Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jEqrmYs4pfg-h_mcDLKgRsj3qIs.roa
File: jEqrmYs4pfg-h_mcDLKgRsj3qIs.roa (raw, json)
Hash identifier: 05+MvFNHTMc3RCstRZUqTX36g9aqbmMY4RZVgTmY+E8=
Subject key identifier: 8C:4A:AB:99:8B:38:A5:F8:3E:87:F9:9C:0C:B2:A0:46:C8:F7:A8:8B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF49EF278E94F735E311AAF3ECD69
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jEqrmYs4pfg-h_mcDLKgRsj3qIs.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201190
IP address blocks: 194.102.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f4:9e:f2:78:e9:4f:73:5e:31:1a:af:3e:cd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c4aab998b38a5f83e87f99c0cb2a046c8f7a88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:d9:cd:e1:80:fc:dd:c6:d2:a0:fd:3c:82:
27:fb:6e:f2:a3:37:42:2d:9d:f2:6e:5a:60:39:9f:
13:db:d1:91:7c:9a:97:d2:ff:ab:4d:96:67:30:b4:
bb:ea:84:db:7c:62:77:f7:b1:24:64:aa:55:46:bd:
0e:96:17:da:00:cc:55:da:35:5b:58:a9:d3:2b:cb:
46:3e:99:e0:64:08:11:24:51:b9:b6:85:76:44:07:
23:30:cc:5a:2a:84:7e:e4:55:c5:fc:04:df:8e:26:
d0:44:cc:94:a1:2a:cc:e7:ca:17:06:33:43:21:89:
e9:dd:fa:58:3b:2e:9c:a0:b8:f3:60:f8:0f:37:3e:
d8:7d:7b:0f:a9:3c:bb:a4:fa:16:4b:b0:b5:4b:01:
87:1b:61:27:16:c9:c6:87:5d:ba:d0:26:0c:c4:6d:
5a:57:5b:d9:c2:60:6b:01:a5:2d:74:55:7a:9d:b2:
4b:66:25:db:ae:dd:3b:45:f5:13:3e:d9:c3:d7:cc:
44:d4:b8:ad:08:2c:f2:05:3b:dc:ed:cd:09:50:43:
f4:19:06:99:84:89:e3:f4:16:28:d9:2b:4c:48:f8:
1a:78:01:08:67:a3:c2:a8:84:95:ac:2e:74:f6:2b:
78:d5:c5:29:3d:0d:08:54:66:bb:d6:8d:13:4f:13:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:AB:99:8B:38:A5:F8:3E:87:F9:9C:0C:B2:A0:46:C8:F7:A8:8B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jEqrmYs4pfg-h_mcDLKgRsj3qIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:04:ff:ff:84:de:fb:88:c1:d6:88:73:6b:77:52:db:6d:ba:
17:8f:9a:9f:51:e8:bf:46:4f:b4:8d:ff:79:9b:88:af:67:1d:
f3:76:e3:a6:8c:7a:57:9a:1c:76:00:d3:7e:70:fe:8e:8a:60:
eb:0a:63:0f:84:a7:4f:32:8a:6a:52:76:fe:1c:b3:c2:9b:3b:
2f:cc:f5:a2:7f:c4:35:f9:e6:43:3e:f3:a6:9b:e7:da:ff:1d:
39:b1:d0:30:b1:d7:d2:28:a4:be:47:66:de:80:ce:7d:63:cb:
e7:f2:94:1b:e3:0d:29:99:45:94:12:9f:0d:0d:65:0d:88:5e:
bb:8b:c3:b7:41:3a:54:b4:c5:c4:fe:4d:39:11:2f:0b:0d:63:
41:65:24:bc:1c:8e:ed:ed:65:f3:62:0f:1c:2d:b1:60:41:48:
f4:b0:6f:80:f2:e7:cc:a3:4c:e4:f2:bc:5f:6d:0a:e5:ec:72:
22:49:08:75:2f:ed:92:24:7a:0b:25:e3:c4:a6:0f:fc:33:dd:
94:cc:06:05:04:59:65:e7:ab:9b:c5:a4:2a:8c:20:c9:6c:cb:
61:f1:60:b3:8d:ad:94:c9:ee:14:5a:5f:04:2a:23:da:cf:e4:
84:3f:b2:41:68:d6:78:76:cb:34:02:b2:74:a5:26:11:8f:c1:
92:d6:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:48 2025 by rpki-client