Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c1PfgA1HyzzMUjrOAEKl8pOU-hg.roa
File: c1PfgA1HyzzMUjrOAEKl8pOU-hg.roa (raw, json)
Hash identifier: MnxcAD5VUmaNCDmYrj33k1En1pAJ/FWMcp+Q5Rh8/cI=
Subject key identifier: 73:53:DF:80:0D:47:CB:3C:CC:52:3A:CE:00:42:A5:F2:93:94:FA:18
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE6AE088D5A197DDAEB865FF7EBD4
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c1PfgA1HyzzMUjrOAEKl8pOU-hg.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9056
IP address blocks: 194.149.66.0/24 maxlen: 24
194.149.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 17 Oct 2023 10:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e6:ae:08:8d:5a:19:7d:da:eb:86:5f:f7:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7353df800d47cb3ccc523ace0042a5f29394fa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:3d:e9:ef:42:69:73:f0:e7:99:c7:b9:de:
1b:02:7d:37:e2:b1:02:50:a0:eb:76:fc:b7:6b:1b:
86:02:0c:fe:4d:de:99:f5:32:c3:a3:d3:ae:70:b9:
fa:f7:91:16:59:6c:bc:cb:63:ef:84:38:ec:bb:0c:
ec:d0:27:ae:ac:bd:bc:45:bd:12:37:7a:56:eb:fa:
09:ed:17:36:31:79:ae:80:25:41:48:a7:3e:03:2c:
bb:b1:66:33:b0:58:b6:85:24:32:83:69:a8:00:2e:
6b:f6:cb:39:9d:ca:c4:f2:b5:5a:eb:73:d2:93:ef:
7f:79:e0:9e:d4:16:2b:4e:5a:5b:77:2a:90:c2:86:
24:b9:d0:99:0a:aa:e3:f5:c3:28:d0:bc:3d:22:e3:
e1:75:28:a1:91:ad:3a:16:30:ff:81:4c:f9:7b:5f:
05:ae:69:8d:18:50:c0:5c:40:58:ab:a5:b3:59:d6:
4e:9c:61:51:d9:b0:1d:56:8f:09:3b:65:97:ee:4a:
a2:87:9b:09:4f:3b:3b:9a:e7:f8:c3:15:d3:35:08:
ba:b4:12:52:f6:2e:f9:d0:4f:f7:a9:15:27:b2:39:
b9:f0:14:fa:38:95:fa:13:f3:08:06:05:e0:c0:82:
99:71:9e:96:e5:b3:a1:c2:b5:51:b8:68:77:97:7e:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:DF:80:0D:47:CB:3C:CC:52:3A:CE:00:42:A5:F2:93:94:FA:18
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/c1PfgA1HyzzMUjrOAEKl8pOU-hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.64.0/21
Signature Algorithm: sha256WithRSAEncryption
92:79:6a:f9:47:ee:72:54:ea:2f:31:27:33:64:8e:b7:e4:f7:
da:37:21:38:40:d6:66:cb:b6:98:6e:ca:22:d5:16:98:a9:3b:
54:8a:12:4d:03:d0:dd:7e:26:b2:27:ad:b3:03:66:2e:d0:a2:
e9:ed:1a:c2:ba:a8:b8:e0:89:af:f7:72:36:51:6f:fb:95:e6:
c1:3f:a8:72:93:7d:de:44:75:f5:23:15:c2:1b:f1:16:83:4f:
5c:e5:81:f9:8b:29:0f:4c:29:f7:df:02:72:3e:c1:f4:38:7a:
c9:ff:94:ce:ed:c6:af:a7:33:ec:8e:d1:fd:07:1f:35:f7:02:
d2:e9:3a:8f:fc:ac:63:d1:bb:77:8c:7d:aa:e8:4b:4b:0f:16:
5c:f1:9d:d1:a2:dd:b8:54:63:da:da:2c:28:93:f0:83:19:7f:
09:dc:d2:aa:8e:29:b0:9d:75:3a:80:c2:b7:75:a6:6e:f4:16:
40:e1:31:57:53:7f:82:05:d2:e8:f5:c7:65:4a:17:c5:82:b6:
c7:a7:29:55:ea:b7:24:f8:42:d1:ff:86:bf:8c:bc:b6:95:56:
a1:f5:70:67:a2:59:0b:9a:de:d4:af:64:a4:72:c6:fa:90:93:
85:a7:79:9c:01:b6:55:d4:e2:bd:04:6b:4e:92:e5:5f:4d:89:
08:a2:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org