Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/HTJzB3fiLk6J6Bf8jIu9WyRDPZg.roa
File: HTJzB3fiLk6J6Bf8jIu9WyRDPZg.roa (raw, json)
Hash identifier: xCfOok2gKoJ6duecaJp+9ek9fqSELTXXqgF3tnSCCqA=
Subject key identifier: 1D:32:73:07:77:E2:2E:4E:89:E8:17:FC:8C:8B:BD:5B:24:43:3D:98
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01856F549CC559FC915C9F0D49E87EB9A0C8
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/HTJzB3fiLk6J6Bf8jIu9WyRDPZg.roa
Signing time: Sun 01 Jan 2023 21:54:54 +0000
ROA not before: Sun 01 Jan 2023 21:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.140.230.0/24 maxlen: 24
2001:67c:144::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9c:c5:59:fc:91:5c:9f:0d:49:e8:7e:b9:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jan 1 21:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d32730777e22e4e89e817fc8c8bbd5b24433d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:c3:17:4c:dc:39:df:7e:0b:57:0c:58:6e:
1c:6a:ac:04:37:68:48:40:e8:4c:26:e7:85:96:25:
44:69:8e:8c:76:08:2a:82:0b:bb:28:6f:67:40:47:
07:f3:9e:4d:13:81:2f:13:0d:70:45:2f:fe:80:49:
a5:c0:c9:49:9e:37:6a:1e:1b:92:99:44:4e:d7:f4:
5e:01:52:07:e1:2e:2a:eb:7c:e5:d9:60:9f:28:85:
0d:2e:ed:53:b0:ae:d1:ad:07:f0:db:71:18:24:f0:
26:de:fa:05:71:85:89:9a:c0:8c:ed:78:1a:ed:09:
18:0f:b7:da:ae:a1:31:f3:0f:ac:42:9e:99:eb:a1:
5b:2a:42:40:90:5d:8b:83:0a:92:a5:47:6b:e6:65:
25:ad:7e:fe:c1:b5:06:f2:d6:88:07:7b:98:9c:5d:
30:51:12:20:81:af:39:12:03:e1:d9:62:25:8f:29:
a5:ba:d0:8f:a2:c1:2f:b1:dd:1c:24:48:8a:9f:72:
e8:ab:49:fb:45:40:66:75:08:9f:73:be:87:82:ba:
f7:62:2c:d3:70:7f:22:59:77:c7:2d:69:d9:28:1a:
40:b6:7a:74:53:ac:61:22:22:1b:e4:4a:50:9f:71:
bd:7e:49:0c:ad:5a:0f:28:91:15:d5:9f:94:f0:4d:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:73:07:77:E2:2E:4E:89:E8:17:FC:8C:8B:BD:5B:24:43:3D:98
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/HTJzB3fiLk6J6Bf8jIu9WyRDPZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.230.0/24
IPv6:
2001:67c:144::/48
Signature Algorithm: sha256WithRSAEncryption
92:15:0c:c1:d2:06:b6:ea:90:64:35:e8:d6:84:d3:26:94:b0:
2c:dd:44:63:18:3c:ac:94:58:1e:f8:ea:28:3f:75:f9:da:7e:
89:8a:03:11:e7:25:3b:30:c1:42:a3:1f:4c:9b:df:7f:53:85:
d6:fe:7f:68:32:b8:26:6e:4b:9e:72:05:ee:a5:d8:73:be:97:
31:8e:6c:c3:67:19:d0:8b:3f:7e:89:8f:21:2e:e0:48:f6:06:
49:bf:b4:5f:87:e4:81:f2:da:9c:13:65:7c:de:15:91:2d:91:
46:fe:c6:9d:0e:f9:3e:91:b1:9f:c2:98:d0:64:d8:91:92:22:
f7:6d:02:86:d4:d9:ff:56:1b:e0:4f:9c:c9:87:30:62:7a:e5:
39:93:6f:e1:25:ea:dd:f5:99:8e:3e:92:a1:cb:23:46:0c:34:
a4:64:eb:e0:95:73:24:06:d2:3c:25:09:fa:78:1f:c9:88:f3:
98:a3:c1:77:ae:06:15:48:5c:10:65:49:b6:31:ea:85:12:54:
b6:b5:1d:99:c6:88:2e:30:22:aa:7a:95:73:de:c5:96:7b:22:
f5:75:db:ef:20:c8:c1:a8:a7:e2:d1:e8:4b:a7:a5:98:99:ce:
0c:11:7d:e3:db:98:41:83:ee:68:5d:2c:7e:ee:28:37:34:c7:
6e:02:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org