Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/d4X-FSSaOg9DJhHDdlyfUcW-Bqk.roa
File: d4X-FSSaOg9DJhHDdlyfUcW-Bqk.roa (raw, json)
Hash identifier: 60RggNZmKDNveNMvDNJMAPC6j87GA85JRYxhbmr2n8k=
Subject key identifier: 77:85:FE:15:24:9A:3A:0F:43:26:11:C3:76:5C:9F:51:C5:BE:06:A9
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 018572BA66815161249A1B183F224F885424
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/d4X-FSSaOg9DJhHDdlyfUcW-Bqk.roa
Signing time: Mon 02 Jan 2023 13:44:56 +0000
ROA not before: Mon 02 Jan 2023 13:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42731
IP address blocks: 194.110.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:66:81:51:61:24:9a:1b:18:3f:22:4f:88:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Jan 2 13:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7785fe15249a3a0f432611c3765c9f51c5be06a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:61:fd:03:52:bc:a0:20:5e:8e:43:ab:18:
1c:40:c7:e7:aa:98:bd:16:37:3a:9a:a0:1a:cb:3e:
93:b2:a5:24:42:40:88:a7:75:b0:ba:1c:ab:42:72:
24:92:73:34:94:e1:03:06:26:33:21:19:c3:9e:e4:
c4:e3:a7:05:ec:37:09:37:19:6a:61:98:b7:ad:a1:
e4:52:45:4a:73:69:4c:84:31:24:cc:20:d3:17:96:
d9:3f:ba:31:4e:9b:2d:f8:d7:14:9b:53:df:90:f5:
3f:26:4f:b1:c4:2c:2c:c3:48:55:8a:da:c8:22:1a:
b3:54:bf:ec:06:b7:28:0a:db:24:de:d9:15:15:8b:
99:21:cb:6f:8f:43:9a:8c:00:b1:ac:d3:5f:3a:b5:
17:db:52:21:81:33:37:d3:53:96:9f:83:d7:40:07:
f4:96:14:86:c0:23:13:84:e8:a9:fb:1c:bf:c2:72:
cb:94:f9:4a:28:a1:a3:89:61:61:3a:4b:b6:84:0c:
08:bf:38:95:ec:45:4f:16:d1:cd:8a:45:3d:4d:25:
d0:d9:e8:76:38:6f:12:44:c9:89:a7:61:23:71:98:
55:04:a9:f9:dd:a6:c4:1d:fd:c3:8d:a2:16:84:77:
4a:56:d1:00:7b:5b:d3:a8:06:8e:1c:81:72:be:6c:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:FE:15:24:9A:3A:0F:43:26:11:C3:76:5C:9F:51:C5:BE:06:A9
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/d4X-FSSaOg9DJhHDdlyfUcW-Bqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ba:03:ce:00:c3:0e:5d:d5:18:fb:c8:35:5b:5f:ab:aa:45:
37:e3:3f:0d:f3:80:14:14:1b:58:73:f8:df:3b:a5:e1:e1:5e:
36:2e:51:37:7e:cf:09:f3:18:92:9d:f1:b0:c4:3c:82:17:e2:
b3:4b:6d:d4:64:08:64:2a:27:18:16:f8:91:52:4c:b5:9e:81:
37:ed:19:aa:7b:76:d2:e6:27:8f:4b:f9:11:56:1d:89:28:3b:
bb:01:d6:2a:84:39:0d:dc:f7:cb:95:5c:ef:2a:64:41:99:fe:
21:64:10:02:b2:62:da:5b:29:dd:e1:b9:b3:1d:ca:af:df:22:
ca:13:77:a2:db:f4:11:f7:a7:20:ee:17:a3:40:64:9d:7e:78:
af:fe:f9:08:06:80:54:44:ec:ca:eb:8b:b2:dd:7d:59:a7:e9:
f7:c9:fb:92:b5:6a:1e:db:32:82:c2:7e:e1:31:eb:b4:84:7a:
23:4d:82:f2:52:36:02:01:d3:41:3e:8f:91:8e:e6:b6:a6:24:
d3:d1:c3:af:85:fa:8c:dd:aa:64:bf:85:5f:50:a6:a6:04:64:
bd:d5:77:d6:4c:eb:2d:13:78:bd:b6:1b:3a:36:b7:c9:ae:b6:
ad:b5:ac:1e:50:6c:ad:56:32:d0:2e:5b:87:73:bf:16:0e:ce:
60:dd:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:36 2024 by rpki-client on console-ams.rpki-client.org