Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQ8wb6U9XSbibGXQ_7alHL7sHAM.roa
File: uQ8wb6U9XSbibGXQ_7alHL7sHAM.roa (raw, json)
Hash identifier: yPhZRF1rX6zTKEgI1kHpO434NonW7rGFX3b10zTq4v0=
Subject key identifier: B9:0F:30:6F:A5:3D:5D:26:E2:6C:65:D0:FF:B6:A5:1C:BE:EC:1C:03
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01864C8773BFF413B449F0DB9C105EF14CFB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQ8wb6U9XSbibGXQ_7alHL7sHAM.roa
Signing time: Mon 13 Feb 2023 20:46:30 +0000
ROA not before: Mon 13 Feb 2023 20:46:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32097
IP address blocks: 194.28.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Feb 2023 18:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:87:73:bf:f4:13:b4:49:f0:db:9c:10:5e:f1:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 13 20:46:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b90f306fa53d5d26e26c65d0ffb6a51cbeec1c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:87:78:65:21:03:49:18:8e:b7:f6:55:ea:
67:e5:bc:6f:0f:ca:69:d2:99:f1:27:0e:c1:b7:58:
a9:25:c7:cf:d8:fd:d0:36:7d:00:57:5d:ed:c5:0f:
a8:21:f7:45:7c:e5:49:f7:6c:66:16:4c:50:25:07:
68:ac:ae:fe:34:58:c7:54:29:40:3b:1b:69:83:f2:
5f:38:54:5f:7b:2d:cc:19:23:8b:84:28:0d:6b:96:
fe:f6:0a:2c:86:60:28:5d:7c:49:2a:7f:a3:26:b7:
6e:4f:97:55:77:98:75:ec:99:69:83:95:87:12:15:
ff:84:5d:28:9d:1f:56:e2:fe:2d:35:7f:3c:a9:17:
1a:db:e2:cb:e8:e5:3d:9d:c0:96:25:5e:ed:d7:53:
ba:bb:87:41:2c:4b:55:28:47:7f:7e:30:31:03:17:
37:40:70:ff:da:2c:03:be:4d:9f:80:e6:89:06:6f:
0e:1d:62:23:94:64:51:ce:26:d3:25:1d:5a:fc:da:
9c:64:90:e5:d5:ff:75:37:18:46:fc:35:33:f8:8f:
37:72:c6:fc:c3:59:92:fc:b7:7c:92:fd:34:1d:36:
53:9f:ca:0c:4b:3a:a7:ee:96:f8:fb:57:a9:fc:8d:
08:58:92:9f:17:90:84:da:73:2a:eb:b9:d5:68:f2:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:30:6F:A5:3D:5D:26:E2:6C:65:D0:FF:B6:A5:1C:BE:EC:1C:03
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQ8wb6U9XSbibGXQ_7alHL7sHAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:36:48:08:34:a3:4e:40:70:f8:28:f8:5b:5b:13:4d:63:55:
8a:31:05:6c:4c:27:83:81:44:5d:10:fa:f9:4d:de:10:98:11:
2a:a5:a4:a0:99:86:ff:04:34:76:6b:5a:40:15:cd:f7:04:fa:
31:41:a2:f3:ea:15:ef:bf:ba:22:e8:21:2a:20:5b:fb:35:88:
c7:61:46:44:64:6d:a5:70:0b:88:41:9e:83:65:9f:8d:86:b0:
6d:03:9e:65:31:72:63:12:e0:fc:34:45:42:00:e0:a8:de:d6:
c1:a8:a0:f6:8b:7f:8a:1a:34:22:d1:9d:96:0a:82:65:52:3b:
6b:ef:ea:2f:2c:35:83:d1:7a:f3:ed:f9:c1:78:63:2f:d3:a8:
c4:c5:a6:9e:79:c7:3f:2c:8b:ca:1c:12:73:ce:51:16:2b:74:
15:8d:85:e7:26:03:05:6e:2c:7f:e1:ad:c6:cd:10:56:1b:70:
f9:db:cb:35:17:13:e4:35:2c:86:df:2f:cd:ec:09:26:1f:06:
42:89:0f:9f:01:0f:4b:de:cd:5c:56:ee:04:86:33:37:07:5c:
1c:b5:d3:72:d4:4a:c4:40:cd:0e:c7:3b:19:a3:2d:b9:eb:d5:
08:70:f7:cb:a0:50:f6:a5:76:06:56:78:a7:12:dc:7a:8d:2e:
4c:af:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org