Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/V-nSjYX7v6TdY3fVbm8XW0uS3i0.roa
File: V-nSjYX7v6TdY3fVbm8XW0uS3i0.roa (raw, json)
Hash identifier: 0cmQGmUWtwO4rwiCpBffEYczLOtZFTIkn1wcoFvvkrk=
Subject key identifier: 57:E9:D2:8D:85:FB:BF:A4:DD:63:77:D5:6E:6F:17:5B:4B:92:DE:2D
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FDD317D66588049DCA2EEF736BF06
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/V-nSjYX7v6TdY3fVbm8XW0uS3i0.roa
Signing time: Tue 02 Jan 2024 04:30:23 +0000
ROA not before: Tue 02 Jan 2024 04:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211924
IP address blocks: 194.147.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 23:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:dd:31:7d:66:58:80:49:dc:a2:ee:f7:36:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e9d28d85fbbfa4dd6377d56e6f175b4b92de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:60:aa:7e:4e:f1:c0:68:f3:cb:9e:13:dc:
fa:45:29:e5:15:18:7b:81:9d:81:16:c3:01:c0:61:
b6:27:a4:bd:cb:33:8a:7a:a4:a9:64:18:71:75:b4:
7e:c6:9e:e6:58:4b:b5:74:30:8d:ab:17:86:a3:a9:
44:89:ef:d1:72:38:ce:b0:a5:3c:36:cb:cf:b7:58:
2a:9f:a6:9b:1f:04:e5:13:2d:d8:8b:6a:34:d9:75:
92:53:51:04:2a:2f:8e:7b:6b:0e:44:a5:d6:82:90:
0f:20:22:9a:0a:fc:71:b7:0d:1d:16:7d:78:26:ed:
73:ac:82:66:66:a2:22:89:7d:ae:53:b8:da:be:15:
e9:b6:f7:b1:36:72:7b:f7:79:f6:b2:ae:51:6c:49:
d2:46:c5:f3:27:cc:b6:72:70:71:aa:01:f0:31:20:
19:b3:f6:f8:96:ac:75:15:9c:5f:fd:e5:52:ae:ac:
ad:d5:3a:3b:78:19:7a:62:af:26:96:bb:42:de:a8:
90:4f:d2:4f:e2:7f:64:50:ad:aa:5c:4e:63:95:67:
d0:97:61:d3:bf:04:ab:a1:68:c3:b5:c1:08:d3:61:
8b:90:11:5d:1b:38:7a:f7:39:07:4f:b8:5c:e8:ac:
ca:cb:1b:ca:a6:c1:ea:92:b5:dc:5b:48:75:a6:86:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:D2:8D:85:FB:BF:A4:DD:63:77:D5:6E:6F:17:5B:4B:92:DE:2D
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/V-nSjYX7v6TdY3fVbm8XW0uS3i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.105.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a3:80:ee:19:d5:5c:56:18:ef:af:c8:c5:25:21:e1:0e:25:
66:74:7c:4e:f6:89:a2:f4:2e:44:1b:f8:3b:a0:c0:1a:c4:b5:
b4:b9:20:62:0f:41:09:35:93:32:b1:d1:05:2a:50:4d:83:86:
4a:b9:fa:30:78:7f:da:ac:1f:c9:72:86:2a:0c:b7:11:d0:46:
fd:d9:80:77:b9:e1:26:f5:ee:19:1b:fe:80:8a:9c:49:a1:30:
45:ed:1c:13:68:fa:10:00:c8:85:81:14:17:8a:f9:ad:18:aa:
95:fd:43:d9:0b:e4:6c:f3:ee:c1:10:18:1d:40:46:12:a9:01:
f0:de:bf:27:96:f9:72:bf:0a:11:be:4f:bc:b8:0e:02:75:3f:
6b:fe:08:26:1b:03:fb:3c:a2:2c:cb:5e:2f:58:aa:48:a0:c9:
7d:fd:10:39:34:ae:d3:98:c7:02:54:94:cd:d0:3e:a3:87:69:
70:82:51:80:ae:09:11:91:93:aa:ef:44:66:16:ba:8f:18:9a:
d4:50:e6:a9:81:17:18:12:3e:95:e2:bc:e9:90:aa:71:8a:e2:
06:2f:12:bb:47:8e:b5:10:cf:fb:ef:ab:43:29:6a:7d:0a:76:
68:94:a4:64:e0:e7:91:74:2f:28:53:f5:86:bf:d8:58:58:a1:
84:a9:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:46:42 2024 by rpki-client on console-fra.rpki-client.org