Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/QAwCdpfNvXt6ipE4Lj-xQ7XEDY4.roa
File: QAwCdpfNvXt6ipE4Lj-xQ7XEDY4.roa (raw, json)
Hash identifier: 2OjZYssxWvIXFYu8/VqrlGcFvO0rsCTI7zT9ar7hbdQ=
Subject key identifier: 40:0C:02:76:97:CD:BD:7B:7A:8A:91:38:2E:3F:B1:43:B5:C4:0D:8E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 01856F0B70D2496DEC78FD04EFBA9582238A
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/QAwCdpfNvXt6ipE4Lj-xQ7XEDY4.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2854
IP address blocks: 194.24.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:70:d2:49:6d:ec:78:fd:04:ef:ba:95:82:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=400c027697cdbd7b7a8a91382e3fb143b5c40d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:eb:05:51:a9:be:18:86:73:ee:77:a9:1f:
14:8d:e5:88:ae:0d:c1:5e:ec:ef:c6:c1:43:f5:cd:
95:f2:88:03:11:21:7d:ba:a7:a5:52:49:22:b0:75:
d9:fd:c6:39:4f:a7:1a:21:e7:6f:ca:9c:89:13:93:
34:8f:84:ff:7e:29:f9:ef:54:59:df:29:ae:8a:97:
c7:8d:d4:c9:29:e6:dc:b1:d5:81:5a:9f:78:c8:8e:
7e:8a:97:73:b1:a0:e3:a5:56:0c:d7:b5:a5:ff:16:
86:cc:5a:13:42:dc:e8:30:55:42:ee:a8:65:8b:8d:
15:05:78:d3:86:e8:fe:a2:0a:f4:0b:f5:b8:e1:7e:
1e:38:a3:b5:91:48:63:ce:21:0f:62:e5:44:79:66:
f1:db:69:c8:17:e4:74:34:44:c6:35:9b:25:f2:d6:
85:38:06:5a:df:93:62:79:c7:f3:22:0d:1a:75:76:
22:20:e0:44:c6:3a:97:5f:78:fc:26:92:2a:bf:30:
8f:5b:40:b4:7a:a1:ab:19:2f:66:4b:e1:25:4c:94:
49:18:01:c0:bb:b1:81:52:75:05:51:e3:bc:71:d0:
76:ea:87:ab:08:3d:8a:fa:fc:01:1d:ba:07:71:75:
17:8e:4a:8b:40:e1:86:a7:29:2c:ae:17:01:e5:22:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:02:76:97:CD:BD:7B:7A:8A:91:38:2E:3F:B1:43:B5:C4:0D:8E
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/QAwCdpfNvXt6ipE4Lj-xQ7XEDY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:02:c8:da:bf:33:8b:83:7a:69:28:ce:f2:15:bf:f4:64:70:
03:5f:1f:7d:c7:49:35:ed:dc:28:99:a4:0e:d8:b7:81:3e:0e:
07:e5:eb:11:eb:50:ce:4b:e9:22:34:6a:90:d7:49:0a:ab:d5:
9b:5f:00:b4:65:b0:74:5f:b6:3f:79:04:4e:d6:27:bd:1b:cd:
18:59:a9:5c:e2:1b:4c:16:2b:8a:0d:3b:30:18:d6:de:33:c6:
9b:3c:72:a8:79:f8:0c:9e:82:5f:a6:f1:38:9e:d8:de:18:86:
f7:41:d2:bc:6b:6b:c2:4c:83:53:87:b8:26:6a:f1:aa:49:ee:
e9:21:4d:94:7b:43:3c:71:9f:e7:46:06:b6:07:58:d2:74:b5:
73:b5:5b:08:16:9b:f5:b7:66:9a:1f:11:ab:bb:d5:1b:87:02:
fe:18:a6:a1:b6:07:da:0d:c1:53:16:3f:63:3c:d3:60:11:ea:
3c:2e:c9:06:85:06:64:c4:39:57:cb:61:b6:53:43:d9:4a:c9:
d4:ba:f5:c7:f8:87:7b:62:2b:a2:0e:51:f4:c7:a7:34:d4:1a:
05:9d:03:38:51:ce:30:92:d4:ea:9a:9e:43:87:6e:f2:5e:ea:
2c:f4:b5:34:fe:58:d2:9d:10:b2:bf:fa:d8:42:1c:57:3f:4b:
ec:ca:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org