Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/9aOR45dGk2WS146uMA2mPQ7AKLA.roa
File: 9aOR45dGk2WS146uMA2mPQ7AKLA.roa (raw, json)
Hash identifier: N4WiYLR2BPCIahaQOQziDL6VEmywe7pYBq7EhXJqSy4=
Subject key identifier: F5:A3:91:E3:97:46:93:65:92:D7:8E:AE:30:0D:A6:3D:0E:C0:28:B0
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01856CE611E0F72AA14CB2C0BB728AF0D98B
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/9aOR45dGk2WS146uMA2mPQ7AKLA.roa
Signing time: Sun 01 Jan 2023 10:34:55 +0000
ROA not before: Sun 01 Jan 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 194.34.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:11:e0:f7:2a:a1:4c:b2:c0:bb:72:8a:f0:d9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5a391e39746936592d78eae300da63d0ec028b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:3c:ab:7a:24:3c:30:02:ce:7a:f0:32:b4:
73:ae:00:26:c4:96:ec:bd:8d:4c:23:f9:19:fa:7c:
83:a7:93:7e:47:a2:27:a3:ee:63:13:0b:de:fb:13:
17:89:da:4d:3c:06:53:3c:1c:20:23:3f:27:2e:71:
7b:d7:4a:67:17:2c:be:cd:47:e8:a1:4c:3f:27:3e:
a4:e7:7d:20:58:93:38:5c:9c:47:d2:3e:9e:a2:85:
77:4c:bf:9a:6b:8b:b2:79:7f:4f:6b:de:89:0a:98:
ff:7d:c0:7d:19:c9:4e:4b:7e:c8:c9:aa:49:b7:8f:
ff:f8:de:e1:49:a0:8c:1c:0e:dc:5a:9c:88:7e:f6:
c5:b1:75:c1:1d:3e:c5:e9:7b:27:21:df:86:bf:9e:
11:85:d6:79:ad:36:9c:4d:1a:d7:cd:04:5b:cd:eb:
8d:fa:c2:88:5b:11:9e:61:13:e3:ca:57:95:4a:6a:
b4:90:ea:66:1c:de:65:ea:ee:c9:0a:df:25:a7:28:
fc:5f:15:ed:5e:22:f7:59:ad:45:35:96:d5:27:bf:
5e:d0:98:7b:c5:10:97:00:de:77:a9:a9:32:a0:05:
5a:77:f3:43:80:96:11:7f:96:14:98:f7:02:fb:7d:
22:68:dd:3a:79:ba:71:87:31:7a:92:8a:b9:13:76:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:91:E3:97:46:93:65:92:D7:8E:AE:30:0D:A6:3D:0E:C0:28:B0
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/9aOR45dGk2WS146uMA2mPQ7AKLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.105.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:98:46:12:fd:1a:43:e9:23:82:3d:73:5e:e4:dc:b6:34:
24:a1:ab:c1:92:1c:60:11:99:28:f1:42:07:f7:7e:76:61:4b:
c2:4e:e0:1d:0b:5e:93:5a:c1:5e:ef:eb:df:05:1c:c8:78:7c:
b3:7c:46:dd:7e:0a:e2:2b:5e:58:1d:fe:0f:b1:e8:7d:c4:ca:
1e:11:f2:48:19:ad:a0:6c:2d:7c:39:cd:f2:66:82:8f:b1:ac:
f2:e6:37:2a:b8:8b:74:cf:62:54:ce:cc:b5:d1:eb:20:90:e7:
5e:68:c6:28:d5:e6:5e:4b:8f:8e:93:85:3f:f3:58:f3:c0:c8:
9d:f2:80:a6:44:9d:c6:50:03:ab:bc:4b:51:47:1a:f7:d4:20:
34:9c:81:e0:7b:0f:97:70:0b:ec:46:28:da:f7:42:d7:0a:d5:
e9:5c:81:4a:9f:39:1d:98:12:2d:b0:8c:e8:6e:2d:61:6f:04:
0d:ca:85:2b:bb:e9:27:3e:da:29:81:53:41:51:12:2e:42:f8:
a3:01:2b:76:e7:41:4e:7d:5e:18:ff:cb:ca:9e:ba:99:fc:d8:
cc:89:93:c0:eb:35:14:e5:ea:98:65:fb:b3:e3:e1:12:8c:5c:
09:14:79:06:33:94:59:d3:b7:26:9d:d0:af:57:ff:ca:8b:1d:
17:a3:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org