Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/rvUSPI9UU5KF6T1RK9qHOQwV5_4.roa
File: rvUSPI9UU5KF6T1RK9qHOQwV5_4.roa (raw, json)
Hash identifier: jsrHMzn5AaKr8YftXXx+FJ6b41I9sgfx2Z6nYxKl6g4=
Subject key identifier: AE:F5:12:3C:8F:54:53:92:85:E9:3D:51:2B:DA:87:39:0C:15:E7:FE
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 01856F6FF3E1D33CD40C29CEE06D4BD2190E
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/rvUSPI9UU5KF6T1RK9qHOQwV5_4.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39666
IP address blocks: 194.50.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f3:e1:d3:3c:d4:0c:29:ce:e0:6d:4b:d2:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aef5123c8f54539285e93d512bda87390c15e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:b3:bf:98:a4:2b:5f:cb:94:0a:69:6c:3d:
c9:5d:60:14:15:b2:b8:5a:01:1a:2e:bb:c3:07:5e:
dc:0e:24:08:2b:5f:af:14:bc:f6:d7:c9:a8:35:59:
45:a2:b2:1c:5a:71:46:53:96:4f:2a:30:ab:a7:f9:
78:b3:82:b3:ef:71:1e:2b:64:34:92:19:6d:96:94:
5f:17:64:25:f3:f9:6e:dc:41:f6:9c:3f:d8:45:71:
43:05:bf:95:7c:59:03:36:74:3a:26:41:ba:f7:2f:
9e:d5:38:e5:86:2d:67:9e:2a:d6:ba:5d:8a:6c:8e:
2f:4a:bc:e8:05:f6:e9:8a:12:1c:98:a2:6d:79:39:
b8:71:f8:df:f8:ce:c9:e4:f8:15:74:c1:32:83:63:
51:7f:e6:0a:4c:61:e0:24:ce:d5:66:84:e5:da:a0:
76:ea:88:3c:7c:32:39:e4:65:be:74:65:5a:0f:23:
d2:16:30:0b:0e:32:2f:84:ab:0f:67:59:ac:ee:36:
b6:02:66:73:d5:5f:49:f5:19:77:3d:34:0a:8b:4e:
34:7e:f8:9c:a8:8c:f5:7b:46:f5:49:27:e0:d7:f8:
af:3c:cf:77:39:df:ba:d6:3a:46:9c:ee:7d:87:59:
d8:d1:45:eb:02:0f:ad:65:53:3b:4d:32:ad:37:50:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F5:12:3C:8F:54:53:92:85:E9:3D:51:2B:DA:87:39:0C:15:E7:FE
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/rvUSPI9UU5KF6T1RK9qHOQwV5_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.114.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dd:a2:34:55:0e:eb:df:14:36:af:42:b7:7e:34:33:76:b4:
7d:ba:89:08:f2:59:64:49:92:7b:37:5d:06:63:ca:5b:c2:00:
33:81:ae:75:61:94:8f:08:00:6f:df:cc:9a:f1:7a:ab:5c:89:
8b:c3:cd:95:1b:e1:ab:ee:ea:8d:3e:e4:d2:08:c0:e3:70:1f:
17:25:02:ad:20:b1:59:ff:56:30:95:62:be:a1:af:93:e1:01:
90:3d:8c:95:2b:cf:8d:94:fa:36:a3:2d:8c:95:55:2b:17:0d:
0b:44:a1:b4:5c:37:c7:43:38:d6:42:9a:4e:17:14:c1:2d:56:
c4:7f:75:63:da:7e:b0:5c:db:62:46:09:2c:db:e9:de:36:77:
49:d5:35:4a:c1:0a:42:45:76:be:93:3d:70:96:fc:3e:67:a8:
cb:20:77:f3:c3:a9:59:04:fa:fe:48:ce:9e:79:3a:5f:72:fe:
1b:5b:1d:d7:19:a9:70:52:6d:bd:b8:65:21:89:ad:26:41:24:
3c:8c:50:ee:03:7f:b8:66:57:17:cb:32:7a:31:32:19:93:3e:
95:08:94:82:b2:ee:3a:28:36:fe:19:f9:9f:0c:9b:8a:7d:7a:
2b:d6:a0:4e:34:fe:16:94:f2:10:30:c1:18:4b:3c:d3:cc:6f:
66:ce:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org