Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/Xl2_ziamz3RHjhdsCGwVgLC2DBM.roa
File: Xl2_ziamz3RHjhdsCGwVgLC2DBM.roa (raw, json)
Hash identifier: +4FD3HRMbQtWkvwGG22yozF9S6+n4kaWr17zjZVGB4k=
Subject key identifier: 5E:5D:BF:CE:26:A6:CF:74:47:8E:17:6C:08:6C:15:80:B0:B6:0C:13
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 01856C6F247C92A9AD925A8D9B5B83FBA4EE
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/Xl2_ziamz3RHjhdsCGwVgLC2DBM.roa
Signing time: Sun 01 Jan 2023 08:25:01 +0000
ROA not before: Sun 01 Jan 2023 08:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8218
IP address blocks: 194.8.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:24:7c:92:a9:ad:92:5a:8d:9b:5b:83:fb:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Jan 1 08:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e5dbfce26a6cf74478e176c086c1580b0b60c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:fe:41:0d:1c:eb:51:1d:97:ca:5f:74:b1:
68:8a:00:dd:9d:47:56:52:f0:e0:eb:7d:bb:ba:1a:
3d:c2:fb:4f:27:d0:6b:aa:5b:e2:6d:b3:6d:ac:14:
95:1e:47:ea:7b:af:8d:f5:de:bb:bc:84:7d:39:49:
de:cd:a6:c2:f6:e7:94:a7:35:4f:57:d9:8a:cb:f9:
ab:5c:7b:47:ec:6b:48:d8:44:a1:29:8b:4b:ea:7b:
d5:39:5a:73:07:1c:d2:11:57:ca:55:a3:67:6e:fd:
d3:d8:5d:43:9a:2f:6b:23:8d:b0:99:2f:8e:43:a3:
fa:e3:16:ad:6e:c6:d7:d9:c3:a0:69:2b:19:8e:a3:
58:87:a4:27:26:c6:d5:0e:0e:49:91:ed:84:1b:28:
d1:7a:66:68:9a:9a:6b:78:3f:63:c5:ed:ea:7f:bb:
56:95:fa:cd:aa:c9:23:6d:14:8d:28:5d:71:24:4a:
88:cf:34:d8:fc:7d:0c:59:0b:65:71:35:c9:16:c9:
74:ca:a3:91:9d:cd:1b:52:14:7f:b8:4b:ce:71:f4:
8f:6f:0e:93:4e:7f:cf:fa:c2:a1:76:d2:57:87:45:
d6:fb:47:2f:dd:35:95:e1:54:52:9f:6f:26:0c:99:
d4:0f:76:5e:ce:20:a3:87:6f:4f:ac:9e:56:c4:63:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:BF:CE:26:A6:CF:74:47:8E:17:6C:08:6C:15:80:B0:B6:0C:13
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/Xl2_ziamz3RHjhdsCGwVgLC2DBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d5:01:6d:1f:77:fb:ec:67:d1:e9:0f:15:e1:86:a6:55:b0:
1c:f6:60:1b:79:58:2a:70:77:ef:17:1a:2d:5c:8b:e6:d1:00:
52:bc:b2:1f:28:9a:da:29:2e:a3:11:69:b2:66:ef:7c:a0:4e:
ed:00:74:3f:26:31:73:24:97:9f:92:1e:73:61:86:ea:a7:f5:
d9:9f:6f:62:f4:02:e2:56:a9:9e:39:ec:cb:34:39:8d:5d:e6:
e5:64:ad:85:01:88:51:1a:0b:86:15:5a:07:11:7e:8f:95:ae:
93:bc:96:3c:d6:52:79:68:76:2d:f3:d6:5e:8d:72:39:bb:54:
2d:94:c4:38:f1:a2:f3:8e:45:62:38:be:71:74:9f:e1:d1:6a:
eb:ce:a1:e5:29:b7:22:4d:fd:c8:cf:ee:91:8a:2e:1f:a3:35:
14:75:9c:aa:82:f1:7e:b2:da:49:8d:ab:74:55:a3:cb:9d:54:
7e:00:27:ec:21:03:30:ab:e5:6d:ca:80:86:28:f8:51:6b:89:
08:93:98:c7:49:66:7b:33:66:11:92:18:ad:df:f8:3f:9a:56:
7b:0b:d6:ea:cd:9b:e0:d7:f6:ec:25:38:16:53:75:56:10:5c:
a7:3e:06:7a:91:57:26:6a:05:93:7b:f3:f1:a4:6e:25:ac:8f:
0c:f6:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:15 2024 by rpki-client on console-fra.rpki-client.org