Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/ayJQBqlY6ALC1JcZ2TuJ45HSoco.roa
File: ayJQBqlY6ALC1JcZ2TuJ45HSoco.roa (raw, json)
Hash identifier: TXXv47USREQx1dNB8ZHQfTrGH6RAhEfdiPnolV9mcaA=
Subject key identifier: 6B:22:50:06:A9:58:E8:02:C2:D4:97:19:D9:3B:89:E3:91:D2:A1:CA
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 01857070642AE2465458FB8A3CAF4B9F54D5
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/ayJQBqlY6ALC1JcZ2TuJ45HSoco.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15461
IP address blocks: 213.174.29.0/24 maxlen: 32
194.44.38.0/23 maxlen: 32
194.44.179.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:64:2a:e2:46:54:58:fb:8a:3c:af:4b:9f:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b225006a958e802c2d49719d93b89e391d2a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:da:c3:4c:63:89:ea:d9:fe:42:c7:1d:cb:
49:43:3f:67:01:d7:9a:c2:b0:b3:c4:1d:52:19:4d:
bd:b6:ce:4b:81:85:80:b4:8f:00:9e:d0:49:5c:26:
5e:c3:e4:9f:de:78:0e:d5:1e:d5:46:30:5a:11:4e:
cf:0b:c6:ee:a6:e6:c5:39:16:d9:57:54:11:f1:3c:
94:31:c8:76:47:f6:66:8a:c6:22:7d:80:c3:38:16:
14:64:54:7d:4a:db:db:62:df:5c:b7:5c:21:e7:05:
84:f7:2b:a7:9d:4a:e5:0c:05:d4:7b:19:00:de:b8:
06:12:7f:0c:32:f5:3c:4d:02:92:f2:9c:8d:5b:ed:
5b:3b:4c:2b:61:6e:40:99:02:d5:6b:13:d1:64:bc:
a3:ed:da:b9:2a:e3:1a:eb:9c:09:57:fa:c9:30:ef:
3f:f9:1b:93:da:8e:6f:13:3d:9f:90:bc:d8:06:b1:
b7:01:29:1f:f2:aa:13:58:3e:18:36:69:8a:70:33:
69:1c:ad:e3:50:44:c6:58:9b:ea:1c:fc:da:5e:23:
cc:3a:22:16:2e:7d:0a:23:ed:d4:24:14:e1:68:6d:
06:e1:b2:1d:66:0c:2c:bc:71:c1:c7:75:61:4f:33:
49:8a:c7:02:85:d3:11:01:19:55:79:5c:2a:82:47:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:50:06:A9:58:E8:02:C2:D4:97:19:D9:3B:89:E3:91:D2:A1:CA
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/ayJQBqlY6ALC1JcZ2TuJ45HSoco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.38.0/23
194.44.179.0/24
213.174.29.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3c:17:b5:66:fc:70:6f:c9:7d:08:53:2b:6a:0b:ea:da:db:
c0:29:e4:f6:48:59:66:f8:b3:05:d9:28:9d:87:33:75:8f:0a:
8d:db:42:f7:68:fa:67:6c:1f:39:c4:78:d7:1f:ca:5c:f3:b7:
8d:34:1e:9a:fa:7d:2c:2b:ab:b5:bb:98:ad:33:31:5c:e5:ae:
1b:9b:49:c2:e5:b6:b9:78:46:9e:b9:ab:bd:a0:e2:10:59:17:
8a:82:6b:a7:41:06:76:5e:33:42:4f:d8:01:a7:bd:ae:0f:f1:
24:1d:d4:96:15:09:6e:4b:ae:df:e8:55:e6:9d:d7:05:40:0a:
b9:de:95:35:21:0e:08:ec:71:e6:b5:49:14:40:48:8b:48:aa:
78:c0:6c:d9:cb:eb:57:6b:ea:be:81:3e:eb:1d:0e:82:c5:a8:
f6:c1:cb:9d:fa:6f:f3:69:3c:60:aa:0b:51:28:ab:fb:5d:28:
87:bd:0a:c6:97:f1:c5:6a:3b:fb:f8:a9:5f:81:52:61:0b:db:
61:54:f9:ff:d6:1f:34:8a:9f:8d:f8:96:c8:f3:a0:5c:08:00:
65:63:8d:4a:14:66:13:e1:c7:df:4d:25:86:ba:66:2e:dc:80:
60:11:24:50:87:f3:a8:aa:b1:5d:bc:01:57:17:4c:9a:68:8b:
4e:a4:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org