Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVBam-J0sLG3I69SIIpNI8ymFvU.roa
File: iVBam-J0sLG3I69SIIpNI8ymFvU.roa (raw, json)
Hash identifier: 7o/RWGIdHddeTv2gkYaRWBL4IgmgPG6gwOCHiYCZDh0=
Subject key identifier: 89:50:5A:9B:E2:74:B0:B1:B7:23:AF:52:20:8A:4D:23:CC:A6:16:F5
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01885CC2692CBB5D8F80127F8B85D69B4B37
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVBam-J0sLG3I69SIIpNI8ymFvU.roa
Signing time: Sat 27 May 2023 10:30:24 +0000
ROA not before: Sat 27 May 2023 10:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 194.124.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:c2:69:2c:bb:5d:8f:80:12:7f:8b:85:d6:9b:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: May 27 10:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89505a9be274b0b1b723af52208a4d23cca616f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:bd:a1:39:51:cb:42:cb:3d:59:96:95:7f:
9f:dd:74:87:8e:dc:c3:86:e7:18:bd:40:6d:ac:63:
d5:05:06:20:75:12:3a:40:80:a9:27:0e:39:02:50:
63:5b:1f:1a:b6:c2:c5:68:a6:f3:d5:47:96:d6:d0:
89:71:00:df:ed:b7:05:80:fc:32:37:d3:ad:72:4c:
2b:b4:f8:b2:b7:87:ab:1c:03:87:86:ef:76:f4:50:
6f:96:74:8b:96:5b:d3:ae:93:ed:e3:68:09:c2:42:
72:59:d0:28:95:23:5f:05:f4:68:1f:6f:be:33:b0:
80:16:bf:d6:43:8c:f7:7a:7d:d8:1d:6a:5c:24:73:
49:18:d3:83:e2:d5:d7:ee:87:fc:db:ba:38:67:ab:
6d:c6:e5:d9:fe:e4:61:0c:1c:2b:20:e7:f2:22:5e:
5e:1d:0d:d1:c4:87:09:2b:23:d2:7f:32:3c:f1:db:
27:d8:94:30:75:71:ac:6b:25:f2:9a:4d:5f:97:9c:
31:19:14:e3:67:b7:67:23:0e:d3:8a:8e:97:61:7b:
6c:bc:de:1a:a7:f0:4c:d9:21:ba:cc:b8:b1:36:90:
e6:0a:4d:9d:59:44:60:bd:47:f0:a1:97:85:9a:10:
79:68:6f:65:22:28:06:1e:c0:a5:ff:69:4a:2d:55:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:5A:9B:E2:74:B0:B1:B7:23:AF:52:20:8A:4D:23:CC:A6:16:F5
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iVBam-J0sLG3I69SIIpNI8ymFvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:10:7e:0f:03:85:e1:43:75:8c:df:75:39:6d:92:87:b0:2d:
a2:50:28:ba:46:ee:a6:f2:91:47:f4:0f:18:e6:3f:d8:ba:e6:
22:50:c1:2b:8d:15:48:c5:24:28:04:a1:61:52:c0:7c:55:51:
91:b4:0c:cb:22:3c:69:44:f3:dc:bb:19:a6:f7:bd:73:b5:b2:
35:92:dc:f7:35:cd:ba:9e:74:d4:90:ac:27:e8:e9:59:5b:50:
8b:6d:cc:f3:fd:44:f1:79:ee:f1:d5:a3:40:11:f6:61:db:d1:
c9:62:af:6a:fd:86:a7:db:ee:51:2b:bd:c4:6e:0f:c0:cc:38:
a5:4f:8b:28:86:89:22:3e:83:0b:f1:e8:64:2e:29:83:92:be:
17:6c:e4:f3:d2:22:5f:eb:cb:4f:b1:28:f2:c6:61:24:70:4c:
56:c1:70:65:f1:37:93:35:67:ca:be:90:80:9a:7a:af:1d:b0:
54:58:99:ec:a7:81:e6:0c:4d:fd:6d:75:89:6b:44:42:9d:6d:
92:59:72:23:92:b5:95:4c:c0:55:35:b1:ba:02:7c:da:9d:f8:
8e:28:d0:74:a6:1a:d1:39:63:3a:5c:98:ca:08:90:81:10:84:
c7:71:f9:e1:3d:6b:ac:67:70:7e:c5:f0:1b:b9:a3:2c:6c:23:
0e:3f:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org