Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/czGUd89XU74EPz6HZOkzpE_-O1A.roa
File: czGUd89XU74EPz6HZOkzpE_-O1A.roa (raw, json)
Hash identifier: Erp7UHDB15sOm0l95FQkvnOcJnoVF0ZOpKKuq0f0anQ=
Subject key identifier: 73:31:94:77:CF:57:53:BE:04:3F:3E:87:64:E9:33:A4:4F:FE:3B:50
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D65BE260188BF6DFFC18FB6FCDA4FCE10
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/czGUd89XU74EPz6HZOkzpE_-O1A.roa
Signing time: Thu 01 Feb 2024 17:36:16 +0000
ROA not before: Thu 01 Feb 2024 17:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 18:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:be:26:01:88:bf:6d:ff:c1:8f:b6:fc:da:4f:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 1 17:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73319477cf5753be043f3e8764e933a44ffe3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:0e:b8:64:4b:2e:94:56:f6:0a:5a:36:5f:
0d:6f:f0:31:b5:17:fd:a7:11:6c:10:8b:48:ae:b5:
a4:8d:f2:91:9b:34:be:fe:d1:ab:a0:62:85:2e:46:
56:d8:73:8a:c2:7f:07:2b:31:55:61:6a:34:59:26:
4f:a4:c8:af:74:45:68:3d:e0:3b:d0:a5:89:fe:ce:
f3:c8:84:78:5e:dd:fb:77:bd:67:07:35:bc:99:de:
f1:f4:e0:22:87:01:2a:7c:0d:8a:e8:9c:77:bc:7a:
1e:de:e8:83:ad:1d:e8:87:dd:0f:ae:fb:61:c6:ee:
f8:52:2e:dc:60:80:4a:69:31:2f:93:ed:aa:e6:c4:
13:49:e7:01:ec:cc:92:86:52:ee:54:95:66:3b:db:
0b:0c:9c:11:44:23:91:c0:45:2b:ef:c5:92:a1:ba:
52:d5:b7:a1:9d:9a:08:60:0a:47:9d:3e:a7:bc:2d:
4d:10:ae:52:99:19:ca:c1:0d:d6:1d:3f:17:7f:49:
51:43:e8:5c:48:7d:67:6b:dd:e2:29:95:9a:74:b3:
9b:57:3c:04:9f:6e:87:b9:1b:e0:60:0a:28:52:62:
e8:b6:87:46:79:bc:7c:17:af:d6:a8:8b:d8:2c:90:
72:c5:76:60:f2:6a:f1:e2:07:a9:50:77:12:f0:ea:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:94:77:CF:57:53:BE:04:3F:3E:87:64:E9:33:A4:4F:FE:3B:50
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/czGUd89XU74EPz6HZOkzpE_-O1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.60.0/24
194.107.92.0/24
Signature Algorithm: sha256WithRSAEncryption
57:38:60:75:26:f4:ea:85:a5:e3:79:39:19:0b:1a:d6:08:c7:
18:62:09:98:c9:ef:30:52:e8:59:57:c6:53:9a:0f:58:74:24:
a6:f3:e3:fe:cb:3b:b4:b9:7e:80:26:6f:e8:30:e5:38:83:c6:
5c:2a:aa:14:f3:97:5c:52:ad:ca:dc:07:43:eb:52:99:1a:6a:
b4:f8:dd:39:6e:22:49:59:c4:5f:07:1d:b1:1c:66:84:a1:a8:
69:d1:f4:7b:16:43:88:bd:b2:05:ef:e7:49:b7:e8:ba:87:af:
40:2a:8c:50:42:09:ad:34:39:79:af:3e:9d:4b:e2:42:13:9a:
9a:34:bd:53:68:94:2f:9b:ab:26:f8:47:c5:96:ac:c1:8c:b5:
15:25:c3:93:90:d1:bf:7b:db:b5:6d:c2:63:47:f7:f7:23:0e:
3b:10:a7:aa:3d:31:70:2b:e0:3f:ce:77:d3:d5:6a:c3:b5:db:
23:6b:03:6e:78:d7:7b:f4:8b:b6:e1:45:47:bc:5d:aa:f2:e3:
6b:74:9e:84:dc:a1:d6:d7:69:b0:7e:2f:a5:46:a5:b3:4d:23:
29:6a:9d:91:40:a2:80:30:77:36:1c:63:a1:0c:32:7b:b0:c4:
fa:f5:68:7e:5f:3c:d7:7c:c3:e3:39:d1:db:d7:6b:b1:19:9f:
d8:38:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org