Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/14MgO9Pjr2_4uUFWuyXqRGjHLLs.roa
File: 14MgO9Pjr2_4uUFWuyXqRGjHLLs.roa (raw, json)
Hash identifier: OXR47M+QiBAMGgnd1LTWOaMtk9thIW/f06psM7OK9HQ=
Subject key identifier: D7:83:20:3B:D3:E3:AF:6F:F8:B9:41:56:BB:25:EA:44:68:C7:2C:BB
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01865EBB484F8AED5B0DD08869F644A80D2A
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/14MgO9Pjr2_4uUFWuyXqRGjHLLs.roa
Signing time: Fri 17 Feb 2023 09:36:17 +0000
ROA not before: Fri 17 Feb 2023 09:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 194.36.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 17 Feb 2023 11:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:bb:48:4f:8a:ed:5b:0d:d0:88:69:f6:44:a8:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Feb 17 09:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d783203bd3e3af6ff8b94156bb25ea4468c72cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:82:bf:5c:ea:ae:a8:de:65:a6:f7:37:65:
42:77:63:4c:3a:2a:be:e7:3a:1a:50:94:ea:3e:20:
31:d9:c0:fc:2b:57:61:12:15:5a:61:73:8e:fc:7f:
e5:93:e0:8e:49:2a:35:d7:d2:45:0f:cc:54:f4:cc:
f6:31:82:62:a2:8a:b1:e9:56:67:5d:49:78:44:55:
f6:0d:1b:63:0f:35:81:df:de:30:de:85:c4:d6:f4:
f0:9f:c8:9b:7e:bf:6d:22:19:ea:0e:a5:35:14:a0:
ac:b8:04:6a:a8:86:47:91:5a:7c:a8:01:b5:a3:c8:
ae:48:cf:4a:0e:2f:66:97:4e:98:85:3f:40:dd:63:
d3:49:a8:46:b4:f8:2e:3d:f7:a8:17:77:24:8b:6c:
f3:e2:24:da:ee:66:bf:76:6d:d2:09:4d:5b:8a:4c:
51:f5:3d:29:1b:20:09:99:70:a9:c0:43:3b:78:e5:
64:ec:dd:56:c3:28:d9:d7:c8:af:00:5b:99:00:d2:
68:cb:d6:d4:af:13:4f:6a:ee:b1:c1:c9:06:97:b9:
23:35:14:b0:c0:c6:3f:45:ae:e8:7c:8a:2c:46:ef:
a8:7c:ab:ae:71:61:e3:58:41:cd:5a:ae:64:eb:85:
2e:99:97:dd:60:bd:52:c2:96:87:8f:a7:e0:77:1b:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:20:3B:D3:E3:AF:6F:F8:B9:41:56:BB:25:EA:44:68:C7:2C:BB
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/14MgO9Pjr2_4uUFWuyXqRGjHLLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1d:99:64:cc:89:3f:52:8e:bd:a0:67:cd:3c:3a:11:a0:c7:
0b:2d:93:a5:96:50:c3:12:73:84:d9:99:6c:c2:e1:53:75:09:
64:35:68:78:60:49:02:35:75:f1:61:17:ef:7a:b3:a3:81:dc:
bd:1c:30:38:e3:f6:f8:a5:1f:84:9f:da:1d:da:bd:ea:2e:c8:
93:b1:cc:f9:07:c9:62:df:91:2a:d7:41:8a:e3:2a:99:d7:0c:
b8:9d:3d:fa:9c:a2:6b:12:c3:f0:5a:09:67:d5:d7:69:0b:e1:
ce:71:26:6a:4b:8e:1f:9e:28:1c:66:f7:53:d6:35:ba:95:66:
76:d8:af:77:46:3c:f2:5e:24:59:39:e3:3d:6d:98:ff:ac:43:
ff:3b:90:c2:f2:dc:91:48:3d:75:82:16:fd:18:2a:9b:0f:77:
b6:19:5f:0c:7b:75:c4:da:50:24:af:d2:c7:9b:68:a9:5c:ac:
f9:74:35:b6:1f:35:5a:7c:5e:b3:0f:ad:e9:7d:6a:cc:9f:17:
88:9e:d5:81:53:e5:6b:47:79:c5:30:79:79:c4:01:73:89:ef:
cc:f1:17:fd:86:2d:87:84:6b:8d:6f:ba:09:72:9c:ea:ec:cb:
03:16:e2:ed:75:45:ea:b5:62:b7:00:d2:c1:f9:28:6f:dd:1a:
12:ef:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org