Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/667PKNRdVOZsTWhn0WlM9BpghO0.roa
File: 667PKNRdVOZsTWhn0WlM9BpghO0.roa (raw, json)
Hash identifier: PNhA9oLE/zMPNqvvvDvRQc1c1SDIFRBqMWHb7K3hqzw=
Subject key identifier: EB:AE:CF:28:D4:5D:54:E6:6C:4D:68:67:D1:69:4C:F4:1A:60:84:ED
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0189BB8C418D5073490C3EF22DDC92ACC38B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/667PKNRdVOZsTWhn0WlM9BpghO0.roa
Signing time: Thu 03 Aug 2023 13:17:58 +0000
ROA not before: Thu 03 Aug 2023 13:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201204
IP address blocks: 194.85.102.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:8c:41:8d:50:73:49:0c:3e:f2:2d:dc:92:ac:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Aug 3 13:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebaecf28d45d54e66c4d6867d1694cf41a6084ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:1d:ee:98:73:0d:bc:b2:a8:8f:07:43:47:
c1:72:04:c0:86:99:ec:45:23:f0:67:c3:14:44:f1:
11:73:54:7c:55:f9:93:e3:db:34:33:0c:50:56:eb:
d1:c6:30:33:e9:fd:7b:4a:5b:a5:18:66:84:e3:98:
55:e3:db:13:3d:9d:4e:ba:1d:ce:fc:4d:01:f6:86:
6f:6f:bc:c2:7d:09:7b:51:42:0d:21:45:4f:78:91:
c2:25:c6:b6:e8:ea:47:8d:77:1e:8b:56:b9:e2:fb:
76:d2:46:e4:d9:8a:df:4c:90:5a:88:2f:47:2f:9b:
df:85:af:10:0d:a3:02:75:44:63:7f:a7:99:17:29:
42:07:52:c6:43:28:77:59:08:e5:0d:2e:0c:e3:f3:
60:87:04:5a:69:9d:eb:5f:56:71:14:04:9b:84:bd:
a3:5f:9a:9e:91:1c:d4:d7:fd:4d:72:dd:5a:b6:cf:
80:f6:c4:52:52:97:cb:c1:48:a8:04:ee:8e:90:39:
f9:c7:d4:7d:f5:ff:46:53:ba:d4:99:20:37:60:60:
e1:b1:42:cf:fe:f2:85:89:9c:9f:02:47:69:6e:de:
6c:b4:60:1c:93:ee:ae:7b:e1:c0:91:23:0d:56:e2:
27:cd:51:6a:18:8a:20:c3:7f:3c:cf:03:be:fa:7f:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:CF:28:D4:5D:54:E6:6C:4D:68:67:D1:69:4C:F4:1A:60:84:ED
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/667PKNRdVOZsTWhn0WlM9BpghO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.102.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ab:48:7f:07:8e:9c:79:1a:15:da:ee:ce:fa:13:86:68:23:
13:a9:33:49:47:3a:6a:e2:48:ff:e3:b2:f7:b1:b0:f3:97:74:
e7:f4:84:31:b3:d2:cd:af:24:87:e6:88:c9:3b:4d:0c:c5:6d:
53:5e:ff:f2:e0:f7:c4:d1:bd:7d:b1:65:99:dc:28:99:4a:11:
b6:3e:15:b4:29:45:12:1e:d0:00:fd:2c:87:ab:21:26:f2:d7:
31:95:51:32:81:8f:41:0c:a2:f5:70:4b:ff:97:e5:c2:21:8b:
35:64:31:46:74:67:dd:34:6d:d9:69:6d:7e:62:e1:ad:06:6b:
d8:70:b5:6d:fe:f4:95:1f:9b:ae:ce:ff:1f:19:d7:d9:e5:cb:
8a:ca:cb:3b:2e:ae:d6:3e:b7:eb:10:04:a4:00:81:c2:d9:74:
b9:ef:5d:8e:48:3e:d0:a2:1d:15:78:96:98:aa:3f:8e:76:2c:
dc:20:bd:d2:b1:43:a9:03:f2:23:7c:72:c5:30:bf:e1:7d:47:
a0:16:4c:86:b0:8c:34:0b:5b:f1:6a:5d:75:28:a1:64:61:33:
3b:5d:3d:95:63:b8:ab:28:57:03:71:ea:42:09:a7:fe:37:b1:
bf:40:fe:31:a0:ab:bd:1c:9a:04:78:ab:df:24:04:39:cb:da:
3f:b2:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org