Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa
File: C-hBfarYYWizOuVrPfa9lbZGLYU.roa (raw, json)
Hash identifier: MRYoJFbIYojwsxzuZyl/ICIvP6E4W4HNBXBrDi2IbiY=
Subject key identifier: 0B:E8:41:7D:AA:D8:61:68:B3:3A:E5:6B:3D:F6:BD:95:B6:46:2D:85
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 018CC9BBF06FEE566EAC21E6FAD9C3CC967B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202709
IP address blocks: 194.147.24.0/22 maxlen: 24
2a0d:840::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 May 2024 13:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f0:6f:ee:56:6e:ac:21:e6:fa:d9:c3:cc:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0be8417daad86168b33ae56b3df6bd95b6462d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:55:ab:12:8d:3d:e6:bc:81:32:de:ef:8a:
40:3b:52:f1:ca:d0:ea:e9:65:94:8d:81:74:9a:c5:
34:62:43:41:df:1e:51:36:82:3d:41:0a:64:73:a1:
49:fb:a5:7f:5b:a1:bb:04:8f:60:80:cb:8c:6c:03:
36:d1:17:6e:a6:d2:1d:ff:3f:b9:49:3e:00:ae:26:
05:38:3c:69:9e:16:af:41:71:bb:2c:f1:13:ae:d8:
4f:b6:9c:bd:eb:ee:79:91:c2:95:92:83:56:a9:bd:
38:ac:75:f7:b7:30:6a:0b:70:d5:da:2d:d8:7b:bb:
d2:61:0d:f6:e8:49:2b:95:ee:25:09:9c:29:0e:7a:
0c:f8:ca:03:06:d1:32:9c:a4:59:bc:ad:d8:bf:a2:
0c:12:d2:cf:fb:5b:09:99:8e:09:3c:73:0a:b4:c2:
38:0c:e4:41:41:0f:05:82:aa:fc:d0:e6:e0:96:84:
5a:80:d2:dc:e6:62:1f:03:9a:7f:4c:2d:bf:15:ae:
3b:61:e6:81:71:e6:7a:03:7a:56:67:cc:aa:e5:bc:
0a:35:9e:56:00:13:c0:b5:49:1a:0c:87:7f:5f:df:
17:a7:08:a8:c9:54:2c:da:83:d2:2c:fd:7d:09:02:
30:93:bf:55:cd:44:d3:78:60:53:53:10:77:d5:f4:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:41:7D:AA:D8:61:68:B3:3A:E5:6B:3D:F6:BD:95:B6:46:2D:85
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/C-hBfarYYWizOuVrPfa9lbZGLYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.24.0/22
IPv6:
2a0d:840::/29
Signature Algorithm: sha256WithRSAEncryption
07:b2:d3:a0:90:b4:73:0c:7d:d5:bc:ce:c7:45:ef:0f:a8:c4:
58:af:20:9f:6c:cf:b7:1c:77:31:23:a0:d4:57:ee:05:50:ef:
75:e2:74:46:78:de:85:26:da:26:16:fd:1a:54:58:fe:eb:5e:
d4:69:0a:61:d0:12:aa:6a:27:91:a2:9d:99:2a:e2:dc:30:46:
c1:00:d3:2f:55:b8:e0:42:87:cd:89:cd:cf:8f:79:f4:f5:51:
f1:21:6e:ab:6e:29:18:58:a4:79:fd:16:8e:0f:96:68:b9:8d:
c6:f6:20:97:43:f9:71:fd:07:8f:a0:82:bb:c8:ef:ef:f7:ae:
99:c3:22:a2:f4:ce:4c:35:4d:3d:84:8f:de:77:9d:4c:f1:53:
9e:7c:4b:50:0a:23:fc:0f:f9:fa:21:bc:84:2d:90:a2:0b:39:
f9:da:34:1c:e9:44:15:2b:cc:52:b2:3f:8b:a5:94:fe:13:e5:
9c:4b:55:f3:ac:7b:49:0f:11:17:1a:ee:8f:39:ce:46:e6:30:
77:e8:51:fa:bc:58:cf:20:5d:2b:d4:3f:48:43:c3:68:a4:b6:
25:cd:e7:a4:5f:37:77:11:87:ff:34:a4:f8:85:9f:12:e2:50:
27:28:33:2e:c8:cf:07:a2:bd:f0:84:d4:bb:4c:6b:75:fe:16:
cb:eb:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org