Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/SUxnSf1ikh5c25nYfno0ZK9XWIM.roa
File: SUxnSf1ikh5c25nYfno0ZK9XWIM.roa (raw, json)
Hash identifier: 8kHsDg6T8plSrNdwTtA9FNpLDBINRxB2HHSlsTyiWyg=
Subject key identifier: 49:4C:67:49:FD:62:92:1E:5C:DB:99:D8:7E:7A:34:64:AF:57:58:83
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 019275E84FABA27F65D25337440EA499A135
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/SUxnSf1ikh5c25nYfno0ZK9XWIM.roa
Signing time: Thu 10 Oct 2024 10:10:11 +0000
ROA not before: Thu 10 Oct 2024 10:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 194.150.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:e8:4f:ab:a2:7f:65:d2:53:37:44:0e:a4:99:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Oct 10 10:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=494c6749fd62921e5cdb99d87e7a3464af575883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:8e:24:fe:28:f3:92:c4:9f:dd:7c:84:46:
60:7e:d9:8d:0b:a5:f7:78:0d:63:b9:04:8f:65:8c:
c8:06:ac:89:4d:b3:25:fd:95:c4:a5:e1:79:d4:68:
12:b9:60:07:a8:c1:2d:40:5a:30:3e:e4:d7:76:23:
4e:1a:73:3b:8a:e5:65:72:93:a5:9d:83:89:62:82:
9c:8b:36:10:8e:b9:75:1a:64:05:02:32:c8:c7:46:
9c:a3:67:c6:5c:13:11:3d:77:47:9c:48:76:50:18:
6b:76:9e:d2:03:17:4f:be:af:35:1e:9a:b9:dc:1a:
c1:df:bd:5b:de:67:87:68:8e:6b:7b:e3:4a:16:87:
3a:32:69:29:63:30:9a:4e:cb:3c:0a:d7:1b:99:36:
42:f5:ca:34:13:4c:ab:04:9a:8c:00:82:73:55:38:
3b:4e:af:e0:8a:0b:a3:29:54:1a:f0:9a:0d:44:c7:
e2:5c:86:96:cf:6e:77:f7:91:a0:3a:62:7e:59:6c:
57:e8:f0:d9:1a:03:6c:36:ba:5a:c9:90:e6:da:06:
d9:59:3d:22:40:74:a0:34:87:25:26:08:fb:88:11:
fc:21:79:4c:41:1e:09:73:25:2a:c0:c0:3a:d8:78:
48:7f:70:ec:7a:f6:e5:04:1b:df:2e:79:fa:52:2e:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:67:49:FD:62:92:1E:5C:DB:99:D8:7E:7A:34:64:AF:57:58:83
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/SUxnSf1ikh5c25nYfno0ZK9XWIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e9:32:0d:c1:3c:1d:cf:53:5e:18:05:c4:2a:22:b0:b7:28:
c0:be:23:22:df:18:15:21:d3:90:98:fe:f5:8b:4f:17:b2:92:
51:fd:72:b0:97:10:c6:6c:f6:9f:f2:8e:e5:23:6d:80:90:95:
87:b2:93:73:0e:80:3f:c3:9f:78:10:c6:f8:0f:85:36:95:49:
5b:7a:a9:10:03:ce:20:b8:19:b5:8f:ed:e7:2a:b9:f7:3e:a0:
df:b7:1e:35:cb:47:3a:b7:4c:89:ab:9a:8f:0b:fc:58:92:98:
27:6e:7c:43:d8:be:28:69:4e:8a:46:7b:02:3e:15:35:1f:04:
51:4f:35:b2:e1:68:50:2a:49:0b:c7:74:00:f2:e3:01:45:f6:
02:92:21:0e:47:5b:f4:8d:2b:d1:d2:5f:91:02:3b:a9:cc:e2:
f7:1e:94:88:53:62:41:71:16:88:e7:d7:d1:2d:66:5e:2f:56:
13:29:63:89:48:84:ee:19:b2:18:65:93:3b:f3:2c:79:c1:1b:
f7:34:4b:a5:3a:15:a7:48:10:24:ef:74:da:d3:1b:36:b1:85:
70:4f:e7:ca:b5:fe:08:90:56:c1:37:7f:77:11:4e:60:c3:6e:
19:b8:bf:13:c3:d6:b3:49:84:50:d7:b6:47:8e:12:3a:9c:9f:
3a:98:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org