:e8:c8:
4f:a5:fd:a2:36:ca:40:63:65:e2:19:10:d0:4f:1b:
50:ba:7c:4a:4a:a3:f0:7c:15:8b:ae:85:c4:52:41:
3b:57:cb:55:c0:58:34:7b:95:55:ee:2d:ff:88:50:
02:d0:14:93:0f:7c:5f:bd:5c:82:d5:fb:e3:de:13:
c6:94:f2:dd:cd:57:10:55:4d:2e:39:eb:14:2d:63:
4e:29:f2:19:92:0f:b3:80:26:70:ce:b7:fb:2f:5c:
46:a1:42:5e:22:d0:7d:d0:1f:69:de:94:7f:e6:b8:
10:76:79:14:5f:d1:d6:9b:3a:fd:92:3d:ac:21:c7:
a6:70:ce:6c:db:e5:ad:d5:4b:e8:3a:07:4a:dd:48:
da:bc:64:e4:a5:4b:b7:af:80:cd:42:15:db:a5:55:
10:22:0d:b9:d8:fc:23:b8:51:45:26:e4:6f:88:bc:
c6:af:4f:26:0f:0d:84:05:9c:31:d0:1b:b9:3d:4c:
1d:6c:89:d4:3a:07:be:77:bb:5d:43:9f:21:53:04:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:AB:68:5C:50:97:C4:C9:EF:F8:75:0B:74:93:1C:49:C2:69:29
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/fBiraFxQl8TJ7_h1C3STHEnCaSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:96:5e:39:46:b4:fe:22:3d:2b:86:23:1a:9a:0b:da:d8:e8:
5d:cc:a4:83:1d:44:4f:0d:43:53:d4:67:88:a0:18:3f:6b:c1:
2d:a6:9a:ee:01:b3:d0:d7:d6:57:6c:66:54:06:c8:54:79:1b:
09:30:2b:db:5b:c0:00:d1:7c:18:92:80:c4:8f:61:fa:8a:49:
94:02:ce:cd:11:be:5a:8c:35:57:92:37:eb:fb:ad:29:6c:45:
ba:d1:7a:25:ab:3c:31:fd:d2:e8:db:09:93:c7:6d:d3:aa:b7:
a8:09:98:8d:3e:4f:50:78:1c:6c:f2:b2:9c:85:2a:5a:7b:62:
f9:68:63:3a:a4:72:67:4d:f6:d9:0f:fe:06:37:e1:dc:1c:15:
34:e6:8b:28:db:ab:8c:fa:5d:26:e4:07:2e:bc:e6:a3:5a:83:
83:a5:7d:46:65:b8:ee:e5:5a:f6:4f:1c:91:0d:91:f2:f7:56:
90:19:d6:df:b4:11:d1:96:bd:81:0e:5d:e8:7e:48:75:e7:81:
e7:e3:5f:87:c6:1c:84:5c:b8:11:79:d3:26:90:16:ee:cf:66:
f9:0c:0e:d9:c1:f7:96:81:ac:d8:10:48:8c:4e:9c:e0:f5:97:
ec:ac:e5:f9:46:33:2d:3b:02:25:4e:2a:29:7d:6c:e0:a9:ac:
b5:a2:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:02 2024 by rpki-client on console-ams.rpki-client.org