Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/gK1YewZ3yWePt2twFMEwe0-g7LM.roa
File: gK1YewZ3yWePt2twFMEwe0-g7LM.roa (raw, json)
Hash identifier: ej2wzeCkotFrzcd6twUkzS/4gJdC7FeapjLI+aKJpdA=
Subject key identifier: 80:AD:58:7B:06:77:C9:67:8F:B7:6B:70:14:C1:30:7B:4F:A0:EC:B3
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01856D93FE31BDCC9C0CEF49D17676F4EB9B
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/gK1YewZ3yWePt2twFMEwe0-g7LM.roa
Signing time: Sun 01 Jan 2023 13:44:53 +0000
ROA not before: Sun 01 Jan 2023 13:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57107
IP address blocks: 194.190.129.0/24 maxlen: 29
194.190.128.0/24 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:fe:31:bd:cc:9c:0c:ef:49:d1:76:76:f4:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 13:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ad587b0677c9678fb76b7014c1307b4fa0ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:7e:75:a4:b3:68:80:ad:33:e2:ed:46:6f:
0f:6d:97:fd:e2:1b:4b:f3:4f:c4:71:b8:62:c3:f7:
af:b2:7a:f7:5f:7e:c3:e6:ea:31:6f:0b:e2:b2:4e:
6a:43:26:3e:de:79:c8:2b:f2:be:f5:0c:27:6c:56:
17:a3:b6:70:93:54:a4:eb:64:e0:03:91:34:b3:76:
91:b9:eb:55:8d:e7:9a:27:0e:0f:09:68:01:b3:d8:
2c:f0:6f:d9:16:26:86:dd:b3:00:39:25:db:0d:3d:
85:f1:53:e1:c9:17:c8:60:81:0e:a9:aa:ad:d9:bf:
1b:5b:04:a6:29:08:ce:56:e9:2f:96:dd:a7:37:ff:
dc:5f:6d:ae:00:fd:d3:33:58:a6:87:d6:07:9e:70:
4c:9c:9f:4b:89:56:ed:9e:c8:50:ac:18:b9:d5:61:
f0:94:9b:e7:dd:09:32:cb:d5:19:ac:ab:ed:f1:b1:
8c:e8:7c:d5:01:c5:52:7f:ba:a5:8b:f7:d6:f0:fc:
87:1c:47:96:3f:36:9a:41:9b:83:65:f4:c7:65:5e:
9c:f6:07:b0:8b:b1:98:41:2f:16:22:37:a6:85:2f:
89:76:d5:d7:3a:ad:95:a6:4d:d9:90:c5:76:36:c5:
7b:ec:fa:89:e6:ee:a9:f6:ba:5d:25:e5:96:0b:71:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:58:7B:06:77:C9:67:8F:B7:6B:70:14:C1:30:7B:4F:A0:EC:B3
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/gK1YewZ3yWePt2twFMEwe0-g7LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.128.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d1:d6:69:ae:2d:29:a4:07:ae:89:73:4f:4f:9c:ce:9d:9f:
33:4f:5d:46:3d:dd:fb:4a:39:de:ba:8c:bf:23:91:3a:62:de:
20:2e:06:3e:bb:67:66:cf:a5:22:43:bc:fa:e1:33:fc:63:36:
01:13:dd:69:88:93:73:82:48:74:19:8a:ce:ed:8a:f3:30:8b:
0e:37:9f:a2:68:4d:a3:59:cb:56:73:ee:c4:22:31:75:8d:fd:
07:7c:3b:74:33:a0:06:f4:99:c6:fb:30:34:27:14:57:36:bd:
3d:34:4e:8a:19:aa:1b:69:28:bb:cd:d5:0f:89:85:f2:5d:7f:
3b:01:4e:be:b6:2a:13:da:06:d2:ee:aa:64:de:0c:f7:ef:49:
19:90:34:59:e9:c7:f1:a2:01:a4:c6:d0:22:03:37:d0:b8:42:
d2:c5:3c:2f:33:9d:69:07:60:49:35:90:0f:21:4e:4b:b9:85:
36:91:f4:e2:f7:54:66:0a:a5:85:cc:ba:67:b6:d4:fe:95:93:
34:9a:88:96:02:64:1e:46:af:ad:c5:c3:b0:41:b8:2b:17:0e:
be:93:d2:81:5c:cd:54:ad:70:a3:85:2e:36:2a:d2:d8:de:39:
b2:a3:a2:3b:e0:c6:15:18:d8:de:f8:2f:26:0a:09:0b:c7:07:
5c:cc:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org