Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ChMI2IWVdkNkZDdPRnNuc26aasA.roa
File: ChMI2IWVdkNkZDdPRnNuc26aasA.roa (raw, json)
Hash identifier: JkouWKvbzhXiii3xcFI3GMU7dIUw3a81uaVWnxTC47E=
Subject key identifier: 0A:13:08:D8:85:95:76:43:64:64:37:4F:46:73:6E:73:6E:9A:6A:C0
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185862750D519708B26C841D3C38B79B7E6
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ChMI2IWVdkNkZDdPRnNuc26aasA.roa
Signing time: Fri 06 Jan 2023 08:16:41 +0000
ROA not before: Fri 06 Jan 2023 08:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46664
IP address blocks: 194.31.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Feb 2023 14:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:27:50:d5:19:70:8b:26:c8:41:d3:c3:8b:79:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 6 08:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a1308d8859576436464374f46736e736e9a6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:f2:76:be:13:ba:66:91:05:25:05:53:77:
5d:46:c7:5d:b1:de:50:59:3f:00:86:fe:fa:5c:a7:
da:8d:bd:50:ba:48:68:5c:26:cd:4b:0e:c3:46:3f:
ca:cb:82:ee:0e:5a:4a:f6:ef:43:ca:b7:88:67:06:
21:7f:a1:31:cd:6a:11:2e:65:8b:d1:04:4f:b7:1a:
fb:16:03:fa:16:53:03:1b:a9:d4:db:0c:89:51:58:
48:00:66:7c:4d:33:2b:7c:a1:5a:cd:ed:24:e1:ac:
ce:64:41:43:fe:8f:86:b7:b3:4f:43:e3:28:fa:ee:
e2:1e:e7:01:7f:b7:c3:8b:fa:7a:45:7f:31:52:dc:
7a:15:7d:a8:94:b9:68:1d:9f:34:18:ba:a9:4a:55:
85:47:e0:58:66:3f:43:ef:4b:9a:8c:18:e7:51:fe:
0a:d2:c5:6f:a6:37:ac:61:63:32:1d:17:9a:62:b2:
d3:68:a8:6f:28:e8:77:f6:a5:a8:19:21:fc:53:36:
8b:c4:bf:4a:8b:d1:46:81:b2:16:e9:31:1c:02:48:
0d:a9:05:8a:ac:31:cb:bf:08:45:4e:87:3f:d9:9a:
7e:b4:46:32:7c:dd:24:2a:5a:3c:0c:92:20:18:ab:
d4:f7:c5:b8:48:c0:5d:86:23:39:88:96:40:6c:36:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:08:D8:85:95:76:43:64:64:37:4F:46:73:6E:73:6E:9A:6A:C0
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ChMI2IWVdkNkZDdPRnNuc26aasA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:95:10:ba:f6:6b:1f:41:58:19:9b:d0:cc:d8:06:cf:b0:03:
a9:42:61:b8:c8:a0:d3:01:9a:dd:aa:ec:eb:1f:67:7c:27:a5:
6f:04:9e:89:33:71:9e:79:34:d7:42:1b:90:89:36:71:36:c4:
88:65:55:3d:f6:5e:02:ef:c1:c1:ad:14:dd:96:17:f0:fb:aa:
1e:d3:3e:b9:53:75:c6:dc:ca:01:fd:de:27:3d:02:5a:e7:f6:
0d:3e:74:2f:69:4c:94:3f:77:4c:24:d3:eb:c2:4c:c8:7e:3e:
7a:8d:72:33:37:09:09:78:fe:44:f0:d0:cd:bd:0a:7d:dc:e3:
04:03:3d:27:60:2b:3e:b3:c6:18:c6:85:8c:95:2f:8e:59:0a:
d9:5c:c8:a1:f8:b7:13:b2:78:b2:d7:30:74:4f:ca:30:49:7b:
87:8a:ec:e5:fe:e1:c4:1f:af:48:6c:c5:e2:c7:6f:eb:f2:c5:
bf:f8:eb:e1:6d:88:9f:34:2e:ac:3e:ba:40:9d:62:d5:aa:e7:
07:a6:34:fd:c7:49:28:b8:1a:a1:f9:43:fe:b9:98:c8:49:56:
8a:2f:9a:55:45:54:34:9e:c4:42:f6:46:95:74:34:7e:fd:e6:
7b:0f:0a:19:e6:0b:bf:b4:49:90:ef:be:78:e0:5c:75:99:e9:
dc:bf:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org