Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/wP-a2vG149J3NoZmYBQtObp1NCk.roa
File: wP-a2vG149J3NoZmYBQtObp1NCk.roa (raw, json)
Hash identifier: XF/QMYKuj1kdcNpy7U9k0kLMm0grVd6CcEXWSxCLtgA=
Subject key identifier: C0:FF:9A:DA:F1:B5:E3:D2:77:36:86:66:60:14:2D:39:BA:75:34:29
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 01856CF851498F09DC2E12DE2798063B5302
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/wP-a2vG149J3NoZmYBQtObp1NCk.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29561
IP address blocks: 194.146.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:51:49:8f:09:dc:2e:12:de:27:98:06:3b:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ff9adaf1b5e3d27736866660142d39ba753429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:9a:e2:80:5b:cd:87:2b:3b:3a:85:97:2a:
23:76:43:80:1e:44:2a:50:42:79:07:d1:e8:03:b3:
06:b2:08:cf:df:ed:3d:02:4e:6e:91:ef:76:28:5d:
62:66:32:c2:a2:ad:5a:c0:fd:0e:db:a5:a1:63:bb:
4a:21:cc:23:b4:05:a0:fa:28:af:30:3e:0f:67:74:
69:51:2c:74:87:ca:45:76:b0:a7:fa:bb:c5:ac:00:
25:23:a8:9f:39:ea:fc:61:5d:02:fa:0b:71:7d:09:
65:7b:6f:f6:6f:62:7e:bf:f4:69:6e:6a:72:01:b9:
19:b1:fc:dd:e9:a7:f4:9b:7d:61:44:a8:35:88:03:
08:5f:c0:01:b9:b6:c0:24:6a:99:2c:c2:9a:0a:af:
dc:d0:9a:c3:2d:eb:b3:fe:30:5b:82:24:83:3d:0f:
38:62:c2:80:cf:ef:7c:67:60:8d:49:64:6e:94:3f:
13:3c:71:c6:a7:fb:b7:ad:8b:bd:40:dc:15:ea:76:
0c:12:cc:2d:d1:be:59:b1:fd:d4:fc:67:e0:ec:67:
c7:25:3e:af:ea:97:81:13:7f:16:a2:d5:61:a4:94:
92:38:89:d6:ef:ef:fc:46:82:03:3b:32:29:1a:97:
28:89:20:a0:5c:41:25:b0:d2:e5:19:f7:58:d2:56:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:9A:DA:F1:B5:E3:D2:77:36:86:66:60:14:2D:39:BA:75:34:29
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/wP-a2vG149J3NoZmYBQtObp1NCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.119.0/24
Signature Algorithm: sha256WithRSAEncryption
74:81:9a:c7:4b:ae:20:ce:b1:e3:f1:46:ee:98:fe:cb:77:3d:
09:56:b9:28:97:cb:87:aa:af:76:1d:e2:03:6b:98:1d:25:26:
73:f5:34:c9:5b:b4:f8:a7:84:2d:96:8c:d6:b8:72:f7:03:f8:
d8:17:71:33:5c:62:e8:af:ef:2f:b3:75:f0:2f:ba:7a:6d:ca:
bc:37:50:18:0b:4e:ea:27:95:64:9e:86:b5:2c:fb:80:80:5d:
ac:f6:48:13:1d:13:f5:be:81:b4:0b:22:4a:37:1b:6e:38:ce:
ed:34:a0:6d:a0:f5:65:85:d4:6a:6c:85:3f:b0:7d:61:86:74:
0d:e7:5a:60:a8:80:97:9b:b8:3d:ef:21:11:c1:85:bf:e4:32:
a7:98:af:00:ab:12:00:56:79:0a:e2:7f:4b:d4:2d:ef:fe:ae:
33:e3:7a:c2:8f:96:77:58:94:8e:25:16:d4:52:bb:b2:0a:7d:
92:60:1c:b5:33:e5:e2:14:dc:90:40:40:2c:13:d5:3d:50:aa:
a6:37:50:b3:94:2b:22:4d:1f:f1:2c:5a:20:ac:67:ec:c4:3f:
1a:e8:a6:0e:0c:9a:8b:d3:56:42:90:f2:a2:7f:9c:5c:0a:a4:
d6:83:bd:d1:fb:32:b3:42:ec:2c:df:55:d7:09:0f:00:04:02:
c8:cf:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:54 2024 by rpki-client on console-fra.rpki-client.org