Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/rcmk17cDfRwwuLyPCvNbTH0wBow.roa
File: rcmk17cDfRwwuLyPCvNbTH0wBow.roa (raw, json)
Hash identifier: 3R/87u5EgUO4Rtla3FjTME8efyJj4pAH1zciG8hQIjs=
Subject key identifier: AD:C9:A4:D7:B7:03:7D:1C:30:B8:BC:8F:0A:F3:5B:4C:7D:30:06:8C
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 01857355DA6B1EC4E9E0C29FB4F6672F7DBE
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/rcmk17cDfRwwuLyPCvNbTH0wBow.roa
Signing time: Mon 02 Jan 2023 16:34:44 +0000
ROA not before: Mon 02 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25354
IP address blocks: 194.69.254.0/24 maxlen: 24
194.0.34.0/24 maxlen: 24
194.0.33.0/24 maxlen: 24
2001:678:40::/48 maxlen: 48
2001:67c:21cc::/48 maxlen: 48
2001:678:44::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:da:6b:1e:c4:e9:e0:c2:9f:b4:f6:67:2f:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jan 2 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adc9a4d7b7037d1c30b8bc8f0af35b4c7d30068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:19:fb:3b:c5:16:a2:95:47:a7:73:01:a7:
4b:30:5a:fc:83:62:f9:5d:b2:86:01:70:00:04:86:
11:82:94:00:37:a9:ab:9a:bb:66:ae:bc:c2:40:14:
81:67:7b:1c:17:55:7d:53:c4:6d:78:9a:c3:f9:01:
75:b7:2c:32:00:8a:28:a2:5f:d0:29:04:5b:8e:88:
54:42:90:57:e7:75:51:41:5d:3d:fb:80:5b:ac:96:
c1:91:17:84:44:68:f9:58:22:6d:25:90:93:46:b0:
f9:83:40:41:6c:0e:6d:38:d6:82:1c:16:51:8b:ed:
27:e6:8e:60:f3:36:30:81:56:ba:e3:de:0a:e2:5a:
ff:5e:ba:6c:ff:df:33:ad:de:e4:58:83:f0:99:d1:
17:f2:c1:bc:ee:8b:32:c4:20:62:1f:fe:cb:54:7c:
26:e2:33:f1:ff:2f:f8:dc:2e:c4:a5:c6:68:32:d4:
f5:cb:17:46:52:b7:3f:1a:11:1d:03:37:ce:5f:6b:
e4:db:b5:5d:a1:7b:54:07:65:d3:0d:76:57:8c:0b:
9d:44:57:81:73:16:d3:da:34:cd:01:a1:a7:44:31:
6c:b8:23:20:65:fb:73:28:e1:a9:10:af:d8:bc:84:
c0:68:e5:94:09:d2:88:08:4f:01:83:8e:b0:e8:95:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:A4:D7:B7:03:7D:1C:30:B8:BC:8F:0A:F3:5B:4C:7D:30:06:8C
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/rcmk17cDfRwwuLyPCvNbTH0wBow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.33.0-194.0.34.255
194.69.254.0/24
IPv6:
2001:678:40::/48
2001:678:44::/48
2001:67c:21cc::/48
Signature Algorithm: sha256WithRSAEncryption
5a:19:43:b2:19:4a:e7:9c:0e:8d:10:dd:6b:26:db:9a:72:09:
d4:8b:dc:de:3e:0e:ff:4b:41:36:7f:14:e1:d0:a3:54:6a:19:
73:f9:1f:80:f8:eb:16:e8:a9:8f:1b:06:5e:8a:1c:ff:62:54:
d5:34:9d:45:ea:dd:50:f4:b0:8c:a8:42:99:61:d0:31:82:e3:
a3:94:ba:f2:64:1c:e6:7c:19:4d:34:b5:49:8e:bd:26:8a:4e:
c1:04:cf:5a:06:d6:3f:0c:ab:d5:cc:f2:d4:38:36:aa:53:b6:
4f:3c:57:40:45:b5:6f:09:a2:ba:cc:38:2b:1e:a8:45:4b:f3:
75:87:dc:63:de:69:59:a8:a4:67:e9:82:a8:6c:a5:79:1e:03:
ca:82:30:26:4a:92:2a:88:94:b9:e9:f0:9d:98:62:41:32:ef:
2b:fa:60:63:09:f9:39:11:12:30:94:bb:19:93:31:b6:64:28:
3f:ec:20:f7:db:72:12:f9:e7:25:3a:3d:91:43:8e:23:a1:78:
00:36:cf:cf:78:73:02:1d:4c:c2:d5:c3:5b:6d:f9:33:09:5c:
b6:91:03:68:a5:77:8e:f3:84:f0:b1:98:05:6b:61:50:be:3d:
a9:d2:b8:24:c3:b8:d4:86:d9:db:21:6b:0f:3a:b7:23:90:95:
c1:f2:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org