Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Ef7ur3ydx57KZpw3xUK-K7al50.roa
File: 2Ef7ur3ydx57KZpw3xUK-K7al50.roa (raw, json)
Hash identifier: 9jwUmw0aK3q8zYBSaYwG9Fs9Tkbj1MrZobGEoUMK6UI=
Subject key identifier: D8:47:FB:BA:BD:F2:77:1E:7B:29:9A:70:DF:15:0A:F8:AE:DA:97:9D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FFAD1F0DFEE06647015CF6203AF63
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Ef7ur3ydx57KZpw3xUK-K7al50.roa
Signing time: Mon 02 Jan 2023 17:38:13 +0000
ROA not before: Mon 02 Jan 2023 17:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204662
IP address blocks: 194.56.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 17:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:fa:d1:f0:df:ee:06:64:70:15:cf:62:03:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d847fbbabdf2771e7b299a70df150af8aeda979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:ed:47:46:80:78:ba:f3:cb:49:e3:9f:55:
53:46:92:6e:9d:e2:94:36:22:ad:d2:05:64:da:a8:
43:ea:97:2a:e9:2e:99:36:f8:ef:59:11:8e:70:76:
34:f8:c8:54:96:64:c5:b3:b9:e3:50:77:b1:b6:1a:
7a:ad:1d:76:fd:47:1f:34:26:86:19:87:bd:75:56:
27:6d:10:b8:0c:6f:34:61:b5:75:31:bf:15:3f:e8:
e4:84:f4:cf:81:cb:05:7a:31:f7:91:7d:26:91:b5:
62:7f:0f:16:cf:8c:dd:99:b7:bf:96:ef:2f:c4:a7:
cb:97:a3:48:a9:94:b8:6d:93:45:04:0c:55:87:37:
9a:8d:fc:b7:4b:1c:cd:da:59:18:f8:58:f8:08:e9:
ac:eb:5a:57:89:c6:1b:fb:eb:b5:40:4f:bc:9f:78:
6a:fa:09:d0:58:6d:b1:6c:7c:cc:13:4c:6c:57:81:
a1:97:ad:bb:27:08:ff:f5:3b:03:de:7b:30:3d:a2:
e9:04:4d:e3:49:17:b8:af:74:fd:8e:7e:f5:f6:20:
b8:df:87:00:e3:07:9c:c3:7c:e0:c9:f6:f4:e2:0b:
17:0a:90:a6:f9:91:ef:bb:ef:41:6b:18:37:fc:62:
e7:eb:a2:36:a6:94:e5:a6:4f:4a:8c:86:2a:08:16:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:47:FB:BA:BD:F2:77:1E:7B:29:9A:70:DF:15:0A:F8:AE:DA:97:9D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Ef7ur3ydx57KZpw3xUK-K7al50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.224.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9d:86:4e:08:eb:93:26:02:80:28:bd:0c:c6:2b:db:c4:8f:
6f:79:b4:a8:fc:fb:74:2b:8b:fb:e7:de:74:fc:1b:8c:f2:7f:
40:4f:1e:25:9b:a2:f6:10:ec:56:f7:6a:62:df:ab:ba:77:37:
53:d4:7d:c5:2a:98:9d:ce:bb:66:f2:89:6b:13:c4:cd:79:ac:
2a:3a:59:d6:98:33:9d:78:e0:d3:a0:50:a3:70:19:07:ba:b8:
59:ea:e8:e2:e6:ec:ae:5a:88:51:3a:4b:be:c2:ae:9b:71:d8:
41:be:82:96:92:6e:c9:3c:a0:42:fe:0c:5a:60:09:ca:e9:4a:
41:16:2d:36:7f:b9:9d:93:05:6e:a3:71:40:16:19:55:0b:2d:
a5:d8:84:7d:cc:ce:16:1b:5e:f3:dd:c9:c9:ea:3b:8c:d3:e6:
e5:9e:d9:90:bc:c2:6b:7e:5c:bd:00:f6:0e:2f:45:27:92:4e:
4b:d2:70:48:a3:e8:8f:1b:83:71:56:94:e8:f1:50:44:11:f3:
8c:61:9c:06:b2:b5:34:01:e5:e7:ee:26:21:6f:a4:ae:cb:8b:
a4:82:5b:51:fd:2b:ca:db:8f:b5:8c:84:08:dc:54:10:ac:3e:
d3:f0:71:f8:04:48:db:df:9c:44:c7:1c:3f:e9:56:4d:10:14:
20:8a:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org