Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/rPtjzQmRtYjDe97pFb6k3VqAJc0.roa
File: rPtjzQmRtYjDe97pFb6k3VqAJc0.roa (raw, json)
Hash identifier: CLUL01rxjXA9IBWz1C6VPnNV7sDT06R2VtFRADd4xy4=
Subject key identifier: AC:FB:63:CD:09:91:B5:88:C3:7B:DE:E9:15:BE:A4:DD:5A:80:25:CD
Certificate issuer: /CN=823768c176ee5331183da7dd2f87479fe9977c3b
Certificate serial: 019117B15A1A471173A00C8D532E0FFCB269
Authority key identifier: 82:37:68:C1:76:EE:53:31:18:3D:A7:DD:2F:87:47:9F:E9:97:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjdowXbuUzEYPafdL4dHn-mXfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/rPtjzQmRtYjDe97pFb6k3VqAJc0.roa
Signing time: Sat 03 Aug 2024 10:03:04 +0000
ROA not before: Sat 03 Aug 2024 10:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48539
IP address blocks: 194.147.218.0/24 maxlen: 24
2a0e:8e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Aug 2024 18:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:17:b1:5a:1a:47:11:73:a0:0c:8d:53:2e:0f:fc:b2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823768c176ee5331183da7dd2f87479fe9977c3b
Validity
Not Before: Aug 3 10:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acfb63cd0991b588c37bdee915bea4dd5a8025cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:b3:15:bc:d4:aa:1e:1b:4e:1c:41:57:16:
92:14:ae:49:1b:a1:92:35:a0:e5:68:b9:f0:11:c2:
4c:a9:b4:c5:90:80:54:53:8a:69:52:e6:3e:e9:9f:
62:0a:df:76:43:e2:68:b5:de:e3:0e:bd:fd:d0:cb:
04:2d:89:c8:39:91:8a:36:a1:58:18:33:63:dd:6f:
37:4a:7d:dd:5e:b7:f5:3d:05:ed:a5:d5:53:65:b9:
ee:2b:f5:a5:20:1a:21:39:37:41:8f:68:f6:75:a2:
48:6f:76:03:24:77:a6:47:42:1f:5b:3c:51:7f:54:
d9:25:06:f5:30:51:c4:de:ee:96:86:b9:6d:d7:0a:
b0:6c:b4:8d:fc:c9:20:72:4b:3e:84:59:d7:8f:9d:
3a:22:77:8c:b4:41:37:8f:d6:62:4e:5a:02:ab:5c:
6b:48:4a:eb:2f:66:27:96:51:b1:f7:4a:3b:2c:5d:
ac:0a:50:ca:a1:7b:a7:89:cc:b2:5e:b4:c1:dc:5b:
16:96:32:7d:8b:03:7a:d3:90:ea:fb:70:c3:a6:81:
cb:06:e8:67:01:c1:0c:c2:f9:6d:08:ff:16:d8:64:
79:77:51:54:63:c1:d3:b3:5c:79:d0:04:25:7c:95:
4d:b2:13:9d:1a:ce:c8:11:e2:dc:da:2e:c6:69:d4:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:63:CD:09:91:B5:88:C3:7B:DE:E9:15:BE:A4:DD:5A:80:25:CD
X509v3 Authority Key Identifier:
keyid:82:37:68:C1:76:EE:53:31:18:3D:A7:DD:2F:87:47:9F:E9:97:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjdowXbuUzEYPafdL4dHn-mXfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/rPtjzQmRtYjDe97pFb6k3VqAJc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/63c985-fb70-4025-9019-b8ebeb6d81eb/1/gjdowXbuUzEYPafdL4dHn-mXfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.218.0/24
IPv6:
2a0e:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
08:d0:47:1c:8b:93:82:6d:69:b2:63:b8:cb:0e:63:60:55:18:
71:92:8e:37:3d:a3:30:d1:96:80:d9:c9:86:88:6e:17:88:d8:
bd:74:53:4b:64:b1:b1:74:51:20:cc:47:4d:9b:38:0f:10:08:
ad:4d:00:4a:ef:01:6e:f8:c8:6f:3f:62:c0:58:d6:c0:36:a4:
aa:0d:99:76:de:5a:8f:79:d6:d6:47:fb:f0:3f:fd:ae:1e:87:
0b:9c:e4:1f:28:53:d2:39:49:f2:dd:ef:c4:63:5e:40:34:42:
11:ce:93:5d:0a:0b:4a:6a:fe:9c:17:bb:08:99:45:bf:83:36:
7f:2e:74:51:56:f0:e9:9e:a6:13:4d:86:47:2f:dc:18:cd:77:
89:ec:9d:98:d5:8b:65:33:75:5e:61:f4:e3:cb:fd:2a:5b:01:
7e:a6:4f:c7:2c:b9:52:98:c0:12:4c:4b:2a:3b:5d:31:1a:85:
db:f3:af:75:9f:9f:94:66:9e:78:dd:74:77:28:ad:f5:d4:57:
a1:6c:cf:da:91:60:cd:8e:62:e2:b9:d7:7c:b2:d6:fc:21:93:
d6:d0:24:9a:c0:19:ea:6c:b2:9c:3a:91:f0:b5:bb:1e:b4:9f:
c2:78:58:a2:42:9c:89:0a:f4:a0:e8:0c:6e:15:a7:d2:4a:dd:
b9:51:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 20:09:37 2024 by rpki-client on console-fra.rpki-client.org