Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/4u_mxDP2EaQc-kW7oNcZC0dUMVY.roa
File: 4u_mxDP2EaQc-kW7oNcZC0dUMVY.roa (raw, json)
Hash identifier: yD0FM04Y/E1BGO+Yog/dYcn/n5aiKez9A0eFwGn3I3A=
Subject key identifier: E2:EF:E6:C4:33:F6:11:A4:1C:FA:45:BB:A0:D7:19:0B:47:54:31:56
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 018997C21615E88FFE7DF5B80D0F9CA27D03
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/4u_mxDP2EaQc-kW7oNcZC0dUMVY.roa
Signing time: Thu 27 Jul 2023 14:30:26 +0000
ROA not before: Thu 27 Jul 2023 14:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 194.242.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:c2:16:15:e8:8f:fe:7d:f5:b8:0d:0f:9c:a2:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jul 27 14:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2efe6c433f611a41cfa45bba0d7190b47543156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:e3:4e:10:81:b6:9d:1a:00:06:20:56:31:
14:f7:76:e5:b7:18:42:1a:22:94:23:42:dc:44:04:
6a:50:37:a6:8c:42:02:a1:33:46:95:90:b9:52:68:
c3:5e:79:14:6c:9e:be:37:3b:67:9d:a8:73:ed:04:
f5:ba:e6:7c:6e:1d:4a:64:fa:49:5f:a6:b6:41:f8:
84:4e:2d:25:78:6d:0d:4d:53:12:75:25:08:73:c9:
a6:4e:21:af:e7:c6:04:76:1e:a6:b6:6d:dc:37:fb:
c0:43:85:d9:63:e3:18:07:b4:f3:7a:2c:15:a1:51:
26:c9:1b:df:df:98:a4:e0:cd:08:ed:a7:62:78:c3:
a6:1c:36:d3:91:93:75:50:46:c8:4b:0e:52:87:51:
4c:93:6e:d2:a4:cb:b1:eb:b4:b0:64:83:f8:c9:f4:
38:d0:a4:8d:cf:4d:e0:1c:25:e0:9b:8d:80:04:c6:
71:4a:42:03:77:b9:64:39:e3:d0:40:bb:68:ce:62:
0c:17:d2:f3:3b:4c:1a:ea:06:ef:58:1e:8e:ca:18:
df:70:5c:fe:1b:de:52:63:6f:82:d0:47:d7:45:16:
24:c1:bd:d4:ab:48:a7:89:7a:7e:2b:4e:c3:25:89:
0a:0d:7f:ff:d1:3c:ea:2d:53:02:16:91:17:bf:87:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:E6:C4:33:F6:11:A4:1C:FA:45:BB:A0:D7:19:0B:47:54:31:56
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/4u_mxDP2EaQc-kW7oNcZC0dUMVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:dc:74:fa:d3:e3:a4:9b:56:0f:7a:35:f6:5a:ab:d0:76:18:
8c:6e:ac:c2:99:7a:31:c2:83:aa:8a:79:bb:39:ea:48:ec:d4:
16:53:54:0f:53:a3:c4:dc:98:a3:b5:81:7f:69:ff:a9:3b:16:
5c:8f:ad:76:aa:cc:0a:f7:70:1a:e7:09:4e:24:a4:44:a3:a8:
b2:50:83:e3:99:a8:1e:70:86:20:14:4f:ce:1b:fd:80:b7:4e:
eb:bd:bf:8a:25:94:e7:72:98:4b:ac:01:2f:d3:4f:12:9a:08:
4b:ac:22:6d:8a:3c:47:da:0f:4e:4c:e5:56:69:e0:9c:ca:ac:
43:ea:40:62:fa:f7:1c:c6:52:46:ae:c2:2d:0f:36:80:d4:bc:
d1:1e:58:2a:45:f0:5e:5f:9a:e1:45:4f:5c:96:cf:af:fb:8d:
b4:25:99:77:81:a7:49:9b:f5:d7:2d:9f:34:ce:4e:72:e1:6a:
c4:6b:ad:79:f6:2a:24:6e:c3:7c:a6:c3:3a:c8:ce:9a:35:38:
0c:d7:1f:47:83:a2:33:4b:47:01:03:d9:d1:2d:da:7e:ae:31:
36:3b:80:d1:b4:74:71:66:66:10:4d:e6:78:31:dc:34:78:76:
78:6d:25:71:e8:56:fa:5b:d5:11:a8:0e:9c:40:fb:93:01:5e:
0d:d3:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:49 2024 by rpki-client on console-ams.rpki-client.org