Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Sc9f_YdAmxJsIsXGoFYbN0rt1Y8.roa
File: Sc9f_YdAmxJsIsXGoFYbN0rt1Y8.roa (raw, json)
Hash identifier: NOdnv2Zj+oJLEcqdqBFlh5qdHrRjoSq54oJ1WlAJtu0=
Subject key identifier: 49:CF:5F:FD:87:40:9B:12:6C:22:C5:C6:A0:56:1B:37:4A:ED:D5:8F
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B83226A37BB49DAD479564212675D
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Sc9f_YdAmxJsIsXGoFYbN0rt1Y8.roa
Signing time: Tue 02 Jan 2024 12:34:58 +0000
ROA not before: Tue 02 Jan 2024 12:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59794
IP address blocks: 194.225.32.0/22 maxlen: 24
194.225.108.0/22 maxlen: 22
2001:14e8:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 May 2024 08:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:83:22:6a:37:bb:49:da:d4:79:56:42:12:67:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49cf5ffd87409b126c22c5c6a0561b374aedd58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:0c:e2:bd:4e:76:94:4e:06:b1:9b:5c:b6:
68:7e:08:13:b0:c0:f0:0f:1c:0e:10:7b:b7:ff:77:
5b:2a:df:da:07:dc:e5:ff:07:4d:21:61:7a:d6:93:
54:be:5d:20:48:6a:87:17:b5:fe:f8:2b:1e:05:fb:
86:b4:be:76:75:8c:aa:28:af:d0:ef:2e:20:27:06:
5a:e7:df:d0:8f:b5:23:f7:3e:fb:98:fb:38:23:79:
b5:05:f6:79:68:4f:19:ca:0c:87:1c:6a:cf:29:13:
b9:7e:71:89:42:74:4d:39:ba:6a:5d:4b:a8:4f:e9:
a1:e3:2d:6b:32:f9:d6:b7:1a:57:dd:62:37:ad:9f:
c1:bd:dd:be:7a:9d:f8:24:28:a2:27:b7:7b:55:72:
d9:06:e3:19:d9:42:e1:47:d9:91:fa:bb:fd:65:e1:
63:03:8b:69:7f:68:87:b1:5f:45:25:dd:b3:96:4e:
d6:ab:64:12:16:a6:3d:3c:87:5d:4f:8b:28:2a:be:
50:bf:43:96:c0:5b:bd:06:26:bc:2e:5d:86:65:c7:
35:78:86:b4:0f:74:99:da:69:1b:dd:4b:d5:2c:21:
da:af:08:81:42:af:25:ae:69:a9:73:f4:0d:fd:ec:
84:24:f4:64:c2:55:04:6d:09:bd:10:c2:0c:86:27:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:5F:FD:87:40:9B:12:6C:22:C5:C6:A0:56:1B:37:4A:ED:D5:8F
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Sc9f_YdAmxJsIsXGoFYbN0rt1Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.32.0/22
194.225.108.0/22
IPv6:
2001:14e8:6::/48
Signature Algorithm: sha256WithRSAEncryption
4a:70:c5:e3:35:85:4c:58:80:12:39:38:b7:9b:63:b0:f2:2f:
1d:34:60:69:b5:2f:bd:6e:14:54:1a:15:05:b3:3d:be:27:f0:
83:e0:3d:fd:dd:db:dc:92:48:34:d7:cd:fa:17:30:ba:59:7b:
6d:f9:e4:c6:38:de:fa:19:ea:49:fa:ab:a4:b4:50:cf:2b:bb:
c0:26:f4:ab:1a:c7:56:24:4c:25:75:b1:09:88:64:73:e7:dd:
43:1b:a6:35:8c:2f:92:d7:74:08:59:e8:00:ac:92:7c:d7:dd:
39:77:51:b8:7b:14:02:6a:d5:12:6a:3e:b3:80:c6:5f:4d:b3:
e3:49:7c:2e:55:65:98:3d:5e:48:d4:9c:9a:33:9e:ef:07:3c:
79:5e:f8:5f:71:17:ed:b5:57:36:37:c6:02:ea:55:f7:37:ce:
e1:db:a6:ff:9e:ea:8d:d9:9a:48:a5:6d:86:90:24:75:25:84:
a9:a8:2d:5d:1c:6f:f7:c8:ab:e6:73:b6:bd:25:cf:0f:33:47:
74:54:13:d8:2b:e8:6d:0c:1a:85:a0:9a:cc:ba:d5:fd:ad:a0:
c1:0d:e7:6a:84:cf:74:54:9d:bf:e8:33:e7:31:b5:02:94:01:
d5:96:96:f0:af:14:81:78:2a:47:4c:07:2d:64:55:6d:90:84:
e2:17:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org