Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/j6Ck2F1MJ8RwaAnuH9NbPji64QQ.roa
File: j6Ck2F1MJ8RwaAnuH9NbPji64QQ.roa (raw, json)
Hash identifier: 5HAuUudMeY3nQG6mrmZ00VfNEDA8lK6JGFISACCCBqc=
Subject key identifier: 8F:A0:A4:D8:5D:4C:27:C4:70:68:09:EE:1F:D3:5B:3E:38:BA:E1:04
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0190C56870B896A7475FFF982AF434787002
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/j6Ck2F1MJ8RwaAnuH9NbPji64QQ.roa
Signing time: Thu 18 Jul 2024 10:34:34 +0000
ROA not before: Thu 18 Jul 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25122
IP address blocks: 194.126.33.0/24 maxlen: 24
194.126.34.0/24 maxlen: 24
194.126.38.0/24 maxlen: 24
194.126.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 08:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:68:70:b8:96:a7:47:5f:ff:98:2a:f4:34:78:70:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jul 18 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa0a4d85d4c27c4706809ee1fd35b3e38bae104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:f3:af:d8:6f:b2:8c:7b:5d:e1:02:27:e8:
d0:c6:52:65:bd:4b:83:10:d2:2a:21:ac:51:8b:9c:
58:cc:60:1e:3b:38:3f:e1:e3:99:b2:8f:67:b2:02:
8b:ed:41:5e:e1:28:fd:58:6f:91:da:5c:a1:33:1e:
6f:08:24:1b:5b:63:9d:e5:75:80:91:bc:74:34:8c:
fe:ac:9f:dd:08:eb:27:40:e5:01:32:b7:cd:50:83:
4b:9f:59:f6:03:ef:e1:58:84:19:a1:17:17:19:7b:
d8:c1:4a:5d:2b:1f:b8:6f:e6:21:95:de:4d:fe:87:
49:42:21:ef:e2:e4:94:23:03:d0:70:14:b6:e7:bb:
12:35:98:76:b6:1e:e4:ff:9b:58:df:75:09:3d:ea:
8d:e8:96:4e:dd:f9:d5:21:9e:99:f6:22:d4:03:66:
7e:57:c3:0f:1a:ea:08:f2:11:87:a1:40:21:ed:fa:
09:0f:81:d0:d9:a6:97:b6:37:99:5c:75:ab:d5:a2:
58:c6:b2:bc:b1:ee:24:78:97:50:35:c6:37:e0:9d:
9b:82:60:84:9e:a5:ed:cf:ab:34:9e:2d:dd:4b:4c:
b7:1c:37:5a:85:85:5d:66:81:5d:03:5f:a5:50:c0:
7a:95:24:29:fa:ea:59:f4:e9:0c:6e:3a:86:48:0a:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:A4:D8:5D:4C:27:C4:70:68:09:EE:1F:D3:5B:3E:38:BA:E1:04
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/j6Ck2F1MJ8RwaAnuH9NbPji64QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.33.0-194.126.34.255
194.126.38.0/24
194.126.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bb:0a:98:c6:e6:94:b0:48:9e:55:99:5e:f5:99:fa:86:76:
f7:9a:d4:0c:04:a6:68:a7:98:e6:1c:c7:9a:77:d2:14:81:75:
57:79:b6:70:ce:4e:ac:ee:3f:b6:21:2f:fe:17:03:2b:93:cd:
1f:59:db:61:b9:80:32:4c:50:23:19:14:6d:ec:f5:e3:15:35:
96:a2:5f:6b:a2:41:25:e9:d2:0b:10:ab:ed:93:15:4a:47:6b:
53:3b:e0:84:39:0b:54:52:9c:ba:b3:c8:69:3d:01:7d:aa:53:
26:b7:c7:cf:ba:b4:77:d8:1b:86:0a:1c:24:5d:36:4a:61:3e:
59:3f:2f:03:ce:c3:bc:55:7f:5d:95:03:f2:af:5e:19:31:bd:
e5:f3:96:29:45:f8:ff:93:14:54:b6:da:db:4d:b6:ed:16:ea:
2a:fe:37:fb:54:68:c4:c3:ea:a9:11:18:13:93:18:15:dc:2b:
7e:11:0f:00:45:0b:d7:bf:f6:f7:6c:85:d0:75:25:da:cf:7b:
67:8c:b7:f3:8a:f9:79:8d:fe:3f:c1:de:59:a6:4e:ec:15:2c:
7a:46:1d:ff:a1:3f:c3:0b:63:c8:96:20:14:0f:9a:7c:73:06:
47:de:6c:3d:38:bd:0a:f2:a4:2e:6f:35:dc:66:61:09:d4:d7:
83:43:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 11:02:23 2024 by rpki-client on console-ams.rpki-client.org