Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/N4dhQ048AUsYBH9YC3ZcEQBJFzk.roa
File: N4dhQ048AUsYBH9YC3ZcEQBJFzk.roa (raw, json)
Hash identifier: V2EHq31u7QuFBlf1SnQf7PSYRigjCoRlneewywyas0k=
Subject key identifier: 37:87:61:43:4E:3C:01:4B:18:04:7F:58:0B:76:5C:11:00:49:17:39
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018CC7955B518054C9BD84877707B4266976
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/N4dhQ048AUsYBH9YC3ZcEQBJFzk.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5b:51:80:54:c9:bd:84:87:77:07:b4:26:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378761434e3c014b18047f580b765c1100491739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:93:ce:49:9d:bd:13:3a:3a:d0:ca:af:19:
93:7d:e1:a3:69:56:9e:b8:d9:35:d8:68:c4:ec:e1:
9f:58:4d:0d:48:2e:46:94:b4:37:ff:81:30:fc:46:
05:ad:91:66:9e:00:f1:83:8e:f1:e4:da:a7:00:e6:
2f:e4:08:fa:78:69:b5:e8:f5:83:b5:d5:b9:5f:2f:
1e:c4:f6:6e:4e:a3:cf:b8:e4:a5:08:34:b0:13:20:
19:b1:4f:f6:18:b4:4e:f3:a1:5a:f5:f6:4a:df:d3:
16:3c:53:e7:28:c9:10:8c:90:ee:eb:c1:9a:b3:79:
bb:6b:bd:88:40:ed:6f:8d:25:d0:9f:15:57:ab:1b:
8a:ae:92:e1:e4:66:86:3f:ba:8a:a3:95:fe:7d:47:
cf:ba:c7:c9:4c:9c:e9:91:b4:43:b6:44:03:d3:7a:
99:a1:06:29:3a:28:6d:f3:f5:53:18:d2:c0:be:f1:
de:d8:ad:32:82:55:4a:c9:17:78:f8:1a:29:12:0f:
fa:3e:1a:24:79:39:37:86:58:87:1d:7d:e6:5b:8e:
6a:fb:6d:6d:38:3b:da:75:dd:42:0c:55:be:cf:4a:
61:8a:8e:50:7f:d5:24:34:ed:4e:b9:42:df:99:79:
73:21:36:d6:4c:d7:99:89:89:2d:2b:54:51:cd:5c:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:61:43:4E:3C:01:4B:18:04:7F:58:0B:76:5C:11:00:49:17:39
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/N4dhQ048AUsYBH9YC3ZcEQBJFzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
15:df:58:61:56:00:6d:72:fb:41:8b:7a:7d:ea:1e:37:24:b4:
18:f6:5b:c0:65:bb:a9:4d:65:8f:10:75:07:b5:56:c0:4b:af:
4d:f1:60:4f:78:8c:35:47:a8:05:90:8d:76:2d:e1:67:5a:03:
9c:64:fe:83:1c:7f:35:19:cf:79:ed:c6:4b:38:7f:ae:92:4f:
87:11:62:59:80:19:81:3d:3c:77:4e:a8:af:97:cc:2a:c0:eb:
7b:e5:5b:c5:1c:16:24:62:b7:ab:2e:bf:08:39:39:ff:f0:e7:
4c:b4:2a:dc:62:cd:87:bd:43:d6:89:d1:c5:b7:27:91:9f:1f:
0f:57:e5:05:99:90:82:e2:f6:89:d8:bb:f5:36:38:6d:4c:d9:
64:12:51:eb:23:0e:3b:c2:ce:7b:7f:b7:f3:f4:73:e8:b6:49:
f7:a0:e1:3e:f3:a4:11:ee:53:e0:1a:4e:bf:c8:5b:d1:3f:73:
d8:02:a4:f2:bd:17:b4:21:aa:32:81:75:d0:4b:80:da:ff:ba:
02:7d:fb:6a:a5:50:fc:b6:cb:b3:35:85:68:9c:8b:88:b7:27:
dd:85:e9:84:02:da:0d:38:11:75:0d:57:5b:92:21:a9:81:e0:
76:1c:1f:8c:37:89:4a:e9:a2:65:34:05:f5:34:ad:50:47:76:
a2:14:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org