Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/00O9qRe1JVRVpOuzBoAYWPxQgjI.roa
File: 00O9qRe1JVRVpOuzBoAYWPxQgjI.roa (raw, json)
Hash identifier: K5IiSGS5hCy17cmHl/drlQhRxcl71baYRk+jyXm/fwc=
Subject key identifier: D3:43:BD:A9:17:B5:25:54:55:A4:EB:B3:06:80:18:58:FC:50:82:32
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0186B94F816AEDC2F55FA0A1A2A2A90F3D37
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/00O9qRe1JVRVpOuzBoAYWPxQgjI.roa
Signing time: Mon 06 Mar 2023 23:44:00 +0000
ROA not before: Mon 06 Mar 2023 23:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46664
IP address blocks: 194.31.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 12:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:4f:81:6a:ed:c2:f5:5f:a0:a1:a2:a2:a9:0f:3d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 6 23:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d343bda917b5255455a4ebb306801858fc508232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:49:df:07:13:10:e9:a1:f9:3b:4b:01:88:
f2:1c:b4:ba:27:be:a3:2b:3e:37:6b:ec:cb:b3:68:
51:ba:af:ce:7d:fc:16:a6:08:5f:74:29:61:16:a1:
50:3b:3e:4d:8f:50:0f:aa:61:17:b4:6e:b5:09:93:
42:24:21:23:4f:ff:b2:87:ff:f2:d1:cc:ab:0f:30:
c5:5d:ec:b1:ac:0f:cf:f5:2b:f3:fd:d3:c5:af:5f:
c8:96:c1:68:00:ac:25:82:9a:00:1d:97:5c:f2:b7:
ac:aa:39:f4:74:83:68:be:21:c3:66:1a:44:8c:4e:
a2:e6:69:37:3d:2b:cc:f1:8d:b1:64:81:af:a3:e9:
e0:82:cf:d6:3a:9f:46:c3:60:5f:a4:c9:24:d9:e6:
fd:06:94:07:6b:01:4c:da:7e:1f:b3:e5:5d:3a:6d:
6d:9d:e7:49:da:18:6f:76:cf:70:15:fd:13:9b:2a:
be:e6:19:a8:19:95:52:a6:76:89:45:c6:64:e3:00:
d7:bf:34:85:ba:21:90:97:3b:e0:fd:04:da:6a:73:
86:e5:9c:79:09:b7:c4:6b:5e:c8:f3:65:a6:59:20:
4c:4c:94:7a:c2:d9:1c:7d:21:b2:6e:06:08:cc:9e:
62:b4:10:01:37:4c:9f:65:66:18:7e:1e:c3:e2:e3:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:BD:A9:17:B5:25:54:55:A4:EB:B3:06:80:18:58:FC:50:82:32
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/00O9qRe1JVRVpOuzBoAYWPxQgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d6:d0:e0:a2:e3:dc:d2:06:1b:21:b6:c8:6c:05:59:25:99:
56:30:4d:bb:8d:4a:41:f0:c3:40:eb:c1:d6:e7:a3:f0:50:01:
b1:25:5c:6e:15:d1:ed:0b:75:c1:3c:d9:52:64:3b:8b:77:bc:
0b:e5:62:55:44:94:d7:f2:36:8c:c9:fb:15:36:ca:5a:5d:70:
be:00:ac:d8:c6:5a:68:f7:5d:52:de:81:ea:57:1c:3f:e3:91:
50:2e:3e:07:3d:40:ab:a9:4f:65:f7:b2:cf:eb:3c:6a:10:a5:
99:77:97:42:f3:ac:92:50:78:39:a9:ba:c2:1c:98:cc:4f:fa:
b8:e5:1e:cc:1a:9a:f8:c0:d1:6f:5e:2f:91:29:a9:46:78:6e:
e9:88:36:68:65:d1:65:10:30:82:bc:1a:e4:50:a1:22:85:36:
57:cc:7c:13:e5:7a:14:fc:9c:a9:ee:7e:93:74:f5:15:9c:93:
10:62:5d:66:0e:3c:14:9a:19:22:ee:0a:24:5c:fa:c6:e7:5d:
38:f9:7b:28:3e:dc:79:cc:cc:a6:11:95:ef:75:2f:2d:85:c2:
78:93:79:f7:6a:b7:b4:84:00:ec:94:16:4a:43:2b:5c:bf:20:
dc:14:10:78:c2:c2:b3:e4:dc:8d:94:ef:50:1d:5b:97:5a:62:
39:52:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org