Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/7Iuhq4-NdcmO48J_S-H9L51tvmw.roa
File: 7Iuhq4-NdcmO48J_S-H9L51tvmw.roa (raw, json)
Hash identifier: 0km8TOSY6xC5VGWI4MQC/j8Ki+CKP0sK85oLv1ET2tg=
Subject key identifier: EC:8B:A1:AB:8F:8D:75:C9:8E:E3:C2:7F:4B:E1:FD:2F:9D:6D:BE:6C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 018AD9FC062D6CF4EFB54D2DE9ED270D9F58
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/7Iuhq4-NdcmO48J_S-H9L51tvmw.roa
Signing time: Thu 28 Sep 2023 04:11:27 +0000
ROA not before: Thu 28 Sep 2023 04:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207718
IP address blocks: 194.147.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 02:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:fc:06:2d:6c:f4:ef:b5:4d:2d:e9:ed:27:0d:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Sep 28 04:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8ba1ab8f8d75c98ee3c27f4be1fd2f9d6dbe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:0a:5e:ff:27:f1:9b:24:56:05:b5:84:c1:
17:5b:df:b7:38:d1:1c:3c:fb:40:47:f6:ff:c2:ec:
c3:42:cd:4a:6d:8a:48:1c:33:9f:b5:cd:2c:a8:7b:
44:13:58:61:ff:9e:db:db:01:fb:db:6f:95:ec:b0:
11:47:40:b4:d4:44:59:92:02:53:93:97:f4:15:a3:
f9:86:5d:0a:c6:42:40:79:11:c2:11:d9:f7:3b:7e:
1e:29:c0:4d:22:f5:d4:97:f9:dc:63:d2:2b:16:75:
83:ff:84:d3:e4:b7:e4:d8:eb:df:c3:50:80:48:8c:
88:e1:0a:51:5d:46:f0:24:98:e7:47:17:0c:b5:27:
49:3e:20:49:93:9e:96:61:cf:85:b1:6a:90:b6:d4:
bf:62:ac:28:9f:eb:bf:99:38:ad:c1:a7:ee:f7:3d:
92:52:93:3a:a2:62:c2:0e:3d:26:ad:30:b9:76:00:
f6:b0:d6:4f:9b:76:31:fd:a7:f8:c0:47:cd:75:1e:
b3:99:01:51:f3:28:1e:63:f2:55:4d:6f:60:f7:af:
8e:a4:d6:10:25:e6:0f:31:57:f9:13:d9:16:45:a9:
82:f5:c4:28:73:76:39:83:17:a7:0e:0b:ea:93:d5:
70:00:3b:9d:9c:d4:42:d1:36:25:07:54:b0:83:21:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:A1:AB:8F:8D:75:C9:8E:E3:C2:7F:4B:E1:FD:2F:9D:6D:BE:6C
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/7Iuhq4-NdcmO48J_S-H9L51tvmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c4:e0:fc:1d:ce:b6:28:c1:24:fa:c4:22:b8:d3:64:f2:ab:
a0:4d:9d:f3:43:47:1a:03:75:b3:00:33:66:98:c9:69:7f:10:
d0:31:50:72:a8:18:32:ee:a5:a0:56:87:85:d6:1e:91:41:86:
1b:01:91:14:6c:60:54:70:ff:d8:ef:35:a4:1d:b9:b5:67:f8:
79:38:33:d4:fc:d7:aa:d0:99:95:ed:1b:bc:57:65:b8:50:cd:
8d:2a:7e:c8:5b:ba:1e:30:f6:d7:40:59:7e:33:e3:75:66:89:
4d:2d:8e:46:66:46:72:59:7a:67:6b:45:f2:84:ed:2a:0f:4c:
cc:10:45:ca:98:d4:a8:5c:bd:9d:61:3a:07:5d:06:20:76:71:
f5:41:39:a6:de:c3:90:c5:09:17:70:74:f8:22:82:b6:1e:91:
bf:db:19:34:87:34:86:1d:44:32:95:b1:b7:48:df:7c:55:41:
cc:e1:d7:41:77:d7:d5:9c:73:2c:12:e3:64:c3:3a:0c:cb:fe:
72:bd:d2:ae:dd:41:11:ba:f3:d0:dd:b9:7f:52:33:ad:83:68:
7e:71:58:02:8e:f2:82:87:6b:bd:49:63:84:85:e4:8e:32:9a:
61:83:ba:e3:d3:1f:91:81:f7:ad:33:69:e5:86:bf:27:83:79:
6a:79:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:31 2024 by rpki-client on console-ams.rpki-client.org