Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/tQ9gnKkGGy2MXGFl-v8E44GGYPc.roa
File: tQ9gnKkGGy2MXGFl-v8E44GGYPc.roa (raw, json)
Hash identifier: hiSeIxsRYg6kYWXys1bGub6hjBEmyePsX7UyE9JiFSc=
Subject key identifier: B5:0F:60:9C:A9:06:1B:2D:8C:5C:61:65:FA:FF:04:E3:81:86:60:F7
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018A74A606CE422220F269D20BFC5B8E7035
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/tQ9gnKkGGy2MXGFl-v8E44GGYPc.roa
Signing time: Fri 08 Sep 2023 11:55:52 +0000
ROA not before: Fri 08 Sep 2023 11:55:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Sep 2023 16:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:a6:06:ce:42:22:20:f2:69:d2:0b:fc:5b:8e:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Sep 8 11:55:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b50f609ca9061b2d8c5c6165faff04e3818660f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:a8:d1:77:00:36:f2:52:f6:7e:e9:4b:b1:
f0:c3:ff:95:b3:9d:84:50:f5:e0:d5:a9:37:3c:57:
ad:1e:83:57:9a:d1:36:2c:63:e0:4d:11:ea:0d:39:
9f:14:16:1f:c5:04:8c:62:50:8b:b5:4d:15:64:dc:
f9:5f:3a:9d:14:2b:ca:e8:66:45:19:d2:5b:b4:64:
33:ec:36:64:ae:1b:ec:53:66:b1:9f:78:e2:4e:a5:
62:93:33:d9:ec:9c:ee:42:24:5b:bd:61:47:c6:f7:
56:5a:c1:b0:15:e9:ff:b2:8b:c9:0d:f3:eb:b7:16:
06:89:bc:5b:98:73:a0:ea:b1:ef:20:24:50:6d:83:
33:a9:2f:6f:dd:4e:9b:26:8d:30:7c:ef:85:ff:e5:
33:78:5a:88:37:34:98:2a:f1:f5:48:bc:b7:f4:f5:
6c:6e:28:1d:4a:cf:77:61:7d:72:97:88:71:f9:c7:
a4:5d:fc:de:e4:dc:4c:d7:ec:96:ff:79:20:47:96:
cb:80:08:cd:11:1c:c3:08:f1:8d:e2:62:5d:c6:8c:
a6:9d:62:a8:ca:92:0c:ce:41:bc:b1:de:73:9b:81:
88:02:ce:cf:fa:f8:7b:cf:20:d5:e3:a6:7a:2e:a6:
f5:7d:32:dc:25:20:f8:04:d0:78:a9:64:7a:6a:0d:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:60:9C:A9:06:1B:2D:8C:5C:61:65:FA:FF:04:E3:81:86:60:F7
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/tQ9gnKkGGy2MXGFl-v8E44GGYPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
28:ce:76:60:1f:97:0f:20:dd:fe:56:f4:b3:52:68:68:83:48:
f0:a5:bc:26:1a:d3:1d:d1:91:61:0b:39:c4:8e:88:ba:e3:32:
e8:ab:ec:9c:53:bc:3f:54:70:a8:70:15:76:ed:e7:91:cf:27:
70:0c:55:cf:90:ce:c3:57:fa:9d:35:54:98:75:4e:0b:b8:43:
86:2c:d0:00:d8:ab:a6:07:8b:be:fa:2e:a3:06:6e:4a:bc:8f:
b3:55:ee:4c:f1:ff:7a:c7:4c:0a:eb:c5:a9:94:ee:12:43:09:
62:25:14:c0:7c:5e:f2:c6:52:8b:57:a7:29:9b:0c:8b:0d:f3:
cd:1d:be:38:98:ae:de:75:36:eb:13:b6:8b:e7:9a:09:41:63:
bf:3f:3b:e3:fb:a9:5e:33:73:1a:e5:26:c4:45:22:95:99:43:
83:7b:78:b7:d4:f8:de:94:32:2e:76:4b:30:53:23:81:93:22:
c9:28:f2:fa:b3:52:a0:3f:d1:71:c5:8f:e6:2f:f7:0b:82:11:
1d:0f:7b:c2:54:d2:e9:6c:e7:0e:c4:a7:51:30:22:c7:1e:b2:
13:5f:e4:5f:a5:18:23:e5:81:41:4a:a6:a5:f2:53:14:cc:95:
db:07:29:85:d5:45:24:34:f1:0f:cd:73:a8:5b:ad:3b:e5:98:
62:11:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org