Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1VWV6ejgOfATHecYklV8C8lNKOs.roa
File: 1VWV6ejgOfATHecYklV8C8lNKOs.roa (raw, json)
Hash identifier: hOBcEqrLJqGod+N4EcdptQUG4wIa45Yi2hrV95lc/TU=
Subject key identifier: D5:55:95:E9:E8:E0:39:F0:13:1D:E7:18:92:55:7C:0B:C9:4D:28:EB
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF7B421CE701F276B82C802E297CBD
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1VWV6ejgOfATHecYklV8C8lNKOs.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202226
IP address blocks: 194.181.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 09:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7b:42:1c:e7:01:f2:76:b8:2c:80:2e:29:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d55595e9e8e039f0131de71892557c0bc94d28eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:6b:5a:cd:3b:86:18:ec:7e:30:d7:ca:9f:
38:b5:76:be:6f:2f:e7:1e:8e:9a:66:d6:6a:a5:54:
bc:d6:ab:55:fc:7c:e2:9a:ee:11:ff:1b:cb:1f:b8:
0b:71:d9:cc:d1:38:c2:aa:bc:e7:be:27:1a:39:ce:
51:ab:7e:46:04:de:2f:7b:02:c2:63:b1:b1:53:f5:
ea:5b:a5:ab:10:81:06:4f:37:21:79:04:cf:35:6f:
62:19:64:75:1e:93:28:3b:5c:81:86:15:a5:f7:97:
ce:e3:06:42:22:0c:e3:17:19:69:ba:1e:aa:f7:63:
3b:61:a6:04:85:2f:5d:7f:0e:87:68:d7:9f:24:6d:
cd:25:0b:81:43:cf:12:a2:2b:d3:6f:7a:ce:d0:e4:
eb:08:8c:41:94:49:9c:b5:39:11:44:9b:32:5f:51:
22:5e:ca:6f:d8:b3:94:d0:43:5b:b0:ee:d4:d0:e0:
d2:17:c6:1e:84:66:24:af:2f:50:78:d9:39:1c:c7:
95:ec:af:38:a9:98:8d:bc:81:07:5a:bd:df:96:bf:
2c:52:5c:9e:4d:2c:fd:59:c2:8c:3d:d5:74:ad:ad:
e0:a0:07:63:72:12:47:9a:5f:78:3a:9a:ef:ab:a6:
50:a6:5d:65:f1:c2:1a:ae:32:9e:3f:cb:36:78:a4:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:95:E9:E8:E0:39:F0:13:1D:E7:18:92:55:7C:0B:C9:4D:28:EB
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1VWV6ejgOfATHecYklV8C8lNKOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.114.0/24
Signature Algorithm: sha256WithRSAEncryption
10:40:1d:ea:f7:88:b8:2a:95:7a:33:13:4c:e2:fc:0e:3a:a8:
84:db:80:52:58:7b:53:bc:c4:97:ef:b3:3a:eb:4c:68:d9:50:
c8:ae:cb:f9:58:a3:68:97:52:90:77:48:ef:5b:ad:b2:43:ee:
e8:ba:bb:98:76:e1:ee:9a:bc:ce:1f:63:ea:6c:f0:08:de:fc:
fd:40:81:c0:fe:ba:eb:4f:95:d4:9e:61:80:97:cc:65:25:19:
f0:5d:22:03:06:fc:b6:cf:62:32:8d:e1:92:f5:87:ca:54:90:
53:08:5c:d4:da:8e:b1:3c:cc:58:88:42:fd:8e:c6:a0:a8:c5:
87:dc:9c:38:6b:ad:b7:23:99:f5:15:a8:ca:af:17:ef:74:bc:
20:d4:3c:38:75:f0:cb:1a:e2:d2:32:cd:37:d2:70:20:f8:f5:
dc:24:01:65:5f:3c:4e:d1:5a:86:9a:68:62:3a:91:7d:eb:fc:
d7:20:6f:75:71:26:37:c9:e9:03:16:ba:95:2e:63:00:c5:96:
21:41:bc:f9:e9:d0:70:a8:f6:1d:5b:61:10:6e:6b:3e:92:0b:
40:7e:f2:6b:2f:c0:7a:b6:09:26:ed:4d:8d:7c:35:89:79:25:
97:38:a0:46:56:0d:10:1f:a6:05:ad:20:5e:c5:1f:07:09:b8:
c7:79:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org