Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/pwUS5sxbajRvguh0T5KIiCeu_4o.roa
File: pwUS5sxbajRvguh0T5KIiCeu_4o.roa (raw, json)
Hash identifier: 7WjrkN+eJlxgQ2slYZPJd9VOBrECqrjsBioO86OXcvk=
Subject key identifier: A7:05:12:E6:CC:5B:6A:34:6F:82:E8:74:4F:92:88:88:27:AE:FF:8A
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 0185F2F2AD08A64F13D5538CAE5C44511E39
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/pwUS5sxbajRvguh0T5KIiCeu_4o.roa
Signing time: Fri 27 Jan 2023 11:17:48 +0000
ROA not before: Fri 27 Jan 2023 11:17:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198696
IP address blocks: 194.49.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:f2:ad:08:a6:4f:13:d5:53:8c:ae:5c:44:51:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jan 27 11:17:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a70512e6cc5b6a346f82e8744f92888827aeff8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:70:05:e3:ac:97:9b:5c:25:73:3f:a8:e5:
ab:92:d6:98:32:52:4c:e4:12:00:26:42:f8:cd:ec:
64:c3:3c:73:f2:25:af:85:b5:ef:ee:14:57:e1:33:
40:53:ce:c4:ea:b8:7d:f8:de:9a:51:85:cb:50:75:
f8:ad:fd:17:7e:0d:1a:18:8a:77:eb:90:1d:d6:32:
07:27:90:9f:ff:97:b4:a9:c1:a0:35:d7:04:69:7e:
a8:ea:55:d1:8a:7f:98:31:e0:4f:77:86:5a:67:78:
b1:8f:1a:65:b8:33:e2:60:57:1f:42:3e:0f:4a:fc:
ec:80:c4:51:f7:05:4e:2d:51:ea:20:b2:b8:3b:bb:
92:e6:bd:34:24:19:bc:2a:c7:1e:50:27:b1:68:bb:
da:2c:30:d2:c7:e6:36:44:f3:9a:8c:64:f3:fb:56:
5d:24:9f:3f:b4:0a:18:a6:75:ac:2e:00:bc:51:7f:
9c:40:be:a7:d2:51:5d:99:b2:dd:e7:0f:b0:ae:78:
41:01:34:62:5c:0b:7b:13:89:bf:01:38:a8:06:9a:
e4:08:9d:cd:a0:7f:86:a3:71:1d:89:5c:ad:dc:b2:
6a:fb:81:2c:4c:c9:e2:7a:ac:70:82:dc:42:e7:60:
b1:67:22:6e:47:6b:bd:68:7b:12:7b:a9:f9:a5:44:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:05:12:E6:CC:5B:6A:34:6F:82:E8:74:4F:92:88:88:27:AE:FF:8A
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/pwUS5sxbajRvguh0T5KIiCeu_4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:bb:1e:ce:2a:eb:b2:5b:49:31:fa:53:58:1a:c5:17:3f:
96:b1:2f:d9:af:38:f2:87:4f:aa:e8:dd:44:e1:4c:4f:13:b5:
63:04:b3:43:d2:10:7f:be:65:54:c2:98:03:0d:54:75:5a:70:
25:a5:c7:6c:60:a6:66:0e:21:d0:49:39:7e:e3:57:19:a5:ed:
67:fd:e1:f3:8c:f1:45:d6:a3:fb:b6:df:f4:a4:04:e1:7d:c1:
88:78:cf:bf:5c:55:57:9e:de:a9:74:4e:44:9b:21:ca:3a:21:
bf:da:5a:77:95:0c:08:2e:6d:de:30:df:24:5d:52:58:89:3b:
fb:e3:d4:ac:07:ff:9a:5c:a8:06:cc:ad:1d:65:d3:10:b7:f3:
a0:01:93:77:d3:31:89:7a:21:0d:61:3a:b9:b3:79:52:0e:8c:
ac:7c:61:69:ce:83:89:70:e8:4c:cb:ba:52:52:1f:dd:5a:db:
03:79:1a:c7:78:45:ed:59:57:05:d3:8f:51:7f:f7:09:6f:67:
e6:11:0b:d0:66:ee:a3:31:0d:f9:e8:0f:96:d0:5f:cf:ab:60:
40:83:57:78:9a:46:9b:68:11:a9:4a:aa:8b:f5:c5:60:5f:27:
f9:7c:bd:78:f5:2d:43:08:54:b3:a6:24:94:e1:3e:48:76:e6:
3a:9e:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:27 2024 by rpki-client on console-ams.rpki-client.org