Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/jHZboH_qZKuYDSEexXKQq60lvS4.roa
File: jHZboH_qZKuYDSEexXKQq60lvS4.roa (raw, json)
Hash identifier: 37YImE8iMS2z59vdHecWWwUHrCFVK5JHgQn4Ao7CatM=
Subject key identifier: 8C:76:5B:A0:7F:EA:64:AB:98:0D:21:1E:C5:72:90:AB:AD:25:BD:2E
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 018E9F0F03C461D46866FC2EC7F0867FAEB5
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/jHZboH_qZKuYDSEexXKQq60lvS4.roa
Signing time: Tue 02 Apr 2024 13:45:45 +0000
ROA not before: Tue 02 Apr 2024 13:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28928
IP address blocks: 194.11.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 25 Apr 2024 12:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:0f:03:c4:61:d4:68:66:fc:2e:c7:f0:86:7f:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Apr 2 13:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c765ba07fea64ab980d211ec57290abad25bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:7a:4e:7c:9d:d2:3c:84:bb:5f:6b:d3:75:
68:97:bb:c9:b0:77:33:71:3c:85:db:c8:4a:ed:f2:
e3:e0:06:16:5d:77:84:70:ca:7c:9d:7f:f5:c9:33:
05:9d:73:8c:0e:cc:77:fc:1e:0e:58:94:47:14:84:
8f:f3:75:9b:24:83:75:5b:01:a5:cc:bc:8d:9e:4d:
db:37:f5:b9:14:d2:a4:3b:95:04:50:d6:0a:d6:36:
dd:45:f8:c2:f1:29:79:79:09:23:d3:87:f3:e1:ee:
02:11:4c:77:cb:cb:60:58:2d:e2:c4:d0:40:2d:08:
a0:1c:cc:cd:bf:52:16:cc:66:4d:f3:21:d2:75:9f:
69:bb:60:03:bf:fa:e9:c5:b3:6d:64:9b:33:ec:8b:
4e:83:bc:2a:af:d9:c7:d5:00:a9:22:59:6b:90:ea:
ef:3e:c6:eb:32:eb:eb:fe:c6:33:06:06:6a:a6:30:
89:27:0a:d1:98:50:05:19:51:38:da:3b:77:38:2f:
09:86:0f:cf:ab:6d:7e:43:be:fa:d7:2a:67:29:91:
fc:2b:16:fe:ad:25:10:da:8c:de:ac:c0:52:6b:bc:
22:18:44:38:37:7d:bb:07:bf:50:99:a0:4d:60:96:
30:c8:d6:94:24:f9:65:db:be:2f:08:bc:df:d7:ae:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:5B:A0:7F:EA:64:AB:98:0D:21:1E:C5:72:90:AB:AD:25:BD:2E
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/jHZboH_qZKuYDSEexXKQq60lvS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.136.0/21
Signature Algorithm: sha256WithRSAEncryption
84:2d:2b:10:65:be:ed:bc:e6:a6:67:cf:17:87:eb:c9:3d:da:
9e:7f:10:f4:61:ea:60:df:4e:68:c6:c1:06:b2:b2:fb:d6:3c:
1b:b5:9b:6f:6b:63:13:c1:22:90:0e:fe:36:84:a2:77:a9:05:
f8:d4:b0:b1:24:1e:db:f6:56:ee:64:0b:8f:70:d7:83:ec:74:
cc:4a:90:3d:06:df:6b:34:12:f8:9a:a2:95:28:ef:59:85:16:
36:62:44:6e:26:6c:a4:e9:af:84:52:7d:75:3c:66:33:bb:c8:
0e:79:04:96:b5:4e:2b:1c:98:07:45:b2:44:08:8c:57:d6:1f:
78:37:68:57:45:bd:96:53:59:ae:5c:57:dc:c8:36:4b:30:f5:
f4:88:60:2a:78:90:47:77:57:4a:28:1e:91:8a:f5:82:05:2f:
eb:c5:11:b9:75:ae:b4:80:d2:8b:74:49:9f:78:16:11:b7:ac:
1e:8f:89:bd:cf:f5:ba:4b:5e:32:1a:a2:ac:9a:24:f9:6c:9f:
5f:09:93:91:de:51:f8:b9:3d:6c:f5:52:25:d4:b3:a5:32:ef:
20:8f:a6:f3:e4:50:9f:3f:64:a9:0e:38:2b:72:b3:5a:3b:fb:
39:d3:82:69:31:9d:eb:86:03:57:d2:04:6e:2f:77:23:5c:a7:
b8:d4:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:48 2024 by rpki-client on console-fra.rpki-client.org