Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/rJTkCR7y8TXXrYYHAFXjful449A.roa
File: rJTkCR7y8TXXrYYHAFXjful449A.roa (raw, json)
Hash identifier: JxLzJdz6oaIVRmw7QMWzDyKFmdcqP870/GFP+W8g2Fg=
Subject key identifier: AC:94:E4:09:1E:F2:F1:35:D7:AD:86:07:00:55:E3:7E:E9:78:E3:D0
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018E85ED9AB5E4623E8AA09C65F6D2702E48
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/rJTkCR7y8TXXrYYHAFXjful449A.roa
Signing time: Thu 28 Mar 2024 16:38:45 +0000
ROA not before: Thu 28 Mar 2024 16:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Apr 2024 07:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:ed:9a:b5:e4:62:3e:8a:a0:9c:65:f6:d2:70:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Mar 28 16:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac94e4091ef2f135d7ad86070055e37ee978e3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:44:79:8e:1f:c7:94:c8:b6:58:c8:e2:81:
04:86:80:c3:43:04:64:8c:45:a2:95:fa:c0:ef:42:
da:12:be:36:16:ae:1d:5a:9f:b1:69:c3:71:4d:6b:
6a:8c:04:ad:ad:ec:12:29:9a:29:ca:ea:68:f0:4b:
49:72:13:ef:d6:d0:7c:6d:0c:82:b4:fc:2d:e0:b2:
21:6c:10:da:7d:b6:76:bd:97:14:04:72:00:53:06:
91:0b:65:20:e9:ab:1b:58:c0:3b:6a:7d:97:31:f6:
2d:2d:93:01:f3:ea:68:93:e3:7f:10:d1:26:e5:21:
0b:d0:71:31:18:7d:77:8e:39:68:df:7a:f1:90:f1:
f5:a2:dc:89:89:7b:63:62:f9:bd:8a:1c:da:10:44:
52:56:07:eb:1e:fe:24:dd:8f:c1:ea:eb:9d:a3:27:
64:de:3d:13:ab:56:42:c8:a2:fd:3f:c0:3f:38:5c:
5f:30:b1:76:e5:85:ad:c1:8a:38:ad:b6:5f:dc:72:
53:20:03:bc:b3:3b:98:07:df:b4:9f:da:83:a3:57:
61:af:33:8c:8a:a8:a3:48:29:23:dd:4f:0e:cb:df:
51:3c:cd:c5:0a:81:e2:18:23:67:d5:da:c9:9e:2f:
9e:75:b1:d3:6c:5c:4f:6a:76:aa:77:9f:e1:8c:04:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:E4:09:1E:F2:F1:35:D7:AD:86:07:00:55:E3:7E:E9:78:E3:D0
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/rJTkCR7y8TXXrYYHAFXjful449A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
05:0f:39:22:dd:a5:f4:57:dd:20:50:0a:e7:e0:f7:ae:7b:d5:
62:40:10:e0:9e:0f:aa:50:05:17:a2:ad:aa:b9:2c:3f:e9:7b:
f8:72:51:77:d1:e2:1b:09:af:98:ca:97:23:dd:e2:39:05:40:
32:9b:21:d1:b8:f4:41:97:e3:47:d4:80:28:33:ca:c3:8a:23:
29:ea:bc:60:a6:0d:39:12:4e:3e:37:2f:7e:9a:c5:17:77:99:
2d:8d:53:cd:22:44:49:b6:f4:3d:c6:29:16:28:59:71:ff:54:
42:43:2a:4f:37:1c:e5:b2:7e:af:28:42:b8:19:a1:d7:ba:ac:
1a:9a:58:d4:f4:cc:eb:13:04:a2:5d:11:da:54:c4:4d:e5:7b:
4a:63:ef:85:be:1d:75:17:27:e4:c9:12:2e:bb:82:f7:45:40:
69:1c:d8:69:16:ac:f8:2a:db:e8:c2:e3:b7:c3:2d:a0:4a:e2:
48:f8:85:8b:bb:4e:95:7c:a2:b4:ac:7c:19:d9:9e:05:69:35:
0b:46:6b:9f:37:12:f4:95:32:1f:68:2a:63:5a:31:4b:23:2e:
9e:18:00:1f:c4:d6:1e:b2:33:42:79:f3:9d:4d:09:07:53:e6:
7d:9d:5a:74:83:87:1b:a5:03:a7:98:ae:ec:87:e5:f7:6b:da:
45:37:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org