Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/aVkUet5J2ex6lcWBX0Y9X0TzlJg.roa
File: aVkUet5J2ex6lcWBX0Y9X0TzlJg.roa (raw, json)
Hash identifier: RJ3pAcaREVdDjU3JuLOXsfz7hURKEE37+3Kqyb07/as=
Subject key identifier: 69:59:14:7A:DE:49:D9:EC:7A:95:C5:81:5F:46:3D:5F:44:F3:94:98
Certificate issuer: /CN=32559e07d6388dd2af753565e9253d682f93ebde
Certificate serial: 01856B9349FA471AA24182CD67054C3E3091
Authority key identifier: 32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/aVkUet5J2ex6lcWBX0Y9X0TzlJg.roa
Signing time: Sun 01 Jan 2023 04:24:52 +0000
ROA not before: Sun 01 Jan 2023 04:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 194.50.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:49:fa:47:1a:a2:41:82:cd:67:05:4c:3e:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32559e07d6388dd2af753565e9253d682f93ebde
Validity
Not Before: Jan 1 04:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6959147ade49d9ec7a95c5815f463d5f44f39498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:7c:26:37:ae:f5:b1:ae:45:4b:4d:9e:1d:
7e:f3:34:c8:71:1b:22:52:88:71:98:a9:0e:1a:34:
49:c9:71:06:bc:91:9e:05:3f:66:0e:e8:35:c7:1b:
82:d1:8e:a6:bb:33:15:67:90:dd:bb:d1:90:07:be:
53:0c:c5:43:83:2e:d9:79:7a:1b:6c:64:e8:31:0e:
ff:d1:46:1c:82:06:fa:64:bf:27:fe:9d:65:1b:b2:
67:de:72:6a:87:15:8d:91:65:06:ff:57:18:8a:61:
8f:31:95:1e:4c:21:50:b0:12:81:bf:8f:44:b7:47:
8f:f9:3f:90:96:4d:ea:d1:d1:43:a5:fd:27:b4:f5:
a0:39:a3:74:06:06:35:e5:ab:53:0c:da:da:35:8e:
4b:26:57:7f:8b:f0:91:16:d7:f0:c3:45:b5:9a:90:
1e:bc:c2:6a:3e:42:42:5e:ba:8e:89:74:57:5d:23:
e5:0f:26:1b:b0:7c:92:f9:14:4e:fc:cf:9d:33:a5:
c2:6b:09:fa:b5:10:4d:0e:ce:1f:79:72:ba:35:d0:
ad:26:04:93:db:50:8f:2f:61:71:de:53:2b:a8:bd:
fc:2d:03:38:88:76:0e:b0:95:fe:ae:f7:25:49:14:
2c:10:18:6c:66:09:91:cc:ac:ab:de:07:33:de:ea:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:59:14:7A:DE:49:D9:EC:7A:95:C5:81:5F:46:3D:5F:44:F3:94:98
X509v3 Authority Key Identifier:
keyid:32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/aVkUet5J2ex6lcWBX0Y9X0TzlJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.248.0/23
Signature Algorithm: sha256WithRSAEncryption
49:d1:00:74:23:f2:1f:09:f7:19:59:80:fc:57:5f:a3:55:84:
79:9e:ca:ac:70:f8:4b:aa:06:2b:9a:fe:da:f5:58:36:df:0c:
c9:2f:4d:ce:cd:d5:29:26:6f:39:56:a5:42:80:81:f4:c3:d8:
ce:24:bb:e5:e1:77:6b:f7:8f:97:73:67:ce:fe:e2:3b:e1:c3:
30:d6:e6:32:ce:84:12:5a:9f:ea:34:61:d7:76:61:bd:26:c3:
b5:f0:13:f3:e0:53:3b:ba:0d:7f:6d:c0:37:cc:a2:aa:4e:be:
2a:40:c2:33:cf:d7:2c:70:54:58:a1:99:0d:8b:c6:2c:b9:85:
8b:4d:bd:92:65:a9:81:13:63:74:11:5d:7c:b3:79:4a:e1:9a:
bb:33:16:30:86:b4:73:67:11:44:1c:ea:48:2b:5c:2d:19:06:
02:b0:56:39:d1:11:8f:f7:73:bf:1b:9f:0f:c7:43:9e:df:f4:
47:9e:4f:00:86:0e:84:05:c5:69:28:d3:18:60:cf:c1:45:75:
79:ca:22:5b:a7:28:f1:1b:7d:71:34:a6:9f:e0:4e:da:a8:fc:
b4:3d:41:92:d9:4a:c9:74:06:db:d7:94:70:7c:69:26:e8:df:
ae:ac:74:ff:ab:85:51:4d:f6:92:87:5c:9d:ce:16:ef:0f:eb:
0b:7c:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:27 2024 by rpki-client on console-ams.rpki-client.org