Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1YLfPx57LuOfMMJqPxySYbTJOco.roa
File: 1YLfPx57LuOfMMJqPxySYbTJOco.roa (raw, json)
Hash identifier: /cC4UNSW1TXMB1JQGqGRnzefiVLyF1C7/XnlK/+svsU=
Subject key identifier: D5:82:DF:3F:1E:7B:2E:E3:9F:30:C2:6A:3F:1C:92:61:B4:C9:39:CA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018955650AA10C8920CBA54529037059EE51
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1YLfPx57LuOfMMJqPxySYbTJOco.roa
Signing time: Fri 14 Jul 2023 17:13:52 +0000
ROA not before: Fri 14 Jul 2023 17:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 08:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:65:0a:a1:0c:89:20:cb:a5:45:29:03:70:59:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 14 17:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d582df3f1e7b2ee39f30c26a3f1c9261b4c939ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:74:01:22:2e:84:3a:87:12:e2:03:4b:19:
1f:dc:43:91:86:db:a2:67:45:24:10:ea:0c:c3:33:
71:5a:7a:ce:75:d7:f0:22:5a:10:60:c7:7f:6e:8d:
40:b4:b9:9e:ca:cb:5d:f3:d9:e2:f5:d3:0f:1e:b2:
cc:ac:1f:80:6e:c8:a0:9e:d8:e1:5c:08:81:92:64:
bc:53:d5:ea:9d:a8:ff:6b:92:0d:37:cc:70:a9:ab:
4c:4b:d7:69:ef:e8:50:6f:95:a1:79:ac:01:69:b1:
13:ff:96:eb:ff:62:6d:cf:f7:09:49:b9:76:26:d3:
ea:cb:e8:b0:2a:9f:e7:b0:85:96:dd:2b:98:9f:39:
c3:68:6d:44:03:95:d8:e4:8a:b3:22:88:4a:6c:fe:
52:d3:1a:6a:e3:4d:a2:38:0c:8e:5d:f3:87:0a:92:
6b:51:00:3a:f9:59:4b:48:40:b3:7d:a2:c9:27:af:
23:87:a2:1f:53:06:67:ad:ad:a2:8a:b6:e5:81:3c:
c1:fd:91:75:fd:18:fc:a8:f2:e4:46:41:3e:00:3b:
d5:cf:73:66:84:29:3b:a5:ca:e1:07:d4:1a:67:0a:
7e:69:70:f4:09:95:99:35:ed:ed:bb:e3:dd:77:a8:
fb:63:06:d3:e8:49:68:9c:70:65:5e:95:42:ea:de:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:DF:3F:1E:7B:2E:E3:9F:30:C2:6A:3F:1C:92:61:B4:C9:39:CA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1YLfPx57LuOfMMJqPxySYbTJOco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
20:be:06:d7:ba:96:f1:52:d7:b0:c2:2c:d6:f5:f6:b0:00:46:
9f:b7:3d:4a:31:7d:de:4d:a1:d7:8a:ea:e9:ed:35:1b:47:9f:
24:46:cc:61:cb:b2:09:f4:f3:b4:22:2a:b1:2c:8d:73:58:97:
9e:49:7d:73:6b:2b:e5:8c:76:a9:47:cc:04:df:57:f1:dd:da:
d6:e3:5d:b1:91:82:ae:74:68:79:a7:9f:ee:de:a8:63:d1:b2:
50:f0:7d:5e:8f:18:9f:13:45:36:5e:d0:c9:88:8c:85:c5:98:
14:99:5c:2d:ab:7c:e2:b0:de:d0:db:30:c9:67:35:4d:36:61:
d3:0d:06:8e:36:8a:10:de:ed:58:e8:9f:47:ec:8c:e2:04:f5:
72:bb:00:81:b9:b7:4b:9c:ce:c6:05:92:3a:cf:50:50:e3:50:
ec:cc:1a:83:a7:01:27:9b:00:79:0a:a4:51:94:8e:c7:ea:91:
c4:7c:00:73:d5:49:8c:d9:b2:1e:db:32:50:83:d2:a7:f0:25:
7c:01:8d:ea:b2:d1:c5:82:7f:15:95:3e:82:f6:43:c2:d6:53:
61:ec:99:0b:87:74:b0:ba:14:b7:d3:f0:63:9c:0b:a3:37:ac:
83:e3:be:1b:15:56:d7:4c:e7:fb:50:84:26:64:6c:44:24:56:
89:c5:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org