Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/cwPS6Mwf7m9KePNgF1h2XSgg6jo.roa
File: cwPS6Mwf7m9KePNgF1h2XSgg6jo.roa (raw, json)
Hash identifier: l6RzVj1gVus4/CmXP6SJNW3ydRVn8BYpUrMvKcQi/u8=
Subject key identifier: 73:03:D2:E8:CC:1F:EE:6F:4A:78:F3:60:17:58:76:5D:28:20:EA:3A
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018704F8CE1CC4725BF850FF3D325DC0F44D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/cwPS6Mwf7m9KePNgF1h2XSgg6jo.roa
Signing time: Tue 21 Mar 2023 16:20:27 +0000
ROA not before: Tue 21 Mar 2023 16:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 194.226.42.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:f8:ce:1c:c4:72:5b:f8:50:ff:3d:32:5d:c0:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Mar 21 16:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7303d2e8cc1fee6f4a78f3601758765d2820ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:b2:f7:6b:d9:44:6b:64:ae:71:a5:67:1a:
0a:c2:51:a9:b7:1e:0d:b2:20:cc:0f:84:ae:fa:1a:
68:aa:f3:05:fe:52:fd:0f:12:42:0a:34:32:9d:32:
23:e3:ca:41:1a:f1:d5:f0:e4:8a:53:87:22:8f:22:
5d:ea:b6:3f:db:25:7d:79:32:b6:ec:a6:db:aa:0f:
36:fa:52:79:a0:2c:e5:4b:cb:3a:9c:1e:76:6c:c5:
22:72:39:79:5e:78:d8:5a:9b:ab:eb:a6:60:bc:48:
d7:e7:cb:ac:75:6f:f4:c6:61:3a:36:0d:69:a3:04:
51:f1:6e:22:60:46:72:92:5e:60:58:32:47:76:07:
1e:3e:42:7a:67:e0:3c:a2:d4:a1:2b:53:e1:24:fa:
4d:09:8f:84:f7:42:10:3a:75:00:c7:85:a5:4d:5f:
e1:e1:7d:d6:b5:24:9c:4b:9d:8e:b5:5f:d1:da:cf:
7c:58:65:d5:c6:b0:1e:42:0e:9d:0b:f6:6b:fc:c0:
51:b5:b1:07:bf:40:e3:1c:a9:3c:62:ca:82:8c:5c:
93:c3:1f:53:c9:90:36:38:22:c5:86:41:3c:9c:c7:
a1:f1:56:7c:89:49:9a:e5:48:a4:c5:1a:35:93:f2:
e0:c0:06:4d:a0:b1:2e:27:db:11:01:c7:62:56:11:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:D2:E8:CC:1F:EE:6F:4A:78:F3:60:17:58:76:5D:28:20:EA:3A
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/cwPS6Mwf7m9KePNgF1h2XSgg6jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.42.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5e:33:f4:5f:77:fa:67:d1:0e:79:53:ee:b9:87:7d:6d:2a:
91:10:db:c6:d1:02:aa:8a:46:4e:cd:24:4b:a7:af:d0:36:47:
66:eb:34:28:c6:a7:38:cc:f2:b3:2f:45:91:de:2b:ba:fd:57:
59:b6:8c:69:a5:d4:96:82:e0:d3:73:95:ad:61:b9:bf:9a:bb:
6b:fd:32:59:ef:01:5e:f8:19:8e:35:16:c4:ef:4a:c5:c6:82:
52:bb:d8:c2:e7:5a:c5:cd:b0:09:8c:89:fc:16:ea:99:99:11:
56:b1:04:e0:00:f6:a8:bc:65:92:12:cf:9d:60:3c:91:21:80:
62:60:37:8d:10:88:c9:e9:74:3d:9d:76:5d:55:9f:31:7d:e6:
4c:11:d3:32:31:23:d3:f2:ae:ea:32:fe:3a:dd:4e:e8:b9:1f:
36:6a:34:fa:34:25:e9:1a:89:c0:2a:a9:9a:29:8e:c9:b8:8e:
ba:b9:ad:a0:92:28:99:ed:e4:e6:85:56:c0:b0:5a:af:0e:a2:
11:85:0b:1a:db:54:dc:c7:67:3f:02:e1:ee:69:14:bb:d7:82:
f5:8f:3f:6b:b0:5e:60:6a:56:fd:ff:df:26:36:57:a4:18:8d:
58:35:b7:a6:1b:61:99:f2:f3:b8:b1:06:1a:5a:ff:5f:72:e3:
5a:8f:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org