Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T1aZ5fdMD1mln2Z_7xRouzQ4N4k.roa
File: T1aZ5fdMD1mln2Z_7xRouzQ4N4k.roa (raw, json)
Hash identifier: V6qRV2z58jGwkBrZlMVTj6r8JI4cR7g2OwxFIXE8KJ8=
Subject key identifier: 4F:56:99:E5:F7:4C:0F:59:A5:9F:66:7F:EF:14:68:BB:34:38:37:89
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01869D596F8E062B457FF39AC1FD866EA851
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T1aZ5fdMD1mln2Z_7xRouzQ4N4k.roa
Signing time: Wed 01 Mar 2023 13:25:29 +0000
ROA not before: Wed 01 Mar 2023 13:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48156
IP address blocks: 194.137.237.0/24 maxlen: 24
195.165.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:59:6f:8e:06:2b:45:7f:f3:9a:c1:fd:86:6e:a8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Mar 1 13:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5699e5f74c0f59a59f667fef1468bb34383789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:9a:ee:3f:be:3e:ab:7a:50:3b:71:69:06:
89:34:f2:94:11:c2:2e:66:71:63:19:2d:93:54:d3:
f4:3f:06:df:0a:12:03:08:3d:16:b3:69:69:10:97:
d4:71:4a:bc:07:e9:db:6e:4e:fc:5f:d3:ba:60:19:
2b:ee:cd:ac:ab:8b:04:99:e6:a6:9b:38:76:cc:f7:
f4:ad:d7:97:cf:28:84:2c:5d:2d:cb:59:54:09:6e:
9c:4b:e1:f7:ae:ee:13:07:bc:3f:eb:9a:15:d0:4e:
c6:b5:d0:fb:f8:33:24:1f:c5:77:fb:64:62:27:02:
44:13:cb:3a:a2:9a:c1:b9:49:6a:01:fa:cb:0b:a3:
8f:19:0d:95:b6:e6:60:17:08:4a:a1:84:c4:ea:cd:
f2:58:ee:1f:5f:cd:61:2e:5b:60:98:20:6f:b4:21:
af:43:82:39:e5:2d:06:97:96:a0:96:d5:53:50:a5:
17:d1:bf:a4:f5:85:48:ed:eb:bc:b5:9b:0f:d3:cd:
89:42:69:ce:51:53:8e:bb:63:76:b0:bd:27:f3:e0:
aa:4c:ae:2b:86:37:c1:8d:5e:3b:a0:bc:d3:42:ea:
aa:1e:b2:db:f3:d8:56:6a:48:a1:9e:25:ad:86:21:
68:33:8c:20:bb:bd:15:3d:03:10:8f:4d:30:46:21:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:99:E5:F7:4C:0F:59:A5:9F:66:7F:EF:14:68:BB:34:38:37:89
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T1aZ5fdMD1mln2Z_7xRouzQ4N4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.137.237.0/24
195.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4e:75:a1:0f:6a:58:32:cf:74:ca:5f:1d:6b:14:72:9e:83:
c7:e9:b9:b1:e3:89:19:8e:c8:2b:1d:93:1f:03:fe:e2:03:14:
4c:9d:29:bf:22:8f:10:4c:56:e7:1a:2d:59:0d:33:d0:76:4f:
cf:fa:ca:8e:2a:a9:4e:ab:88:b1:f7:db:1d:4a:d2:ad:f1:ff:
19:3d:56:79:d0:54:29:b7:e6:d7:29:bd:a8:18:70:b4:d9:91:
4a:c3:68:6b:f1:1f:45:3e:a7:50:c9:ab:86:4a:45:d3:24:e3:
9e:01:30:9f:6e:17:c4:81:0f:a1:47:60:ab:e8:26:94:75:dd:
94:7f:31:00:92:c2:19:19:65:13:c4:ae:5c:31:16:90:ab:76:
fe:18:b2:f2:9c:12:e7:c8:23:55:3e:8c:5e:3c:51:b2:6c:34:
0f:05:3d:19:4c:1e:51:36:f5:ac:76:00:2a:ed:2f:bd:ca:44:
2a:dc:81:92:16:e7:99:15:54:45:68:f9:e1:b7:46:ad:a3:5a:
88:da:9c:36:17:6d:a3:1e:2a:fd:1d:2a:46:af:c2:f6:ca:22:
44:0f:95:3f:55:5c:e6:f5:19:87:d7:57:5c:1a:29:da:96:c5:
2c:7b:7d:fc:61:4e:1b:8f:6c:70:30:75:10:a2:20:1a:58:df:
1a:7d:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org