Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V3TbFK9lGOXCnUT98yeHUDZKJMw.roa
File: V3TbFK9lGOXCnUT98yeHUDZKJMw.roa (raw, json)
Hash identifier: fECi1QBoD7zR5OaarQxU0aHpgF23E1+T8xiEWODtB28=
Subject key identifier: 57:74:DB:14:AF:65:18:E5:C2:9D:44:FD:F3:27:87:50:36:4A:24:CC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01915B102AFDA1791179A369CA1B04179985
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V3TbFK9lGOXCnUT98yeHUDZKJMw.roa
Signing time: Fri 16 Aug 2024 12:01:11 +0000
ROA not before: Fri 16 Aug 2024 12:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 09:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:10:2a:fd:a1:79:11:79:a3:69:ca:1b:04:17:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 16 12:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5774db14af6518e5c29d44fdf3278750364a24cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:a5:29:da:a0:d8:76:9c:54:ff:ba:ce:ac:
ea:1d:8c:11:5a:8d:f1:8f:a2:5e:1d:5a:63:dd:8d:
25:f3:5f:d2:58:ad:4d:43:71:24:e5:44:1f:de:c8:
c7:86:56:2f:ff:cf:eb:15:df:47:a4:02:c2:25:9c:
4a:6b:a8:33:11:76:17:ed:cf:14:bf:bc:64:de:f2:
8d:27:4b:e2:df:99:b2:18:4d:bf:6b:02:ef:1a:be:
24:ce:de:43:0a:76:6e:0d:5d:e0:e8:88:91:90:1a:
95:1b:6b:26:d9:f3:9a:1c:b4:52:f8:ed:b3:96:d7:
55:c9:dc:16:70:af:68:b7:2f:30:e6:32:2d:b5:93:
6d:3d:1c:c7:0c:ed:4c:d2:7a:d6:12:e3:b7:0e:96:
c9:c6:98:b2:c3:91:23:a5:a8:f9:04:bc:34:5b:f4:
6d:3f:0d:a5:16:3d:a2:fb:0e:93:37:5d:00:74:a4:
0e:28:2a:0b:c3:a1:b9:21:f3:28:aa:1d:ea:ac:8a:
01:63:dc:60:e1:17:aa:b0:c3:26:47:98:ca:be:5e:
9f:0f:d2:2c:f4:0e:9c:c0:ec:f1:cf:20:7d:2b:20:
70:02:00:5a:a0:0f:ec:12:f4:fd:54:6e:63:89:fe:
33:93:7c:34:33:e3:95:8c:83:68:04:cf:c7:ef:9e:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:74:DB:14:AF:65:18:E5:C2:9D:44:FD:F3:27:87:50:36:4A:24:CC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/V3TbFK9lGOXCnUT98yeHUDZKJMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6f:41:94:ea:8b:dd:b1:a0:69:ee:06:71:0e:e9:b7:c1:13:
60:45:32:3b:34:94:f6:0a:f3:47:be:ab:51:6e:ad:35:a5:c0:
f1:95:91:e7:4d:57:36:08:c3:c8:9e:c5:20:9e:69:3d:fa:0b:
6a:e8:82:dc:0e:9b:be:14:e4:b5:b3:ee:2f:1f:e5:33:b7:4b:
a4:7e:55:3f:81:7b:15:24:f7:99:5d:43:22:e4:06:7d:cf:43:
19:da:2a:55:eb:4e:70:d9:e5:29:d6:2e:c9:1b:08:bb:c3:a6:
af:4f:4a:08:d0:5e:8d:20:69:8f:ed:37:21:e8:51:c8:60:c4:
ec:f8:eb:4e:79:2c:2d:f4:fd:1a:da:bb:40:94:9d:b7:20:50:
c0:a5:ea:18:07:3e:bf:53:d9:0e:7f:6a:6d:51:c9:d9:c4:47:
a4:74:10:ea:3a:d0:c0:f0:a1:76:e0:0d:aa:e0:8b:06:5e:67:
d1:a5:bb:fd:68:3e:77:48:32:88:e0:a9:05:2e:b7:c6:12:ff:
76:56:80:33:83:a6:a3:c7:98:4c:9e:7b:e7:ea:93:f0:42:6d:
14:f3:03:0a:77:90:27:be:63:01:9b:e8:dd:06:c1:dd:88:70:
54:1d:6e:7d:63:e6:d7:04:86:aa:57:0c:d1:b8:67:3f:72:71:
d9:cb:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 12:39:31 2024 by rpki-client on console-fra.rpki-client.org