Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/usDxlHBJq5dHd3SxLWDmmKYdtrU.roa
File: usDxlHBJq5dHd3SxLWDmmKYdtrU.roa (raw, json)
Hash identifier: DgucGYUMkhpbSMY/ekARIj0OflvQCvyy2hjVA8FwpiA=
Subject key identifier: BA:C0:F1:94:70:49:AB:97:47:77:74:B1:2D:60:E6:98:A6:1D:B6:B5
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 01856F66DE615CE5836F890F736AA516631C
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/usDxlHBJq5dHd3SxLWDmmKYdtrU.roa
Signing time: Sun 01 Jan 2023 22:14:50 +0000
ROA not before: Sun 01 Jan 2023 22:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34564
IP address blocks: 194.126.228.0/24 maxlen: 24
2001:67c:2310::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:de:61:5c:e5:83:6f:89:0f:73:6a:a5:16:63:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jan 1 22:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bac0f1947049ab97477774b12d60e698a61db6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:c9:af:75:d1:39:a1:33:f7:31:f5:43:18:
92:d1:d7:49:00:2c:12:b8:1a:73:52:00:af:e5:0b:
f5:f1:4d:62:ea:3b:6b:66:94:d1:ac:66:37:92:fe:
31:35:84:f8:54:1a:40:87:3f:2e:9c:05:29:22:9c:
9a:c9:79:86:ea:8f:6c:89:9a:ae:12:1f:0f:38:45:
df:ea:87:0a:28:3a:a1:19:ba:e4:82:36:af:85:8b:
3d:df:77:ba:23:e4:19:b9:fb:6f:cc:a5:dd:dd:d7:
29:d7:70:ec:1a:08:42:21:68:1a:47:d8:78:37:03:
1e:7e:0b:46:6a:0f:87:b1:c7:7c:c0:41:f9:09:64:
af:a7:64:5b:ae:c6:87:2b:8f:f1:22:5b:ab:b2:f6:
ae:7e:cc:a2:d0:c3:e6:fe:c0:e5:e2:69:0f:dc:4f:
4f:c5:50:8c:79:df:77:31:6c:02:32:e5:08:66:4f:
75:80:42:b4:94:69:8b:5c:be:43:45:ec:35:c1:79:
20:4b:0e:9d:a8:0f:86:d7:fc:42:92:61:bd:df:4d:
4f:dd:77:a0:ce:4b:12:d6:01:8c:96:f5:b6:99:2e:
ba:d9:2a:79:59:52:9e:0d:cc:18:e6:1c:f0:7e:4e:
b7:da:87:24:6f:2f:38:ba:d3:af:2a:a8:59:e9:6d:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:F1:94:70:49:AB:97:47:77:74:B1:2D:60:E6:98:A6:1D:B6:B5
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/usDxlHBJq5dHd3SxLWDmmKYdtrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.228.0/24
IPv6:
2001:67c:2310::/48
Signature Algorithm: sha256WithRSAEncryption
9c:98:86:a8:4e:e8:42:f8:39:60:dd:57:fd:74:68:0b:e5:4b:
a3:73:5c:e3:a8:48:9e:08:51:f7:5c:c4:a0:60:7a:09:ab:c2:
11:17:58:f6:e6:38:ba:af:56:0f:66:7e:74:61:b8:6d:37:b3:
e5:44:b7:21:22:a7:c1:93:e5:41:62:7d:5a:eb:d9:03:ee:7f:
b0:9b:04:56:80:c0:49:72:8e:fa:7e:2e:5a:97:2f:6a:11:7b:
1b:6d:f5:d9:c3:ae:14:ee:c1:10:14:4f:c6:7f:ef:07:c6:af:
07:91:63:83:bd:08:51:8e:5b:f7:44:bc:66:d8:50:e0:ef:68:
c9:ae:a2:52:79:99:93:39:ca:95:6d:eb:2e:d6:19:bc:60:92:
8d:42:97:14:e3:c2:7c:8e:e9:02:2c:93:93:e0:b4:c7:f7:c1:
b1:e7:90:c8:e5:6d:23:33:55:1e:d3:f6:4c:19:0c:76:3c:50:
fb:f1:7b:c9:59:f2:8c:89:7e:e5:22:e8:2a:7a:4c:e3:2c:bb:
f8:6b:bc:7b:ed:c1:d1:8c:fc:87:b2:79:9e:df:26:83:1f:d7:
49:ee:75:fc:2d:be:bc:f5:bd:2d:1d:18:21:83:9f:37:70:fb:
8b:1d:d3:d9:a0:fe:78:5d:f6:c2:ce:a6:ef:12:58:71:31:d2:
e6:da:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:54 2024 by rpki-client on console-fra.rpki-client.org