Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/teGM1yFd6ZGPVJa0ob_c0hyEfUg.roa
File: teGM1yFd6ZGPVJa0ob_c0hyEfUg.roa (raw, json)
Hash identifier: 9c6R0RONn8YT7z6undpMvl3l96YUrqsVFgMc0F9/8Uk=
Subject key identifier: B5:E1:8C:D7:21:5D:E9:91:8F:54:96:B4:A1:BF:DC:D2:1C:84:7D:48
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 018C24B9BCDCD91D6B9C32F2DBC279076212
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/teGM1yFd6ZGPVJa0ob_c0hyEfUg.roa
Signing time: Fri 01 Dec 2023 09:33:21 +0000
ROA not before: Fri 01 Dec 2023 09:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.56.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 01 Dec 2023 12:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:b9:bc:dc:d9:1d:6b:9c:32:f2:db:c2:79:07:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Dec 1 09:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e18cd7215de9918f5496b4a1bfdcd21c847d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:45:c5:8f:28:1c:12:32:11:de:02:53:86:
77:0f:a0:7f:c2:5a:b2:c5:ce:99:7c:3c:13:69:f7:
e0:d7:04:88:99:4b:c6:76:4b:78:d0:e1:63:ab:14:
75:85:8a:d3:09:2c:04:db:28:5f:ee:36:86:6b:bd:
65:2b:b6:6c:94:54:9f:27:09:d5:4e:5b:38:e5:ed:
db:91:ac:10:ee:cf:e8:57:bc:0f:1b:da:58:3a:37:
ef:ef:54:5c:9b:86:2a:14:64:4e:41:31:98:d8:5d:
52:58:93:4f:c1:fb:a8:81:04:ca:d6:d2:77:c3:15:
86:3a:2e:88:94:a9:31:71:a5:af:ad:fa:6d:d4:31:
1e:b7:b3:a4:6e:16:02:12:f6:35:53:d5:63:5d:9b:
b6:d2:55:85:fb:ce:47:44:31:94:92:e2:4c:d1:bc:
77:69:79:83:be:ca:3f:29:a7:16:69:ed:cc:00:c6:
a6:ec:a5:5d:43:3e:ef:4c:0d:ae:2e:bb:98:34:1b:
61:f9:5c:6a:1c:39:1f:75:88:fa:fc:bf:66:f1:92:
62:03:c6:02:14:d0:ef:b9:85:41:8f:de:1f:26:1c:
d9:e6:0f:5a:7b:a5:cb:90:77:18:50:4e:b2:4b:19:
df:98:24:69:29:44:9a:cf:a2:68:61:ad:10:2e:69:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:8C:D7:21:5D:E9:91:8F:54:96:B4:A1:BF:DC:D2:1C:84:7D:48
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/teGM1yFd6ZGPVJa0ob_c0hyEfUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
32:3f:23:8c:9a:9c:9e:24:1d:03:ba:d2:71:bf:3a:dc:39:ec:
ca:d2:f1:cb:86:d9:bf:a3:ab:b0:52:62:87:bf:44:01:c1:e1:
a5:9e:07:63:1c:1b:c4:57:ca:7b:4e:e8:d1:23:c7:60:ab:6d:
bd:d0:38:bc:28:63:9e:32:87:66:ad:a8:33:4f:67:c1:4c:cb:
df:f5:8f:61:3c:d1:fa:17:4f:53:1f:04:93:df:b2:72:47:9e:
de:67:2c:ff:04:5e:2c:07:27:89:9a:4f:17:d1:e2:1c:0a:33:
a1:1e:44:14:69:29:c3:dd:21:a0:11:36:52:18:6a:49:1c:73:
46:35:be:20:e4:53:cf:44:b8:97:9d:47:0c:f3:2c:56:41:8e:
b0:16:61:1c:c5:97:f4:d0:8e:c9:1b:b0:8b:ce:87:c0:0e:a1:
ce:55:c3:46:95:07:8e:24:95:24:0c:82:ec:15:34:26:18:b4:
ba:4d:9c:9e:a1:96:de:08:7b:8c:ab:bb:6c:e8:be:c6:1c:83:
d9:1b:d6:65:9a:fe:5c:f2:59:37:d1:56:c6:5d:dc:88:45:cd:
e5:b6:14:d4:2e:e0:66:8b:f5:49:e4:b1:90:0e:48:df:6a:1e:
32:fb:cd:bd:b9:b5:c9:38:37:d5:69:35:de:98:3d:06:6e:d1:
1f:c9:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:14 2024 by rpki-client on console-fra.rpki-client.org