Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Def4kgiTT5tdDpJ8epSiuYOckZI.roa
File: Def4kgiTT5tdDpJ8epSiuYOckZI.roa (raw, json)
Hash identifier: saVkyx2bTfaP6VDr5QC4Yz7MZ3NxiWb8X3tYesZ5Foc=
Subject key identifier: 0D:E7:F8:92:08:93:4F:9B:5D:0E:92:7C:7A:94:A2:B9:83:9C:91:92
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018780527A3CD8143F873D2414DE11ED6D91
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Def4kgiTT5tdDpJ8epSiuYOckZI.roa
Signing time: Fri 14 Apr 2023 15:11:41 +0000
ROA not before: Fri 14 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 517
IP address blocks: 194.45.183.0/24 maxlen: 24
194.45.98.0/24 maxlen: 24
194.45.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:52:7a:3c:d8:14:3f:87:3d:24:14:de:11:ed:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de7f89208934f9b5d0e927c7a94a2b9839c9192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:b8:48:48:ff:ce:b9:04:54:81:46:ed:2e:
1f:7b:d4:e7:cb:97:4e:ff:53:89:a7:b0:28:ea:00:
de:e4:c2:5e:d8:1c:cc:35:88:54:20:65:c6:a4:2c:
a9:e4:90:4d:7d:18:58:3b:d7:13:e2:a3:46:8c:f9:
63:33:1b:14:89:bc:78:ea:7a:ff:51:7a:d0:42:2c:
c9:30:ba:92:90:43:ac:fb:1f:a1:74:5e:69:e2:22:
69:a3:97:ac:28:62:2b:b0:9e:b6:6d:00:0b:d6:6d:
77:84:84:34:5c:1b:90:8b:cf:91:29:02:c3:7b:80:
50:c5:fa:98:34:f1:4d:c8:13:ac:dd:71:d9:6e:03:
34:2d:b1:d9:1e:19:28:63:7a:ec:18:3e:ef:36:f1:
e4:d5:5f:bc:40:b9:43:f3:5e:38:92:80:26:1c:21:
c4:c9:ff:e8:bf:9f:46:44:87:a6:49:43:ca:d2:87:
b9:66:5b:ad:27:f9:5e:b2:7e:48:18:ad:e3:a0:75:
18:b0:68:a5:4c:96:ea:aa:52:0b:74:39:1e:0d:e3:
eb:b9:91:eb:5c:11:e5:57:d5:3a:38:10:0a:ee:78:
9c:35:23:7b:2d:fd:4b:02:49:36:26:cb:6d:eb:47:
bb:d6:79:f9:b7:db:34:42:bf:23:71:5e:6a:10:d0:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:F8:92:08:93:4F:9B:5D:0E:92:7C:7A:94:A2:B9:83:9C:91:92
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Def4kgiTT5tdDpJ8epSiuYOckZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.98.0/23
194.45.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:29:68:17:65:95:22:4d:ef:0f:70:0a:62:ff:87:20:e6:aa:
fb:53:a4:b0:a4:5a:c0:0d:1f:2c:0c:39:24:f9:d1:4f:27:55:
ca:b1:21:26:d6:0b:dd:0b:37:30:92:06:19:30:d4:fd:2e:00:
87:6e:5f:79:cc:e3:8b:c2:d9:08:80:0c:94:01:31:2b:be:a5:
8c:b1:a1:d5:75:12:92:f5:99:04:fe:53:41:7c:8a:33:4b:f0:
e5:c5:b5:73:13:01:04:ba:9b:97:b9:df:ca:5a:f4:c4:35:5b:
49:d7:81:0f:34:d1:80:6c:7a:ef:51:53:bd:64:35:02:c7:e5:
83:33:78:3e:b3:63:b4:ca:16:cb:24:32:19:e3:51:8f:54:c2:
46:ea:9b:c5:18:6a:22:be:b3:8c:d4:3d:b6:cd:fb:d8:7e:ad:
b4:37:5b:87:67:e2:a3:f7:f7:9a:c4:8d:ec:d2:74:b8:0c:79:
a7:da:2d:8d:20:e4:90:9a:21:c5:c8:6b:68:52:2a:24:4d:fe:
1f:39:f2:97:53:d7:24:6c:1e:fe:b4:eb:4a:d1:eb:91:d3:ae:
9d:86:52:36:45:c1:79:23:55:ca:e4:d8:5a:a1:8f:ec:72:e2:
38:f3:63:a6:65:98:db:88:f6:fe:50:9d:7c:ab:6b:b1:6b:87:
53:eb:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:38 2024 by rpki-client on console-ams.rpki-client.org