Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-ljWVWY_pp7RQdvDogSG12Z6zAw.roa
File: 1-ljWVWY_pp7RQdvDogSG12Z6zAw.roa (raw, json)
Hash identifier: vQtQAeW/6DqLKfCkZ9MGJ0vi4O7zoWkujh731EvuxzM=
Subject key identifier: FA:58:D6:55:66:3F:A6:9E:D1:41:DB:C3:A2:04:86:D7:66:7A:CC:0C
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 01857E2AF1EF9DA38C30BD653CDAF23F96F0
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-ljWVWY_pp7RQdvDogSG12Z6zAw.roa
Signing time: Wed 04 Jan 2023 19:03:41 +0000
ROA not before: Wed 04 Jan 2023 19:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.230.0/24 maxlen: 24
194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 19:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:2a:f1:ef:9d:a3:8c:30:bd:65:3c:da:f2:3f:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 4 19:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa58d655663fa69ed141dbc3a20486d7667acc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:c7:b1:f2:3e:96:e7:fc:77:b7:c6:f3:f5:
d3:5f:6e:55:f9:f7:0d:2c:62:41:0e:85:6d:18:89:
a9:c0:b0:41:93:96:36:60:0a:62:f0:f1:e3:c5:a4:
5a:1d:a1:09:df:99:7c:2f:74:66:0a:e0:64:29:d5:
91:25:cf:87:3e:f9:9b:aa:2e:3f:a6:ac:c7:17:ac:
95:c6:8d:82:64:b1:5d:19:dc:65:fc:31:fb:db:2f:
86:4b:69:fd:8b:19:ba:5b:66:14:e5:12:cd:cf:50:
fe:f0:57:7f:3b:b4:9d:1d:37:63:ba:3f:a5:5a:75:
ee:6c:98:ee:94:ab:c4:c9:e2:98:7f:c5:50:83:0a:
db:c2:8e:7b:9d:63:f3:df:9b:4f:de:ba:1f:93:bc:
16:55:d1:03:b9:f0:c7:35:c3:7f:c2:b7:6c:c4:0c:
54:79:ce:17:0d:5b:36:3c:ad:73:58:5e:f7:8a:63:
66:e0:77:9d:24:b2:40:87:f0:ff:a7:3f:95:6a:97:
26:74:d5:73:2d:27:08:a4:83:2b:9b:72:de:36:e5:
23:7e:dc:60:1d:3b:12:12:5c:79:ec:a5:16:da:49:
cc:d8:d1:11:63:c5:be:2c:84:08:b4:48:81:e2:fc:
23:c0:a7:a8:af:a8:85:2d:72:9f:ca:df:e0:c9:91:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:D6:55:66:3F:A6:9E:D1:41:DB:C3:A2:04:86:D7:66:7A:CC:0C
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/1-ljWVWY_pp7RQdvDogSG12Z6zAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0-194.39.230.255
Signature Algorithm: sha256WithRSAEncryption
0f:09:7c:b1:45:ab:37:a7:37:a2:ea:de:a4:0d:b3:75:5f:d8:
03:76:e1:6f:49:40:5b:eb:61:10:bd:0d:49:30:c5:f5:a7:16:
31:8b:a9:0d:bc:9d:c4:ae:ac:81:d2:0e:87:fc:34:a3:bd:c5:
21:c0:eb:20:f3:34:06:10:f4:58:65:b6:28:80:33:c0:47:6c:
d6:a3:3c:df:5f:02:29:79:b8:75:81:25:e1:e3:75:76:81:9a:
88:ec:32:fc:56:a8:2d:d0:3d:a4:a7:77:81:ad:cc:b5:95:ff:
2e:68:4a:8a:12:e9:41:f6:9d:f9:d0:bc:c4:41:8c:a6:1e:39:
cd:35:b2:3b:1c:8f:0c:ac:ee:43:b1:67:f8:61:08:f0:e6:00:
1c:bb:35:83:38:56:b4:b5:b1:c9:8a:cf:b1:5e:f5:30:75:cb:
dd:be:f1:c3:83:5f:21:d8:d8:5f:a1:46:92:24:ca:ea:84:50:
57:50:62:3e:73:05:98:71:60:14:6e:90:a9:0b:ef:9c:2c:4a:
58:8a:60:18:3c:1b:9b:1e:93:8a:62:51:f6:a4:da:ac:14:8d:
b2:80:9e:6d:f5:f2:35:37:5e:12:de:a8:ca:51:b8:ce:61:6f:
0c:32:e1:e9:b8:25:40:d6:80:61:54:f9:be:85:a2:57:76:b8:
2d:15:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org