Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h1t_5K8PVegpDWmw1viXmx01Kf8.roa
File: h1t_5K8PVegpDWmw1viXmx01Kf8.roa (raw, json)
Hash identifier: qmAXVc+AhGDt3lEeb1klQDMfwwdNzwaCZfkh+/0/FEM=
Subject key identifier: 87:5B:7F:E4:AF:0F:55:E8:29:0D:69:B0:D6:F8:97:9B:1D:35:29:FF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D6038910B3555E442254EDF46DB3A8902
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h1t_5K8PVegpDWmw1viXmx01Kf8.roa
Signing time: Wed 31 Jan 2024 15:52:16 +0000
ROA not before: Wed 31 Jan 2024 15:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34304
IP address blocks: 194.102.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:38:91:0b:35:55:e4:42:25:4e:df:46:db:3a:89:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 31 15:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=875b7fe4af0f55e8290d69b0d6f8979b1d3529ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:01:0b:a8:15:fb:e4:5a:1c:a1:1b:bc:1b:5a:
79:5e:34:0c:3b:de:1f:94:45:1b:fe:d8:0d:61:3e:
89:b3:11:9c:cd:e8:cf:fa:7c:95:dd:79:a0:63:d5:
76:20:23:c2:58:92:49:c8:ba:b8:ce:c3:08:6f:8d:
37:d9:ad:d0:57:1b:bb:b5:01:8f:3f:e3:09:36:79:
30:70:ed:b5:53:0d:dd:84:79:7c:f4:1a:b9:d4:d5:
bd:12:1c:e3:b2:56:f8:37:bd:e1:2c:5b:0c:a9:df:
ab:7b:d6:5a:a2:90:44:3c:38:aa:11:4f:25:4f:7a:
d2:3f:3a:46:55:cd:b5:36:5a:b2:5a:59:c4:7a:92:
77:69:ef:b0:9c:9a:f9:62:88:ec:e3:3c:0e:32:c0:
4a:3b:df:52:a8:fe:7f:be:46:ec:e0:64:7f:7d:32:
da:52:06:2b:5e:da:dd:0a:33:a7:ec:d3:6d:4e:06:
2e:d2:62:ce:20:5d:33:31:6e:86:3e:d1:21:92:d2:
8a:78:c0:f8:3b:f5:fe:27:90:f7:45:51:7e:7a:0b:
a3:89:26:2c:24:eb:8d:80:a2:60:84:14:b0:f3:dd:
af:9f:b3:88:c8:f8:3a:2e:25:94:ad:97:bb:8a:11:
22:5e:48:e9:43:d7:95:54:0b:64:84:3e:21:8a:0a:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:7F:E4:AF:0F:55:E8:29:0D:69:B0:D6:F8:97:9B:1D:35:29:FF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h1t_5K8PVegpDWmw1viXmx01Kf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bf:09:61:99:31:26:99:a0:0a:17:57:bb:b2:b9:8f:a4:f1:
25:94:2d:ce:5a:23:3f:a5:f0:44:66:18:9f:46:6c:e8:4c:39:
ae:40:7e:37:9c:e6:38:af:31:c3:05:21:dc:99:ce:a3:b3:9b:
4a:75:25:96:86:3b:e6:59:d1:28:5b:ab:96:a5:31:96:39:05:
3b:6a:fe:98:b0:fa:90:19:33:93:62:5f:0c:07:58:57:23:ee:
78:ea:1c:4b:db:17:c1:02:25:d0:d6:44:4b:ce:a7:bb:f4:a3:
dc:1c:db:e6:03:78:c1:6c:c9:1a:91:78:af:b0:a1:c1:ca:a9:
a3:fd:28:fc:ee:59:ac:34:8b:d9:1d:e8:4e:09:b5:92:57:20:
39:1f:53:11:f0:72:55:59:8f:2f:e8:69:d8:1a:3f:35:0d:3f:
6d:50:27:8c:79:d9:dc:ce:69:d3:5e:16:12:01:c6:aa:07:ea:
4e:ae:4b:42:35:4f:f3:95:3d:2e:82:ba:d0:91:d0:c8:3d:f8:
3b:95:7d:c9:ca:cf:cd:34:be:de:04:63:ca:af:fd:1a:40:09:
86:bc:7f:1d:b3:35:11:07:c4:45:fc:b9:ae:c9:ee:61:9a:a4:
f9:dc:ab:8b:7f:f4:34:2d:3e:37:bd:aa:33:36:5b:2c:f6:2d:
59:aa:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org