Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ua1U2OXOOwFkfc4uIOaJEW9d5Jk.roa
File: ua1U2OXOOwFkfc4uIOaJEW9d5Jk.roa (raw, json)
Hash identifier: GXHdqX7lmEVWruK6YylzUVfu62h3ZPfv9Au5VZevBxA=
Subject key identifier: B9:AD:54:D8:E5:CE:3B:01:64:7D:CE:2E:20:E6:89:11:6F:5D:E4:99
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018F76E3401AC68EB174409694EBD22E9E43
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ua1U2OXOOwFkfc4uIOaJEW9d5Jk.roa
Signing time: Tue 14 May 2024 11:35:55 +0000
ROA not before: Tue 14 May 2024 11:35:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201691
IP address blocks: 194.26.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 17:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e3:40:1a:c6:8e:b1:74:40:96:94:eb:d2:2e:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: May 14 11:35:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9ad54d8e5ce3b01647dce2e20e689116f5de499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:a6:ed:be:f0:51:7b:36:e3:43:3b:14:33:
54:98:d1:5a:07:61:99:d2:de:34:6d:b9:a3:e0:9a:
ab:88:1b:31:aa:9b:4d:73:31:15:92:9f:b1:63:62:
88:2a:a4:54:6f:00:06:8f:a4:11:bc:a5:c3:0b:6b:
48:33:eb:02:64:66:dc:68:53:6d:f6:53:5d:0f:9c:
53:d9:e0:85:98:03:9a:ff:24:7e:e1:36:94:a7:b5:
f6:d5:6b:40:cf:da:52:72:34:16:45:3c:17:65:db:
d6:93:3b:03:52:b2:0c:bf:d5:9a:fe:b4:65:68:50:
6b:2b:37:15:6c:94:86:39:81:88:f3:f3:4a:d4:da:
6a:c6:85:00:0c:ee:f9:7c:bb:77:06:99:55:b0:b9:
55:dc:22:a4:37:c1:44:de:a8:fe:fc:50:02:1c:bb:
fa:63:a3:e5:94:91:01:8e:0b:2f:06:52:01:79:6e:
17:8b:57:49:cc:bf:69:92:55:97:66:7b:da:f4:66:
c3:20:97:be:1d:e4:de:a7:bf:8d:8c:df:67:5f:95:
12:83:ec:6a:af:75:f2:5d:49:db:2a:7f:cb:ea:41:
e2:e1:96:5b:b6:6d:e6:31:46:b9:44:37:bf:ac:df:
f6:14:0d:4f:d2:9e:f2:ee:73:fc:d0:e6:75:cb:ff:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:54:D8:E5:CE:3B:01:64:7D:CE:2E:20:E6:89:11:6F:5D:E4:99
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/ua1U2OXOOwFkfc4uIOaJEW9d5Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.195.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ec:d0:25:bb:53:2b:6d:20:8a:0c:a0:19:5b:47:c0:ed:77:
4c:62:e3:d9:39:ac:41:75:2a:e1:33:c9:ed:94:0e:ed:86:66:
34:b1:3e:24:6c:21:0b:79:33:69:ff:1d:61:53:8c:7d:6d:47:
5f:7f:3a:94:a0:3c:e7:92:11:57:e2:f2:be:be:33:70:88:54:
fb:ec:11:d4:d9:63:89:0c:b0:84:2f:de:41:b8:26:9c:24:11:
e6:a0:08:37:59:0b:26:a5:40:02:d0:8b:0b:8e:4b:b1:33:ee:
79:59:82:50:e0:b8:07:01:a6:95:4f:ae:08:10:2f:09:8c:ac:
99:9b:dd:11:67:6e:fe:7c:8f:30:12:72:ba:d6:6d:5b:3d:59:
f5:34:ac:d1:19:b7:65:51:b7:a6:4d:cb:82:3b:cc:d3:b5:60:
b1:df:a3:52:db:86:7f:64:1a:37:e5:51:3b:f2:14:3e:83:ee:
c0:c9:51:bc:fe:30:5f:ef:29:39:a5:c6:7c:51:36:4d:d4:ce:
2c:4b:01:1f:4d:64:31:c7:31:80:bb:0e:1d:6f:95:08:43:78:
c5:dc:a4:68:9b:fe:72:93:ef:24:4d:4a:49:2d:3b:12:da:55:
35:73:19:d7:b1:00:a1:e2:81:47:a6:e0:15:a6:4e:14:e6:21:
f9:d0:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 20:13:08 2024 by rpki-client on console-ams.rpki-client.org