Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/dWKREh6wweQJVNH6Lm8p_KZcewY.roa
File: dWKREh6wweQJVNH6Lm8p_KZcewY.roa (raw, json)
Hash identifier: M3hhdttJ4FeXfAZ2xJ92+1PUU29U7PxqH8mqcpNESE8=
Subject key identifier: 75:62:91:12:1E:B0:C1:E4:09:54:D1:FA:2E:6F:29:FC:A6:5C:7B:06
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0186040CB7B6C62F86A044A15C855C98FEEE
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/dWKREh6wweQJVNH6Lm8p_KZcewY.roa
Signing time: Mon 30 Jan 2023 18:59:47 +0000
ROA not before: Mon 30 Jan 2023 18:59:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208537
IP address blocks: 194.102.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 10:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:0c:b7:b6:c6:2f:86:a0:44:a1:5c:85:5c:98:fe:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jan 30 18:59:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=756291121eb0c1e40954d1fa2e6f29fca65c7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:14:36:c9:56:df:e9:47:58:93:e5:05:5e:
87:91:ec:d9:c4:23:a7:16:7e:45:2d:94:96:60:55:
be:b4:64:05:8a:6d:56:53:f0:b6:49:8e:c2:3a:69:
b8:90:d8:d9:62:48:62:ee:93:b8:ab:25:41:3f:a6:
39:c2:48:92:c1:e3:00:4c:1d:79:d4:00:59:e4:31:
bf:27:d6:30:06:43:a4:24:04:46:e4:92:79:73:28:
0b:95:48:f9:04:02:e9:77:75:4c:6a:c0:e0:89:98:
b6:f6:f6:d5:1e:37:b3:85:7a:79:2d:6d:d9:d6:1d:
9a:d2:9c:9b:88:e6:65:a7:37:75:65:53:c4:ca:f1:
ab:58:bc:f2:4f:4e:68:6d:1e:56:8c:f5:8e:f2:25:
a6:80:b6:71:b9:2c:5f:8b:a0:11:de:57:36:d8:37:
f6:cb:75:97:21:7e:82:80:6a:b7:02:63:09:6c:d0:
74:ef:7c:ba:65:33:39:21:87:2e:ba:20:f6:12:59:
c6:80:41:da:27:47:d9:b2:bd:89:02:c7:d0:1f:d2:
1d:33:a2:a8:5a:56:0e:ca:f7:26:d9:f0:14:55:96:
d6:98:54:94:e4:2f:ae:0c:fc:ca:77:80:2b:ca:de:
49:25:45:45:f9:e4:fd:c1:03:14:3a:4b:ff:e6:20:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:62:91:12:1E:B0:C1:E4:09:54:D1:FA:2E:6F:29:FC:A6:5C:7B:06
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/dWKREh6wweQJVNH6Lm8p_KZcewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:fb:89:ed:60:2f:8c:45:9e:33:93:bb:ff:54:fc:9b:8a:
f4:17:54:ef:e2:da:92:db:93:7c:ae:a6:75:5e:a6:fd:51:38:
4b:64:9c:e8:4e:75:66:fd:52:98:46:fa:07:97:2e:6d:43:a6:
a8:d7:c7:81:8b:72:e1:96:75:d5:db:bd:0a:d8:7a:05:ed:46:
0a:d6:8b:be:7d:8c:4a:34:68:83:18:27:8c:db:28:4e:53:49:
fa:20:7f:d9:c1:05:2d:02:6f:ac:0c:b0:e9:91:b2:b6:cd:15:
2f:6e:fd:f3:32:6f:b9:27:85:76:3a:d3:99:d2:0d:aa:3d:da:
0a:fb:1b:9f:cf:39:06:e2:7d:57:0f:13:50:a9:12:7b:5d:c4:
55:68:41:06:00:ea:11:42:c3:53:74:3c:09:bc:03:93:83:f4:
67:9d:60:a4:67:e8:63:15:b7:0a:eb:c5:19:51:cc:d0:4b:1b:
9b:56:f5:e8:7e:21:e7:0d:dc:1c:dc:e8:12:43:3c:76:f7:58:
41:49:b8:38:cc:83:51:d3:13:ac:b2:a0:aa:cb:43:4f:2c:8d:
4a:ea:d8:1e:5e:54:74:bf:b3:51:d0:c1:35:41:62:a9:70:92:
2b:01:39:d4:ee:9c:79:b9:e6:55:72:c7:1a:d3:6a:36:d6:f5:
fe:8e:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org