Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa
File: vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa (raw, json)
Hash identifier: zbtu+0wI+ezMkIkLucliUq5Lkp2wNQEQ6dxvBsVBH6Q=
Subject key identifier: BC:3D:52:98:C9:7B:2C:B4:8A:D1:65:82:C4:26:65:D1:D5:42:81:EA
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 018818591122E41EB953BB8408A04615EE64
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa
Signing time: Sun 14 May 2023 03:41:10 +0000
ROA not before: Sun 14 May 2023 03:41:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.76.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 04:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:18:59:11:22:e4:1e:b9:53:bb:84:08:a0:46:15:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: May 14 03:41:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3d5298c97b2cb48ad16582c42665d1d54281ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:6c:fd:c5:57:51:5e:8f:55:15:be:a0:c4:
b3:e0:a9:b3:1e:35:63:dc:75:fd:63:42:79:3f:fd:
be:49:44:13:a8:7b:97:4d:6b:19:f4:f7:d1:ae:3c:
b8:d7:e9:15:e1:3d:32:5d:5c:e9:28:1b:bf:0c:3c:
eb:b4:d9:f8:46:04:de:05:e7:4a:7c:6e:ce:4a:b8:
9d:1f:94:ca:bf:4e:ba:c8:4e:03:60:3d:6b:bc:8b:
00:aa:bc:5d:df:e3:77:c2:34:23:4e:9e:ec:fe:c1:
10:db:09:20:bc:04:40:37:bf:e4:8c:d1:6f:59:49:
c8:6b:c7:93:d6:c2:98:cf:a8:e8:d8:0f:7e:ee:c1:
de:75:a9:41:3e:38:a5:05:d1:63:ff:90:5d:b7:0f:
fd:e0:15:18:1e:99:de:2a:36:3d:2b:0e:da:02:f4:
6f:2b:61:bc:7a:a2:57:e7:fa:04:7a:18:0d:41:7f:
68:48:83:1c:26:ad:b2:27:34:fc:1f:fb:51:9e:68:
7e:f1:9a:c4:2c:77:81:45:17:51:0b:c3:c9:e6:46:
d4:c2:7c:d7:25:17:54:4d:2c:ac:5e:85:5e:5c:6c:
97:6c:ca:56:60:6e:fa:35:c2:72:19:14:cb:6b:bd:
87:e6:7a:96:24:f0:a4:53:1a:ef:21:59:ae:e4:5b:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:52:98:C9:7B:2C:B4:8A:D1:65:82:C4:26:65:D1:D5:42:81:EA
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
66:69:b2:b3:6b:f1:dc:5b:cc:91:5b:8d:3d:af:37:01:b9:10:
e8:39:2a:63:cd:b1:eb:b6:ad:9e:46:4d:9d:96:0f:94:f8:3c:
50:f7:04:27:8a:7c:ca:9c:1a:9d:e9:ae:6d:67:de:1e:01:bb:
d1:ca:c1:21:de:71:5b:06:35:99:09:9e:32:a4:01:88:36:71:
b0:08:10:d7:b3:f7:20:45:bd:98:af:15:86:55:c0:b9:58:7d:
a2:d9:39:44:b8:59:36:3a:6f:e1:3a:64:29:fe:5e:81:92:00:
75:a8:dc:2c:a4:30:a7:52:ac:5d:86:10:3f:54:a3:70:ea:77:
69:fb:d3:71:0d:89:2a:22:cb:15:c8:a5:81:e2:49:3b:c0:00:
02:43:85:44:fa:75:ff:b7:b8:32:a3:ac:75:53:2b:b0:c1:4d:
29:ee:8b:d5:b7:85:15:90:ca:a8:69:f8:8b:6a:97:72:27:c4:
46:99:3e:c9:93:76:6e:3e:b5:42:b8:90:bd:81:af:01:89:5b:
50:e3:28:30:8d:42:71:ab:ce:d8:72:e9:5e:43:ff:ad:03:90:
ea:34:ae:da:3f:15:da:b4:70:98:ce:b2:86:21:0a:f4:f2:c7:
2c:7e:f7:56:f9:08:41:47:31:ba:32:da:52:9c:48:d6:d9:5c:
9d:bc:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org