Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/txFxkul6OQBc6bYRs2NO6iex7rs.roa
File: txFxkul6OQBc6bYRs2NO6iex7rs.roa (raw, json)
Hash identifier: Yg5yu7PnfLZm6H7UrdhSjm4jw67xfyLDFYzjxpl3V/o=
Subject key identifier: B7:11:71:92:E9:7A:39:00:5C:E9:B6:11:B3:63:4E:EA:27:B1:EE:BB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018C96B7D52056607DFACC85055E8A64267F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/txFxkul6OQBc6bYRs2NO6iex7rs.roa
Signing time: Sat 23 Dec 2023 12:47:59 +0000
ROA not before: Sat 23 Dec 2023 12:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400687
IP address blocks: 194.76.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:b7:d5:20:56:60:7d:fa:cc:85:05:5e:8a:64:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 23 12:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7117192e97a39005ce9b611b3634eea27b1eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:f4:b1:8e:c1:e2:b8:79:7e:1c:bd:63:e8:
88:80:4a:ca:05:7e:c8:2e:f0:74:18:6e:a5:c6:fe:
33:89:9d:d4:59:d9:54:b0:ec:47:e2:bd:e9:a2:1d:
f9:6d:45:f3:2e:dd:31:e7:99:48:86:9b:78:bb:51:
7b:ad:df:3b:0a:f3:e7:23:f4:63:26:d1:5f:6d:8b:
23:50:f9:11:6a:58:33:94:05:3a:94:ff:e6:41:b4:
74:c4:6a:4d:7a:eb:b9:58:24:f4:9c:22:da:01:27:
fe:73:db:e8:d3:d0:75:7d:8f:46:4f:44:56:94:5e:
86:dc:38:6e:b5:c2:1e:a9:f6:d3:a3:d7:f0:dc:09:
c3:08:7c:1c:4e:6b:ea:c7:13:54:ab:aa:3a:7f:7f:
f4:a2:29:6b:ff:a0:94:aa:83:84:9c:55:65:0c:ba:
a3:fd:d7:df:50:2f:a8:43:d1:4f:26:9a:f8:90:96:
4c:c6:32:be:ca:72:82:c1:32:0a:60:ab:9a:03:35:
4e:6a:94:e9:0e:b2:79:44:2b:f6:a7:0a:2e:8a:ba:
8d:4d:91:5c:b3:8c:e8:bc:89:dc:3b:c7:5c:3c:3c:
31:1c:5f:b4:3f:d9:09:1b:f9:05:0a:86:2a:65:ce:
36:d8:98:cd:c7:b6:00:d8:30:85:e9:79:7c:a2:ae:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:71:92:E9:7A:39:00:5C:E9:B6:11:B3:63:4E:EA:27:B1:EE:BB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/txFxkul6OQBc6bYRs2NO6iex7rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:53:d2:d6:a1:2a:f3:ad:23:a3:93:6e:69:b6:29:f7:89:88:
7c:52:8f:ef:0a:5f:be:79:18:1a:54:97:2c:5b:d0:45:98:85:
4f:d2:c3:19:5f:ba:2b:e9:e0:51:49:85:69:ea:90:3b:67:ff:
4a:90:7f:ca:40:64:cf:73:f5:e2:09:c6:72:c6:79:b4:91:bf:
86:1b:ff:81:64:2d:6b:75:e2:33:13:5c:65:ae:67:aa:62:0f:
7f:fb:9b:0b:5c:58:92:78:88:24:26:ea:68:25:29:d3:bd:5f:
cd:c9:44:61:7d:b7:85:68:4c:e9:d1:58:ec:ba:92:c9:aa:c9:
5c:11:93:c5:45:ea:5d:63:4d:f7:ed:cf:b0:35:28:25:be:35:
8b:f5:60:8f:0c:89:06:93:26:ae:d2:72:90:2a:08:37:dd:95:
2a:41:65:f3:3e:cc:b6:88:a8:c0:6b:fa:65:c6:1f:d3:dd:38:
92:42:fd:6f:a5:fc:2c:fd:a9:19:d8:39:97:ba:a9:44:91:51:
84:da:7f:19:20:d9:55:8b:a7:67:ec:d7:ab:51:c4:9f:b4:04:
32:89:1c:22:a6:56:3b:b8:66:ec:a1:4c:17:1a:fd:72:11:b3:
56:bc:67:12:91:ec:d6:b4:31:8c:45:b4:1a:ad:f2:68:e8:d0:
8d:70:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org