Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/IlicgvQlyuvTu5qb5l6yOuQa1qU.roa
File: IlicgvQlyuvTu5qb5l6yOuQa1qU.roa (raw, json)
Hash identifier: 1axZ5hbIEKHe7GyLxv6yx/TpBPSndw3qBW+VKso/p1Y=
Subject key identifier: 22:58:9C:82:F4:25:CA:EB:D3:BB:9A:9B:E6:5E:B2:3A:E4:1A:D6:A5
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01862AE0EE5CE165A9B48DE6025BF1D4F672
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/IlicgvQlyuvTu5qb5l6yOuQa1qU.roa
Signing time: Tue 07 Feb 2023 07:57:09 +0000
ROA not before: Tue 07 Feb 2023 07:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206873
IP address blocks: 194.147.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 10:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:e0:ee:5c:e1:65:a9:b4:8d:e6:02:5b:f1:d4:f6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Feb 7 07:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22589c82f425caebd3bb9a9be65eb23ae41ad6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:5b:04:f4:f8:60:69:b6:92:2c:3a:55:6f:
6b:46:6c:93:9c:0b:d1:7f:b8:bc:21:81:21:f8:e3:
41:38:0e:7f:5c:e5:8f:3b:7b:8c:98:27:06:8e:b9:
22:40:2d:50:9f:39:8e:ca:d6:24:73:f2:7c:18:8b:
19:31:c0:7e:9f:b7:35:69:e0:0d:6c:1f:ef:47:22:
75:ee:4b:9e:cf:7b:9c:5a:e3:a7:ce:72:74:87:da:
7c:7b:24:35:48:36:f3:f6:e4:21:64:e5:e4:e8:c0:
03:9e:2c:ec:6b:99:f8:71:d8:a4:43:d5:3f:a8:cf:
0b:bb:0d:5f:6a:cb:10:99:b8:0d:f3:6b:de:9e:c4:
1f:24:4b:f1:1f:7c:2b:70:38:c8:ef:af:b5:74:6f:
36:8a:48:1a:7f:a0:89:50:e3:92:ac:f1:db:17:01:
04:bd:ec:e6:41:92:20:3c:85:8b:c3:b1:23:c2:0a:
6c:44:d6:29:6f:56:be:d2:15:a5:d1:1c:97:fe:0f:
85:88:84:0f:09:bb:d3:b3:a1:30:7b:21:a4:34:f8:
3e:c9:65:03:63:20:76:a2:e4:b6:68:b0:b1:0e:4a:
dd:c2:cc:a8:76:38:62:5c:6a:5f:49:6b:b3:6f:c1:
91:e3:22:37:9f:ab:37:f6:75:be:55:c9:55:41:89:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:9C:82:F4:25:CA:EB:D3:BB:9A:9B:E6:5E:B2:3A:E4:1A:D6:A5
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/IlicgvQlyuvTu5qb5l6yOuQa1qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c2:97:ce:9b:ca:cd:83:45:0d:fa:4c:23:87:70:5a:9a:05:
0d:22:74:a8:56:0e:cb:72:3e:c4:d8:67:71:fd:cc:18:17:ec:
ea:fb:cc:9a:c2:d6:50:a4:2f:a4:60:75:bb:64:3a:70:dc:fa:
22:a9:59:c0:98:7e:4d:3f:1e:66:b7:19:82:d0:af:94:69:da:
85:9e:08:9d:0e:bd:a5:06:37:e8:65:0c:d1:66:e3:4d:43:15:
d2:b1:ef:78:06:a7:d3:f7:e7:13:ea:94:c6:fb:de:89:ba:ae:
b5:4d:b1:e3:9d:11:64:b5:df:1a:be:5d:ea:ae:e5:5c:e4:7e:
92:64:13:52:47:2b:13:e1:1a:ef:b7:fa:ae:94:d0:b9:e2:c4:
30:c3:3a:d4:8b:16:b0:13:4b:c4:7c:bf:cf:61:1d:93:cd:b1:
e3:1b:a3:de:2b:b7:c1:0d:d5:f3:0e:06:35:7d:2b:7a:3c:7d:
95:8b:20:a2:bb:16:d6:06:d4:91:2d:e9:09:92:ef:fe:ac:19:
bf:ae:7d:19:c9:b0:4c:77:20:83:6b:a6:23:7c:75:eb:f0:38:
34:fb:80:c3:4f:2f:d9:40:51:89:f2:3d:b1:72:c3:7a:8c:e2:
ae:e2:7b:e7:a3:9e:a1:8d:d6:d1:fc:0e:0b:5c:d5:ef:c9:a8:
29:77:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:02 2024 by rpki-client on console-ams.rpki-client.org