Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/vD0H6X3chERfPno0j5PdflSU_gc.roa
File: vD0H6X3chERfPno0j5PdflSU_gc.roa (raw, json)
Hash identifier: dcY2W9Vyf68Gzt8Yw4qsFcK/yADPHS7kxzPqZIQbVkQ=
Subject key identifier: BC:3D:07:E9:7D:DC:84:44:5F:3E:7A:34:8F:93:DD:7E:54:94:FE:07
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 018CC56E05D88FA526384DD6A22B665DD313
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/vD0H6X3chERfPno0j5PdflSU_gc.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206546
IP address blocks: 194.0.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:05:d8:8f:a5:26:38:4d:d6:a2:2b:66:5d:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3d07e97ddc84445f3e7a348f93dd7e5494fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:62:6d:de:28:c0:70:69:23:da:d3:38:85:
cd:a8:a0:97:86:08:12:92:7e:31:f7:e8:3d:cc:96:
3a:6b:f1:13:1a:fd:5e:f4:2c:6f:54:bd:a5:1f:03:
08:ca:fa:47:45:48:72:f1:06:98:ea:85:72:c3:e6:
9f:68:06:a2:92:aa:e8:49:c7:2a:7e:01:0a:68:d4:
c6:cd:98:d3:45:f2:35:ab:11:43:93:7f:87:5e:c4:
b6:18:50:a6:ef:0d:a8:37:9c:4c:d5:f8:db:93:7e:
c2:78:e3:71:e4:98:45:2d:0a:f3:68:72:e5:ee:b8:
b7:d9:81:f9:5f:f1:44:fd:af:39:ab:d8:96:65:94:
f2:74:b4:87:5f:0a:31:f3:b0:ca:e5:93:ac:36:23:
10:24:2e:ae:5c:2e:04:4e:91:bc:c2:3a:49:f3:cc:
58:8b:40:86:dc:44:d1:59:6b:a3:7b:ea:89:6d:45:
16:93:3e:66:d5:bb:63:57:55:8d:90:90:24:fd:ff:
d5:ea:da:d4:e8:e5:cd:7c:99:18:02:27:72:e8:ca:
01:9e:17:d2:29:e9:a6:0b:85:96:5c:2a:b5:72:e3:
2a:17:d6:0a:b5:92:45:ea:60:a3:57:13:1d:0f:74:
bd:91:f4:ed:2d:7a:67:57:62:12:1d:d6:a4:d0:7b:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:07:E9:7D:DC:84:44:5F:3E:7A:34:8F:93:DD:7E:54:94:FE:07
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/vD0H6X3chERfPno0j5PdflSU_gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:3e:3d:41:ec:b7:80:1e:f3:1c:ee:fd:ae:a9:b5:a8:63:
16:e4:a5:a0:90:66:52:f2:67:d8:c3:ef:f9:b8:75:92:23:f2:
0b:c9:0c:e6:ab:49:73:8a:3d:36:61:b8:1f:09:c6:d3:84:ad:
86:9d:2f:72:d9:6a:65:25:4c:f5:df:da:70:8d:0e:b3:ba:3f:
1b:ad:4b:85:06:0a:ba:a6:4f:c0:02:b6:54:39:35:3d:ec:80:
38:81:a0:21:c4:9b:0b:4a:03:6c:de:cd:23:98:a9:ee:2e:54:
3b:f9:cf:ae:be:e7:aa:45:dc:cf:ca:fb:69:7d:f6:9b:e8:04:
0f:3f:4a:f0:e0:8a:d8:d2:22:b1:da:55:79:74:d1:7c:04:9f:
19:b9:cf:ef:de:be:57:1f:aa:93:d1:21:aa:9b:7a:e7:76:b6:
bb:7c:a3:8b:f4:f4:6d:da:c3:95:7d:db:d6:27:bd:8c:94:24:
8d:f8:ae:fc:9d:aa:87:ee:d8:26:ed:6f:bb:dc:e0:15:3f:93:
b5:43:79:54:4b:e9:dc:c0:86:ff:31:7c:22:48:26:d8:4c:5c:
9c:61:ff:f6:ae:0f:02:19:84:d7:bc:30:d6:32:d6:4b:5b:c3:
1a:9d:e1:ef:90:ea:2a:46:0a:37:01:4f:0d:e7:33:e2:62:ce:
e9:bb:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:47 2025 by rpki-client