Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/cvaFpYCxBhLRXVMMtDdd3vKGzgE.roa
File: cvaFpYCxBhLRXVMMtDdd3vKGzgE.roa (raw, json)
Hash identifier: kNiRiB/iyHFED62BHNo3fdVeM6/5dABIE17CntNQijc=
Subject key identifier: 72:F6:85:A5:80:B1:06:12:D1:5D:53:0C:B4:37:5D:DE:F2:86:CE:01
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 018571CC241CB003A6BFB53E3ED797C9936F
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/cvaFpYCxBhLRXVMMtDdd3vKGzgE.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42166
IP address blocks: 194.0.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:24:1c:b0:03:a6:bf:b5:3e:3e:d7:97:c9:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f685a580b10612d15d530cb4375ddef286ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:99:79:ed:99:5a:46:cc:88:f1:81:4c:01:
3c:c3:74:68:07:ac:e7:33:c8:60:83:99:8f:8a:ce:
04:53:c8:48:1b:eb:bc:65:a8:72:4f:8a:96:1c:9d:
b7:39:98:6d:ed:76:e2:c5:85:7d:d5:da:53:21:67:
80:a9:a3:36:c6:56:5d:74:5d:20:64:6c:84:8f:e9:
4e:f8:7b:8f:44:ff:2a:12:15:56:76:49:c7:2d:cd:
22:53:1d:bb:65:7f:48:fc:31:d7:12:41:e2:d8:0a:
e4:c2:09:c7:5e:be:16:80:da:09:3c:c5:44:b4:1f:
b8:eb:86:79:a6:ec:4f:8e:25:f2:c0:e3:0f:63:a6:
46:36:84:72:ee:3a:19:db:26:29:c1:16:86:7a:f7:
08:c4:f7:d6:9c:47:10:73:aa:03:7f:89:ed:14:c3:
af:db:a4:43:51:66:2e:f7:3c:8a:58:30:61:92:af:
bf:23:25:a7:b0:a4:f6:55:f0:5f:01:a2:ac:c7:dc:
d3:ef:11:11:4a:67:9b:41:d5:5b:af:1b:41:4e:4b:
39:01:38:08:5a:ca:35:7f:87:d3:82:08:0b:90:d7:
69:c5:83:db:48:4f:32:cd:94:17:7a:94:d7:98:d9:
5b:4d:57:d9:8f:2b:02:cd:c2:bd:5f:5a:1e:90:d6:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:85:A5:80:B1:06:12:D1:5D:53:0C:B4:37:5D:DE:F2:86:CE:01
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/cvaFpYCxBhLRXVMMtDdd3vKGzgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:30:7d:39:53:fd:cb:77:c4:8d:9b:14:e2:21:7b:ec:ab:53:
72:96:ad:61:8d:06:19:f7:be:fe:4a:46:db:a0:4a:90:01:f6:
fd:46:26:16:9d:de:23:06:f1:4a:13:84:42:b2:b3:6e:80:58:
21:76:08:f4:2f:86:e4:70:9b:59:e9:76:6a:69:5d:c1:bb:6b:
be:6f:6b:68:ee:4d:8e:95:43:c5:32:84:50:9b:71:2b:81:35:
a6:d5:07:21:75:2e:54:04:2d:60:d0:2c:92:48:1d:bd:fa:d1:
b4:4c:60:59:fc:e2:be:9f:b4:cf:ae:05:82:f3:28:48:5a:2d:
33:20:a3:f2:38:54:56:24:f4:75:75:b5:dc:8d:4e:4a:31:6e:
28:22:f3:31:6e:61:7d:19:b9:fc:b4:52:3c:67:cb:82:34:87:
7b:88:e7:cf:34:db:6d:34:d6:97:98:8a:57:33:ad:05:8e:02:
9b:2a:3e:ff:7f:1a:4b:62:13:8c:df:8f:6d:3f:20:4d:bd:e5:
e0:dc:ee:af:29:df:f2:50:87:61:2b:9e:b2:03:33:f9:de:4b:
bd:80:62:7c:f2:d5:c1:1f:4a:e2:c7:81:45:f8:5a:1a:d4:29:
28:54:4a:a8:43:02:21:14:7e:81:96:aa:0c:82:36:6b:14:53:
3a:34:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:07 2024 by rpki-client on console-fra.rpki-client.org