Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M8Kqa9yASYe5c0p51CFRokJ2l0k.roa
File: M8Kqa9yASYe5c0p51CFRokJ2l0k.roa (raw, json)
Hash identifier: yu4Cne1X8xjPmDhU6/zOHGzZC0Tt07OKGUaG+PVmwYw=
Subject key identifier: 33:C2:AA:6B:DC:80:49:87:B9:73:4A:79:D4:21:51:A2:42:76:97:49
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB910A340D2BD34CE34D239C7ED30
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M8Kqa9yASYe5c0p51CFRokJ2l0k.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41406
IP address blocks: 194.9.24.0/24 maxlen: 24
194.9.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 17:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b9:10:a3:40:d2:bd:34:ce:34:d2:39:c7:ed:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33c2aa6bdc804987b9734a79d42151a242769749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:1f:ad:9b:d4:57:6b:cc:e3:b6:b3:61:04:
a5:eb:07:ed:e1:df:b4:ba:af:fb:77:48:44:a0:42:
19:a1:fd:36:f4:5d:ca:7b:40:47:24:d3:c4:f2:99:
c8:f6:91:25:16:e6:9a:10:e5:1b:37:1c:53:a2:1e:
56:b1:af:34:d3:d5:3b:0d:bf:d9:9b:93:54:a2:37:
7e:c5:9f:37:23:87:40:c1:ed:8a:0b:57:b8:9c:4f:
70:9c:1a:36:48:75:e7:8e:21:d7:7f:58:73:b9:81:
04:57:f9:c7:68:21:ef:06:2f:3b:66:e7:30:3a:42:
43:3e:05:65:b2:83:9c:88:c8:ef:44:8d:fc:26:4b:
78:73:e8:5a:8f:97:e7:66:a5:4b:98:6d:46:9e:10:
86:78:a0:7a:86:dd:6d:aa:d5:a0:c9:2b:3d:36:c8:
87:5e:22:de:32:08:b6:50:12:21:e4:12:9e:e9:40:
ef:16:04:a2:84:e0:e0:ff:0c:31:78:4b:6d:bd:68:
a5:53:df:68:32:73:0b:66:90:c2:80:12:9e:73:58:
00:7a:b9:93:a5:1c:48:88:60:12:41:49:f5:8d:44:
57:84:56:90:60:9e:49:e9:e8:bc:ff:91:42:a9:1f:
33:a8:90:22:cc:78:d3:63:31:87:af:86:4a:ce:4b:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:AA:6B:DC:80:49:87:B9:73:4A:79:D4:21:51:A2:42:76:97:49
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M8Kqa9yASYe5c0p51CFRokJ2l0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.24.0/23
Signature Algorithm: sha256WithRSAEncryption
85:c9:d1:a4:c8:d9:af:08:29:f2:02:01:0a:02:9c:82:a3:19:
6b:8a:80:0e:87:22:e9:b8:a1:2f:eb:78:37:fa:28:98:dc:af:
d5:78:9a:10:dd:19:f5:4e:c0:02:14:b0:b3:05:5c:03:0b:d3:
81:7e:08:ab:ae:b0:85:f1:8c:d4:84:d8:eb:62:16:df:be:f1:
9f:ff:92:cf:08:a0:90:37:fa:16:69:05:27:78:1c:1b:51:98:
f5:a2:e9:17:68:5d:a3:49:46:74:f3:a2:e9:f0:7c:76:76:31:
ce:0f:2d:3d:20:da:ef:32:0a:54:67:7d:b1:02:aa:48:8a:6b:
ed:cd:94:ec:01:3d:ee:e2:52:ec:e1:cc:bf:8b:15:77:63:05:
27:a9:76:51:f3:64:f1:81:9d:a2:b2:04:b8:05:a9:34:9b:72:
a3:1f:75:e9:bf:c0:30:07:25:90:d5:00:b8:7c:79:d6:4b:34:
60:33:7c:23:d5:34:65:eb:f0:53:6d:94:eb:8d:8d:48:09:d2:
bf:70:0a:6b:9e:6f:95:14:ef:e5:45:39:20:5a:55:ba:ac:a2:
2e:0e:a7:10:a4:0d:f1:fd:60:00:1b:03:94:fb:a8:1b:dd:b5:
fb:d3:33:a1:9c:33:47:36:ee:23:3e:2a:49:11:2c:d5:3f:a8:
27:3b:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org