Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I1uySYuuhD5_2jJaOgZdP6T8SmA.roa
File: I1uySYuuhD5_2jJaOgZdP6T8SmA.roa (raw, json)
Hash identifier: 8sx73Km1Ib2KJEw/AZ9Ws8N+7uphbKq5Iiu6TNpYkDY=
Subject key identifier: 23:5B:B2:49:8B:AE:84:3E:7F:DA:32:5A:3A:06:5D:3F:A4:FC:4A:60
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 018571D79385F9FC0D9EEE95F0B6534DC37F
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I1uySYuuhD5_2jJaOgZdP6T8SmA.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204444
IP address blocks: 194.76.44.0/24 maxlen: 24
194.76.41.0/24 maxlen: 24
194.76.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:93:85:f9:fc:0d:9e:ee:95:f0:b6:53:4d:c3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=235bb2498bae843e7fda325a3a065d3fa4fc4a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:75:fe:00:98:71:bc:89:9d:11:79:39:de:
19:38:ee:db:83:3a:61:6f:d3:25:ad:65:eb:aa:71:
15:c6:94:d2:e0:f3:b9:e4:ec:39:78:9a:58:f1:27:
af:80:1d:0e:d9:f2:8c:1e:55:20:1a:2b:f0:8c:57:
a8:ae:ab:1a:b1:fb:f1:00:af:66:4c:ea:01:f8:c3:
bf:ec:e6:8b:9e:49:c0:57:cf:5d:72:90:36:89:2e:
69:9b:13:f9:c6:24:ad:bb:b7:ec:16:ec:95:c7:01:
99:27:68:1c:49:29:17:7b:c4:80:b2:49:bd:81:f1:
b6:e6:92:12:26:b3:54:ca:c7:bb:37:16:51:ae:91:
e5:59:ec:00:1c:27:cd:2d:6b:a3:7b:38:18:e3:d4:
95:a0:6f:15:86:59:f4:c5:e3:8b:5c:f6:1d:f8:53:
05:ad:64:8a:bc:5d:f0:15:4c:44:4a:6a:fe:c5:61:
ea:2d:1b:5b:5d:45:50:b9:a4:da:0d:0d:8e:8c:2f:
04:08:3c:0f:41:52:d7:96:b8:76:31:a4:89:56:88:
c5:ef:43:73:9d:f3:35:4b:0c:e1:75:63:fd:8b:3a:
ad:c7:c5:f4:b3:ba:0a:d8:ac:41:bb:42:aa:02:c4:
b1:07:b9:9b:6a:51:6d:7e:6d:c9:ee:a0:b7:0b:6b:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:B2:49:8B:AE:84:3E:7F:DA:32:5A:3A:06:5D:3F:A4:FC:4A:60
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/I1uySYuuhD5_2jJaOgZdP6T8SmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.41.0/24
194.76.44.0/24
194.76.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fe:d5:94:a3:7c:e4:45:2d:89:88:78:23:0f:b7:e4:b1:de:
2c:81:0e:13:c0:56:be:e0:a7:cf:c5:5f:19:80:b8:c3:be:88:
8b:0e:be:4e:be:4e:ce:a1:29:4c:4d:58:14:32:5e:b8:37:ac:
c6:50:ed:1f:ad:53:7e:66:48:17:86:81:ea:5a:1c:9c:3d:8c:
3c:fa:bd:34:2a:30:51:20:c4:57:37:74:8a:6d:cf:f1:46:60:
c1:f5:c4:81:53:bf:e0:53:54:e1:8a:83:db:20:27:f5:3a:f3:
c5:e7:0f:88:b5:a9:97:4a:15:5b:52:d2:fe:a9:1f:6f:49:f3:
b5:59:78:e1:f7:6b:f2:a2:10:01:9e:ee:1b:22:05:55:96:79:
36:63:2b:04:f6:4d:63:c9:60:10:55:82:1d:7a:93:9a:65:a0:
2b:b9:36:60:23:8e:c9:1a:48:21:ef:d6:f2:b4:54:6b:2a:7b:
e4:37:d5:e2:fb:83:f7:37:66:14:c6:0b:34:84:7c:f9:95:78:
ea:48:6c:a4:c2:16:b9:a7:a3:f2:db:2b:24:1f:e9:e3:6b:5c:
80:73:cd:bb:a2:42:93:65:a1:f2:37:22:c5:a4:74:38:45:ec:
7d:ab:55:51:4f:1a:46:9d:fa:3b:13:99:ea:f3:47:2c:e0:60:
16:4f:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:32 2024 by rpki-client on console-ams.rpki-client.org