Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1sJxq6dR7SlNNrygowQaa1Bgkeo.roa
File: 1sJxq6dR7SlNNrygowQaa1Bgkeo.roa (raw, json)
Hash identifier: ZZCaKAkMB44v+/ybF7G9l7mMW7TuL3uxB1dboA3HMy8=
Subject key identifier: D6:C2:71:AB:A7:51:ED:29:4D:36:BC:A0:A3:04:1A:6B:50:60:91:EA
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CC727576370BA207C8B483BFCCB9009C9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1sJxq6dR7SlNNrygowQaa1Bgkeo.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 21:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:57:63:70:ba:20:7c:8b:48:3b:fc:cb:90:09:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c271aba751ed294d36bca0a3041a6b506091ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:11:6f:62:17:8f:fc:93:b7:a8:3f:ff:f2:
03:cd:d3:50:5b:e2:9f:57:c4:9b:89:bd:d1:5f:06:
90:68:71:9c:3f:c8:3f:ec:4d:ad:56:15:20:4c:38:
ea:6a:c1:c9:03:32:cf:05:77:6c:63:34:9e:cb:6c:
ba:de:85:72:4e:2b:22:a2:70:c9:20:fd:74:2e:89:
f3:90:d4:dc:26:a1:5c:41:94:03:f2:c1:60:bd:87:
e4:92:21:60:68:8a:8e:03:c6:ac:69:06:91:06:82:
d3:04:91:aa:66:56:10:51:ae:70:b0:d1:38:dd:dd:
24:1e:22:89:08:3a:43:96:90:4a:33:ff:5b:a7:0e:
80:86:cc:36:e9:86:70:70:09:02:71:ee:30:b2:a5:
f8:70:1b:4e:86:39:2b:a3:f7:1f:cd:24:9b:46:86:
15:d0:7e:30:07:f5:23:02:93:3a:a8:fc:d2:de:95:
57:63:2a:a3:34:35:c8:14:8c:10:53:74:d2:cf:83:
b6:e2:8a:be:96:28:38:cf:d3:2a:b4:44:e3:f0:fe:
14:71:5e:6e:bd:fa:46:0d:86:2b:84:69:aa:04:1d:
fc:d1:af:08:00:28:af:d8:fc:c5:6f:70:4e:18:45:
ee:c5:79:e4:34:73:40:8a:ca:3d:84:d1:8a:c8:9f:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:71:AB:A7:51:ED:29:4D:36:BC:A0:A3:04:1A:6B:50:60:91:EA
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1sJxq6dR7SlNNrygowQaa1Bgkeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2b:e7:4c:27:e6:de:b8:51:f2:c7:ce:4f:e1:5f:9a:c5:3a:
a0:00:ff:de:ee:49:71:46:16:c1:5a:9a:07:5c:4c:db:71:1b:
42:7e:f7:17:e1:e9:3b:1c:a4:77:78:51:3b:4f:c7:e7:a8:45:
10:4f:20:69:58:ec:1f:f7:45:b6:fd:32:ec:c9:f1:30:65:af:
11:0b:11:af:de:86:76:73:b0:3f:77:a9:da:75:93:8e:a3:2f:
bd:c0:d8:2f:f6:07:3d:94:90:e1:bf:3d:fc:21:eb:c7:2f:8b:
05:6a:ab:a7:f5:f3:af:f1:c9:e2:92:7b:d0:20:53:40:6c:83:
44:24:f2:f3:e6:16:7e:e3:ac:8a:7f:36:0f:ee:bb:e3:7d:a7:
eb:d9:4e:cf:4c:6d:4f:d4:68:ec:a1:47:f0:0c:89:e9:03:0b:
ca:90:c4:c3:1f:55:fb:a9:08:f0:a0:97:0b:02:1b:b8:86:88:
86:2e:3a:7b:89:d1:4a:9f:ed:e6:54:f1:8b:fa:14:89:14:88:
6e:ad:f0:d2:68:ac:20:d9:e0:51:df:37:fa:ce:44:78:7a:26:
a3:8b:0b:dd:90:97:ac:ed:2c:74:3a:e4:04:c0:cf:f7:2d:77:
5b:6e:d5:49:f2:7e:41:72:9c:6f:55:64:d5:c5:2b:f0:b2:fc:
9d:89:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 23:00:02 2024 by rpki-client on console-ams.rpki-client.org