Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/CUbe7rlfrfTEDHUNL18it4XEBRo.roa
File: CUbe7rlfrfTEDHUNL18it4XEBRo.roa (raw, json)
Hash identifier: o3M2Wks3GyTSB8AuIdMItVFPBWvrC2Ii4TzpPuk+JrI=
Subject key identifier: 09:46:DE:EE:B9:5F:AD:F4:C4:0C:75:0D:2F:5F:22:B7:85:C4:05:1A
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 018DE9A51B86255D193CD5B2C58854EE106C
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/CUbe7rlfrfTEDHUNL18it4XEBRo.roa
Signing time: Tue 27 Feb 2024 08:18:48 +0000
ROA not before: Tue 27 Feb 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57910
IP address blocks: 194.127.162.0/23 maxlen: 24
2a00:b5c0::/32 maxlen: 32
2a02:2110::/32 maxlen: 32
2a0c:7a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:a5:1b:86:25:5d:19:3c:d5:b2:c5:88:54:ee:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Feb 27 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0946deeeb95fadf4c40c750d2f5f22b785c4051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:35:f3:bc:09:09:b2:ec:95:23:9e:32:cf:
95:24:56:e0:fa:43:f4:a1:23:4a:d9:e2:26:a8:91:
2d:e0:95:8f:7b:f6:3b:bb:3f:8a:75:0e:25:98:aa:
b7:26:5d:be:d9:d6:91:3c:4d:98:e5:05:3c:94:5f:
d3:bc:59:02:d6:2f:28:0b:e5:4f:7d:6a:48:16:83:
70:a5:17:87:57:61:9b:c3:8f:c9:65:fb:77:f7:4a:
fe:bc:29:6b:d6:91:82:8a:62:57:48:c3:85:28:86:
c1:87:1b:c9:e6:bd:38:d3:27:f0:17:06:87:35:c1:
06:dd:13:07:74:8f:3c:01:94:07:85:2d:29:01:9f:
50:66:c2:6c:9b:be:e2:78:b7:9a:89:c4:29:d4:b6:
04:7c:cc:1d:15:c3:07:7f:a6:fe:ac:0c:a0:f6:9b:
ee:6d:41:6f:30:ce:5f:82:85:c8:af:4a:8e:24:ff:
27:d1:ae:33:5f:3d:ad:10:dd:06:6f:72:9c:f6:4d:
95:85:0e:5d:08:02:09:e0:51:e4:15:cd:d6:e7:45:
d5:a2:f3:6e:bb:43:df:f8:6b:ed:7c:ee:38:d0:46:
65:3a:db:fd:f3:41:57:fd:de:d9:67:fd:ff:25:cf:
c7:e7:ad:d4:d7:da:f7:18:95:44:b6:bc:d1:a6:0b:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:DE:EE:B9:5F:AD:F4:C4:0C:75:0D:2F:5F:22:B7:85:C4:05:1A
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/CUbe7rlfrfTEDHUNL18it4XEBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.162.0/23
IPv6:
2a00:b5c0::/32
2a02:2110::/32
2a0c:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ce:0f:d6:a8:25:17:ba:12:b9:c3:f1:68:02:10:fb:5c:02:
d9:d6:56:8d:0e:ee:eb:cc:74:31:0c:5b:43:d2:72:6f:93:da:
29:fd:79:bd:e6:4a:9f:9c:cc:ba:29:61:b5:3c:ba:13:04:ab:
8d:9d:65:3e:85:66:fa:35:94:1f:72:e8:66:05:91:e5:5e:63:
ff:bb:0e:bb:3a:2e:ba:8a:21:99:ba:6f:4d:0f:18:53:ad:93:
9d:3a:d0:44:d3:fe:6d:d0:84:3e:23:96:00:3d:f9:cd:68:3e:
ac:bb:04:77:ae:5a:d4:82:ba:3b:7b:e3:28:7e:d4:e1:40:19:
ff:a0:0d:19:f6:da:c8:d0:3e:af:3a:7b:81:58:4f:a3:bb:62:
2c:e1:f0:fb:37:fe:08:cc:14:2d:e5:99:77:ca:94:8a:29:53:
77:25:50:fa:b5:63:45:50:b4:de:cd:d8:94:60:d4:2f:75:a1:
52:59:de:da:99:7d:91:fe:e3:a6:84:3a:de:a9:3d:f4:7b:66:
8a:b4:8b:55:90:cf:6b:79:49:92:13:5e:47:54:9b:96:ee:5d:
33:2d:dc:e6:8e:61:14:a8:b7:df:af:e9:d1:77:74:7e:c2:2a:
7a:fa:7d:a1:3b:16:76:69:4a:e0:c0:6e:3b:c6:6b:58:2c:c0:
ed:ca:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 21:14:24 2024 by rpki-client on console-fra.rpki-client.org