Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/IR7UvsBGLFthFJocS8InHrlQu-E.roa
File: IR7UvsBGLFthFJocS8InHrlQu-E.roa (raw, json)
Hash identifier: pD64tBtQB4BPybpCmXqZY5hb+5g+q2rCizjNVUyzpvw=
Subject key identifier: 21:1E:D4:BE:C0:46:2C:5B:61:14:9A:1C:4B:C2:27:1E:B9:50:BB:E1
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 018572B4050E8E38E3BA980A9F3AD83DA64F
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/IR7UvsBGLFthFJocS8InHrlQu-E.roa
Signing time: Mon 02 Jan 2023 13:37:58 +0000
ROA not before: Mon 02 Jan 2023 13:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29236
IP address blocks: 194.55.159.0/24 maxlen: 24
2001:67c:2d28::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:05:0e:8e:38:e3:ba:98:0a:9f:3a:d8:3d:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Jan 2 13:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=211ed4bec0462c5b61149a1c4bc2271eb950bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:d1:d6:d2:79:dd:d1:8b:b5:6c:82:60:c4:
30:ee:76:23:a3:58:5a:24:f8:46:03:79:38:e4:fa:
bb:d4:66:fd:5d:d8:af:3e:8b:1f:5d:fb:5c:ac:a1:
69:12:0d:34:a5:3a:79:f6:8d:88:2d:e3:85:35:8a:
2d:0c:9f:13:92:60:a2:c4:87:3f:a1:b2:87:4f:c0:
8b:44:d3:32:53:0f:b4:e3:cd:d1:0f:c8:96:4f:07:
93:a7:73:d8:2f:0e:ca:21:44:27:a6:1f:17:87:54:
3b:0d:12:f7:16:4e:5e:a0:95:ef:0b:6e:31:bb:23:
d3:ab:b1:0d:07:c6:e4:06:bb:74:96:dc:f5:cd:d5:
7c:07:df:8c:29:f8:a9:fd:93:33:35:68:e4:23:6e:
14:7c:08:7b:af:1b:7a:2d:74:a5:40:75:1b:a7:6c:
bc:c3:6c:be:b3:84:52:bb:56:6e:42:13:ed:81:6e:
5c:e1:19:cc:da:c3:1f:30:b5:b1:39:00:b5:b3:ea:
c7:13:1a:9e:22:6b:dc:a4:6b:c0:3a:31:14:2a:40:
fa:64:07:6f:78:b8:a1:27:a2:eb:5e:77:d9:47:e7:
a4:08:c5:79:63:a3:a9:ed:34:aa:0f:b2:ba:b1:e0:
54:2b:0c:b4:5c:83:59:ba:ec:e1:68:77:71:ed:dd:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:D4:BE:C0:46:2C:5B:61:14:9A:1C:4B:C2:27:1E:B9:50:BB:E1
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/IR7UvsBGLFthFJocS8InHrlQu-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.159.0/24
IPv6:
2001:67c:2d28::/48
Signature Algorithm: sha256WithRSAEncryption
99:7a:18:f1:4e:52:dd:86:4e:c7:10:5d:24:9f:fa:04:dd:70:
00:15:40:6a:3b:03:1f:59:65:b3:de:e0:c3:b6:a2:82:a1:8f:
9b:20:d2:1b:d7:e0:aa:b7:fb:15:f3:c0:16:2b:5f:2a:c3:3a:
3d:b1:88:da:16:61:1d:ab:e1:1c:39:38:74:2e:42:a4:4c:ed:
90:c6:39:b3:5e:12:01:0d:3f:ea:ab:88:df:c6:03:15:f0:36:
f2:c3:1b:10:65:b7:16:fa:09:42:da:d4:2c:be:86:48:a1:8e:
14:aa:3a:cf:df:7b:6d:9e:55:a8:b8:09:27:09:4d:86:00:b0:
5d:4c:a6:c0:3c:e9:57:38:1a:49:a1:df:c4:fd:b9:d1:de:8f:
ae:33:6d:c7:5f:83:1a:b2:fb:a7:ea:18:32:f5:94:b6:bb:48:
21:e7:81:43:66:1a:18:6d:56:98:5a:bd:e0:b3:39:f3:76:59:
bd:21:8e:2b:c9:e1:52:9b:09:45:90:de:82:98:66:88:83:9e:
39:50:53:85:8a:d0:b0:bf:24:da:c5:60:ae:4c:52:a5:85:5d:
e8:d2:c4:9f:6e:60:88:1b:ed:76:57:2f:58:36:7b:00:d0:50:
42:dc:10:fb:d0:03:35:88:82:e9:97:20:dd:77:8f:ca:3f:ab:
30:c0:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:24 2024 by rpki-client on console-ams.rpki-client.org