Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DZBHuC8XsqJHNfQanioAu8MrXAY.roa
File: DZBHuC8XsqJHNfQanioAu8MrXAY.roa (raw, json)
Hash identifier: ISJIanHhx6SnTpRXBCo/mHenypqHJbhrahR/wP1TqdU=
Subject key identifier: 0D:90:47:B8:2F:17:B2:A2:47:35:F4:1A:9E:2A:00:BB:C3:2B:5C:06
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E85C2967F5995CE34BAD389D818B5129F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DZBHuC8XsqJHNfQanioAu8MrXAY.roa
Signing time: Thu 28 Mar 2024 15:51:45 +0000
ROA not before: Thu 28 Mar 2024 15:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 194.59.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 13:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:c2:96:7f:59:95:ce:34:ba:d3:89:d8:18:b5:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 28 15:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d9047b82f17b2a24735f41a9e2a00bbc32b5c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:22:b8:0a:24:94:36:07:0e:6b:10:ef:7e:
5b:61:e0:02:9b:53:f9:0b:54:2a:9b:a5:96:61:c1:
17:52:ba:8b:ea:f7:f9:d6:76:e8:c6:2f:08:5f:4b:
aa:5f:ef:dd:d4:66:4c:da:b7:3f:77:cb:52:0a:f0:
29:1d:0d:fc:b5:30:c4:58:a5:c4:12:4c:1e:5c:7a:
77:fc:e5:83:b8:9f:aa:4a:26:d9:f7:47:85:9f:f6:
22:34:6b:97:0c:cd:93:36:c5:26:be:48:68:22:f5:
b6:13:83:47:d0:c0:24:d8:98:0b:ce:44:b2:c6:09:
16:08:9a:ec:02:fa:03:fd:78:98:31:a2:c4:65:4b:
e4:29:1e:a7:43:45:04:89:d3:23:44:ca:75:09:40:
76:60:22:5c:e6:6b:ec:98:20:7c:fe:59:6c:9a:be:
5f:37:bd:49:78:49:fd:2c:09:5f:83:3f:46:cc:5c:
c1:c0:cd:88:b3:75:8f:4f:4a:f1:82:dd:f1:20:a9:
7e:61:69:c4:00:84:b2:b1:2e:4a:1b:dd:c6:fc:7a:
cc:87:2c:af:be:11:49:a5:bf:ba:3e:f6:c4:b3:6d:
ba:62:2b:88:0f:4e:39:ca:6c:20:98:0b:c5:bc:0f:
f3:e7:e7:49:d3:cb:2f:74:45:28:0a:c4:63:df:3c:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:47:B8:2F:17:B2:A2:47:35:F4:1A:9E:2A:00:BB:C3:2B:5C:06
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DZBHuC8XsqJHNfQanioAu8MrXAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bf:5a:f0:19:f2:ad:61:4f:35:eb:20:dc:5e:ed:38:a8:2d:
eb:33:f1:f3:07:41:f9:50:e4:29:5b:93:c9:0a:da:c2:46:7b:
14:4d:7e:2a:ce:a9:16:82:97:3b:48:b4:87:56:2d:12:69:1b:
da:6e:be:a0:a2:c1:b6:af:cc:6e:a4:59:d6:56:1b:a5:73:44:
ac:4c:05:5e:66:80:5e:ad:5b:c3:8f:f0:a7:bf:9a:eb:04:0a:
bb:be:04:00:64:74:b1:e5:11:ea:b2:53:73:26:91:3d:f5:b6:
3f:95:f5:0f:42:ac:6e:56:22:bb:48:a8:b0:cb:b7:2c:f9:1e:
d3:4d:61:08:50:ec:46:0a:89:c2:7e:69:2d:de:d5:44:c1:89:
c7:2c:e9:c1:75:94:a2:ed:65:46:c0:05:e1:ba:23:88:62:64:
97:b8:74:d4:63:0d:d9:4f:3b:f0:ce:f2:57:08:00:86:ff:1d:
c8:08:f8:66:59:f7:f5:a8:04:15:70:ac:15:e5:72:92:06:c5:
a2:49:68:26:60:f7:81:55:8c:d0:b4:0a:e4:de:81:f0:52:49:
35:e8:74:26:ad:b2:f0:3c:33:62:0f:08:22:1a:00:77:8e:36:
a7:6b:b6:ca:eb:63:c1:a1:8f:8b:f4:22:86:91:92:65:73:b1:
9f:d7:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 17:38:55 2024 by rpki-client on console-ams.rpki-client.org