Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/algy5pUKJFtq8y_2llQZS8iloNI.roa
File: algy5pUKJFtq8y_2llQZS8iloNI.roa (raw, json)
Hash identifier: PfnQ7d4jtSdYzIK4TdYyVtTXhBZkEZYDJtsYne5/8qk=
Subject key identifier: 6A:58:32:E6:95:0A:24:5B:6A:F3:2F:F6:96:54:19:4B:C8:A5:A0:D2
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7FD698B3FE4EBDB56219EE5D8441
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/algy5pUKJFtq8y_2llQZS8iloNI.roa
Signing time: Tue 02 Jan 2024 12:34:57 +0000
ROA not before: Tue 02 Jan 2024 12:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43965
IP address blocks: 194.225.48.0/20 maxlen: 24
194.225.184.0/22 maxlen: 24
194.225.192.0/19 maxlen: 24
2001:14e8:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 06:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7f:d6:98:b3:fe:4e:bd:b5:62:19:ee:5d:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a5832e6950a245b6af32ff69654194bc8a5a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:28:0b:54:03:2f:b7:3f:e6:3d:df:01:2a:
d2:4f:83:d9:8e:b3:02:b5:27:e8:07:99:3e:23:00:
3e:6f:6a:ac:16:a8:8a:6b:78:36:84:b0:26:f0:9a:
58:82:0c:e6:d5:ed:2f:65:8b:dd:2c:28:41:da:55:
59:c8:8b:cd:4a:b0:70:b2:02:1f:86:b3:9d:92:d7:
5f:24:fd:56:cd:17:72:0f:c6:37:df:07:b1:d4:a5:
42:51:e3:4c:22:2f:cd:a8:d0:9e:25:ab:98:06:47:
b7:f9:8c:c8:5b:ec:5d:73:79:87:85:77:a7:f9:eb:
6d:79:70:35:5b:57:21:df:d7:53:32:79:65:00:8d:
55:09:74:1d:44:c9:67:f4:5a:e5:ad:0a:40:21:98:
11:58:0f:ca:a6:85:b9:30:d7:db:b1:eb:c2:2f:23:
69:b5:1b:79:74:f8:e0:b8:a1:c7:f1:37:7a:fe:27:
13:56:a6:55:9c:9f:0a:e4:01:21:f6:a7:0e:5b:a8:
cd:5d:f8:59:66:e7:cb:76:30:f6:d7:db:74:ed:e2:
fd:bc:1d:6f:9c:11:81:a6:36:db:4b:d5:ca:cc:99:
f7:7c:3a:f0:bb:b4:50:3e:7f:8d:cf:31:7f:8c:4b:
0e:90:ab:44:44:f3:25:41:68:4e:e0:ec:3f:3b:a9:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:32:E6:95:0A:24:5B:6A:F3:2F:F6:96:54:19:4B:C8:A5:A0:D2
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/algy5pUKJFtq8y_2llQZS8iloNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.48.0/20
194.225.184.0/22
194.225.192.0/19
IPv6:
2001:14e8:2::/48
Signature Algorithm: sha256WithRSAEncryption
33:70:4b:81:f4:61:d9:2a:fa:48:0d:2d:eb:80:62:40:0b:2d:
7b:6d:2a:84:41:85:ad:16:68:13:e4:2d:80:0f:cf:e6:43:6d:
d4:dc:59:f0:20:7c:25:b8:04:3d:3c:55:59:d5:e5:45:79:bc:
9f:29:da:7e:b6:c1:56:fe:93:be:9b:77:8d:36:27:5a:ac:a1:
74:11:6c:43:9e:48:53:ec:7a:65:6d:50:b6:35:b3:e5:94:50:
75:05:37:c3:b0:f3:28:56:83:82:a8:3e:bf:e1:81:bb:f9:b3:
f1:d2:dc:0c:af:00:b2:24:97:25:1b:28:92:dd:d3:c4:f4:78:
c4:a6:c9:26:11:7c:79:1d:7c:47:b8:4c:ae:0c:c1:80:6a:96:
50:3e:a8:67:92:25:07:12:6a:ed:01:84:34:07:e8:f3:dd:c7:
d9:77:6e:ae:94:8f:69:3f:f2:43:b2:f6:73:32:79:d8:0e:e9:
90:04:6a:1e:22:d2:82:aa:56:c4:58:2e:b5:00:64:1c:40:d1:
b9:20:6f:dd:ad:62:52:61:d0:07:3b:c1:be:96:7e:d9:3d:e1:
5a:5c:6b:4c:4d:13:3b:84:86:df:4c:3f:6a:0f:1a:28:a4:25:
80:0c:ce:5e:ce:c7:a4:a0:72:f3:77:9c:1e:70:bb:23:23:3c:
60:b9:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:11 2024 by rpki-client on console-ams.rpki-client.org