Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/c_KtWOoLg-7p0IcFrWiJbhUL4jU.roa
File: c_KtWOoLg-7p0IcFrWiJbhUL4jU.roa (raw, json)
Hash identifier: KpFOC2QZ4pBdSSwBX7yPCqRT3aOA01ziM86Kbdy1fTY=
Subject key identifier: 73:F2:AD:58:EA:0B:83:EE:E9:D0:87:05:AD:68:89:6E:15:0B:E2:35
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018E2BE8544F498323E3970D87ABEC1DE48A
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/c_KtWOoLg-7p0IcFrWiJbhUL4jU.roa
Signing time: Mon 11 Mar 2024 05:07:09 +0000
ROA not before: Mon 11 Mar 2024 05:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141759
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 02:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2b:e8:54:4f:49:83:23:e3:97:0d:87:ab:ec:1d:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Mar 11 05:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f2ad58ea0b83eee9d08705ad68896e150be235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:8a:d8:c7:01:84:60:f8:87:0b:8f:ea:a9:
b4:7b:8b:09:e1:df:2d:f4:ec:d2:bb:b1:95:8e:8d:
ed:3e:55:4a:be:ca:b9:d3:27:99:70:39:f4:f9:d2:
12:44:f8:74:5b:9f:b3:79:77:90:8a:1c:c9:85:7f:
b5:4f:d1:f4:8c:96:61:05:67:c2:ef:23:af:02:c1:
0f:33:35:5a:54:15:4f:7b:e3:cf:f8:9c:01:f0:c2:
58:94:c8:f1:be:e7:5b:0a:7c:12:52:c6:be:4f:10:
58:c6:df:3d:c5:4f:ad:d4:08:f6:21:88:f4:38:7a:
15:b0:3c:c9:99:5a:a4:ef:b8:27:25:0e:2a:b1:12:
c4:4d:47:cd:fa:7e:05:f3:9e:0e:15:77:6e:ce:2b:
36:d5:a0:92:7b:82:45:7e:8b:a9:a8:41:fc:de:40:
f5:e5:23:71:50:30:a3:c5:1b:a4:c5:d1:89:13:50:
6d:75:e4:80:e8:9d:cd:93:27:ba:ea:8f:4d:d1:15:
f4:3c:e4:47:ac:cb:ca:04:64:98:ed:11:ed:4c:20:
1b:3b:c7:8f:aa:50:6f:95:9b:ba:56:b4:6e:f6:01:
96:9e:71:7a:ee:81:e7:a6:56:eb:4d:37:be:9d:d2:
ce:90:19:fa:cc:f1:fb:b9:b0:b7:a8:c8:1d:a3:15:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:AD:58:EA:0B:83:EE:E9:D0:87:05:AD:68:89:6E:15:0B:E2:35
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/c_KtWOoLg-7p0IcFrWiJbhUL4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:3a:58:8f:2b:fe:bd:ee:0c:c4:5b:c4:64:dc:44:77:32:
b8:90:ab:8b:e5:1e:13:25:87:c5:2a:35:7e:02:f2:ea:64:c8:
5f:8f:44:23:76:0a:83:f6:1d:a9:38:1c:17:e4:91:8d:79:30:
86:c5:0e:07:00:58:a6:59:18:98:16:e1:8f:56:ae:9f:49:20:
c9:af:95:03:63:82:de:72:33:29:14:f3:c4:2c:c9:bb:a6:c2:
ef:4f:17:21:ea:a5:07:75:79:66:7d:15:90:82:ec:fb:ce:cd:
d1:23:40:38:fb:eb:00:0b:94:ad:ef:a0:91:bb:30:4a:98:dc:
0d:6d:5a:a5:12:aa:27:c6:d5:e2:82:c5:1d:48:7e:31:30:9b:
fd:3f:1e:bb:b7:01:46:3e:6f:ea:87:bd:e6:e4:79:35:ba:b6:
f0:80:e9:76:e8:69:4c:45:42:51:58:41:d4:7e:13:5b:fe:e8:
93:7f:0b:ac:93:8e:b5:af:72:79:3e:af:b7:02:9b:f4:b3:4f:
9e:39:e6:f8:3b:d1:02:f5:bb:c5:ed:26:c3:d2:ce:d0:7c:f6:
cb:4d:dd:eb:60:d0:43:71:02:d3:20:f6:f1:ce:77:6f:23:ef:
d2:94:26:2f:1f:86:e2:e8:06:77:e4:5e:ff:33:0d:4c:1a:7c:
98:3c:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org