Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dhJyzQGVyQ24Rkf7yhBSZnSjno0.roa
File: dhJyzQGVyQ24Rkf7yhBSZnSjno0.roa (raw, json)
Hash identifier: K8JVOUnYSQTwujf3/QeYGU1U21pDY4Wqw+Sll3dazks=
Subject key identifier: 76:12:72:CD:01:95:C9:0D:B8:46:47:FB:CA:10:52:66:74:A3:9E:8D
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0186CAE815FC930DC3B1CF08D3F97A16F705
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dhJyzQGVyQ24Rkf7yhBSZnSjno0.roa
Signing time: Fri 10 Mar 2023 09:44:12 +0000
ROA not before: Fri 10 Mar 2023 09:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34501
IP address blocks: 194.105.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:e8:15:fc:93:0d:c3:b1:cf:08:d3:f9:7a:16:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Mar 10 09:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=761272cd0195c90db84647fbca10526674a39e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:ea:76:31:7a:71:25:2e:63:37:b6:50:53:
da:06:1a:e8:b8:6d:e1:d0:b6:5d:5e:bd:a1:51:3b:
2d:1e:6e:aa:79:df:5b:2a:94:e1:f3:2b:b5:f5:b0:
49:18:50:d7:5a:0b:ac:a2:31:8f:77:db:f7:63:76:
82:46:b8:d1:3e:db:ea:2e:94:1e:bc:cc:8a:e7:7d:
46:3c:0d:54:bb:3e:8b:b5:ab:17:d0:30:39:31:fd:
2a:13:03:82:54:05:6c:a2:25:57:a0:0b:45:4c:6f:
5d:1d:95:21:87:09:8a:c9:7b:5d:07:24:20:8a:b0:
c7:dc:3f:f0:26:e9:ef:5e:55:20:ea:30:54:d8:07:
5c:78:b4:2b:ef:67:f9:7b:13:3a:95:68:86:e8:3e:
0d:5f:0d:16:ad:2f:56:6c:ab:ab:1e:73:98:53:6e:
35:91:60:e2:f1:e1:6b:74:2d:96:26:2e:48:40:8f:
37:d9:eb:a2:ac:f2:3d:e3:b0:6f:1e:eb:1d:f9:a8:
85:b0:04:07:11:c4:82:cb:bc:3f:0a:80:9a:4c:06:
38:b6:16:89:8f:ff:65:ab:c3:b2:dd:c2:87:d7:40:
ec:f8:47:50:76:cf:91:80:f5:c6:1c:ed:1e:1a:d1:
81:d6:8b:55:fd:aa:60:d6:4a:4c:ab:c7:a3:e2:bd:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:72:CD:01:95:C9:0D:B8:46:47:FB:CA:10:52:66:74:A3:9E:8D
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dhJyzQGVyQ24Rkf7yhBSZnSjno0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.142.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c7:4d:a4:e0:9e:b2:26:a5:97:b9:28:06:0f:cc:c5:5b:f3:
27:c7:2f:08:49:ee:44:37:2f:bf:fe:ad:4f:27:3a:e0:68:db:
e5:a6:bf:93:09:ee:66:be:20:87:5b:13:3b:09:24:28:11:b9:
1d:1d:bb:21:17:9f:4c:4a:5e:ad:51:fc:9e:f8:7b:6c:c8:38:
3f:a3:55:94:76:2a:3d:a2:25:71:ea:19:58:9f:ed:62:cb:a0:
90:98:d9:65:e9:34:32:41:4f:e9:48:77:5b:75:f8:1e:d4:9b:
be:b3:51:32:26:8e:12:61:2e:56:de:85:ee:80:6d:38:dd:e0:
76:79:91:61:1c:0e:cc:3d:db:b5:76:ea:f2:11:ab:bb:1b:c0:
d2:a3:93:76:20:2a:6f:fb:98:4d:a7:4a:6b:72:93:f1:87:c5:
26:62:a8:f3:b4:f7:1a:44:69:08:b1:d5:42:5a:92:8a:84:32:
7d:73:c3:93:30:22:c0:2d:03:c0:1f:53:aa:d2:93:ae:16:e5:
0e:2e:46:85:4d:d8:15:5a:b0:9f:e5:36:17:40:12:07:94:04:
36:16:5c:96:25:bc:4e:84:58:6b:cc:37:04:37:85:0b:08:b7:
a6:7c:1b:ea:17:fd:da:a6:f3:f0:92:f3:ac:06:75:6a:87:17:
8e:49:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:43 2024 by rpki-client on console-ams.rpki-client.org