Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RDhW-YJosnQuyjh6z3b2-C72rAI.roa
File: RDhW-YJosnQuyjh6z3b2-C72rAI.roa (raw, json)
Hash identifier: XwGqJW1F+kLe3kmExj2fhuXR9GOg6uDPNegVk8SyrJo=
Subject key identifier: 44:38:56:F9:82:68:B2:74:2E:CA:38:7A:CF:76:F6:F8:2E:F6:AC:02
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D9CAACC7609D6CC355112FEA0DA049C71
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RDhW-YJosnQuyjh6z3b2-C72rAI.roa
Signing time: Mon 12 Feb 2024 09:34:15 +0000
ROA not before: Mon 12 Feb 2024 09:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 02:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:aa:cc:76:09:d6:cc:35:51:12:fe:a0:da:04:9c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 09:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=443856f98268b2742eca387acf76f6f82ef6ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:0e:1b:14:4f:31:a8:b0:ff:69:09:68:74:
d6:85:3b:2c:78:b3:c2:b1:e3:f0:60:25:a8:49:5f:
3a:93:c2:14:fe:c5:64:52:90:2b:0b:3b:3d:6f:7b:
89:5d:dd:04:89:f5:bf:cc:54:b7:eb:3d:0d:d3:71:
ef:0c:78:9d:e9:8c:c2:f7:93:ef:bf:5a:d3:62:e4:
aa:53:2a:d0:98:d5:0a:e1:e8:cb:42:54:72:df:b2:
53:77:65:d5:5e:8f:23:6d:66:01:28:bd:90:91:cb:
b3:9b:66:bb:a5:ce:ca:1f:d6:f8:8a:7f:be:a0:69:
e7:d3:28:5e:7c:ba:f9:9c:cc:50:5c:71:6f:d2:87:
ce:8b:db:70:a6:c0:c3:5d:33:11:79:61:47:96:11:
f0:2a:74:7f:51:26:4e:39:e0:1d:b5:9b:28:fe:68:
91:8e:3d:90:e2:f4:8e:a5:7f:5e:b1:1b:46:94:44:
b0:4e:6e:db:e0:1d:0c:24:58:37:9d:c3:e4:1d:bf:
0c:35:9a:3d:8d:02:5a:95:4e:7f:7d:e4:7a:07:55:
47:11:30:e7:b3:3c:4a:0d:d7:2d:c5:a2:17:1f:98:
42:a7:9a:e6:8e:57:8d:7b:58:df:d2:b3:a0:f0:56:
8c:d2:9d:78:d6:35:45:f0:78:06:d9:58:19:fc:8a:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:56:F9:82:68:B2:74:2E:CA:38:7A:CF:76:F6:F8:2E:F6:AC:02
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RDhW-YJosnQuyjh6z3b2-C72rAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
08:93:8d:35:e2:ba:d2:36:5b:71:86:9d:62:13:25:b4:24:06:
3c:1d:b9:0e:c9:8a:db:46:e7:f8:89:48:a5:ce:88:62:87:6a:
27:76:36:29:10:bd:f7:cb:ec:a8:59:66:66:f5:f0:24:8a:00:
1a:bd:cb:20:61:fd:ce:15:00:fb:67:e4:29:c3:f9:8b:ae:7b:
5b:5e:9f:f9:ae:a4:6c:cc:b2:ee:f0:60:78:e9:4f:c2:4a:bf:
1a:5e:cc:ed:de:24:c9:30:a4:0a:9f:bf:86:fa:a5:9e:2f:f8:
03:cf:71:d0:26:1a:c6:5b:cf:8e:f1:3f:6b:42:8f:0c:10:8e:
34:83:03:ba:a1:af:8a:04:d8:7f:e4:89:6a:af:32:b8:78:12:
14:21:72:ab:35:d0:56:4e:f6:e8:23:78:38:0a:fb:63:d7:a5:
50:f4:22:72:4a:d5:0c:ff:6a:eb:45:ab:59:18:6d:ef:34:36:
41:8f:db:a6:7c:ec:19:28:7c:c2:31:23:31:fb:6e:39:4d:99:
ff:f2:70:a1:c0:21:de:de:4e:6f:ce:31:35:ed:f9:95:1a:78:
3b:4c:a4:98:3a:99:99:8c:a4:53:cf:ac:f4:1e:73:5f:15:2d:
6e:c8:37:3f:35:6b:c0:b8:ab:c7:96:37:f6:a7:61:f6:77:20:
99:f4:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:38 2025 by rpki-client