Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLbn5w6J5HclfjPmZX1uOXi1NP8.roa
File: yLbn5w6J5HclfjPmZX1uOXi1NP8.roa (raw, json)
Hash identifier: M7yFukoPKiGhNsev9P/DtZ3dKOElAg4Tf6fVBTYui6I=
Subject key identifier: C8:B6:E7:E7:0E:89:E4:77:25:7E:33:E6:65:7D:6E:39:78:B5:34:FF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018B3D2DB296768C30A7A25875D3900DF48F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLbn5w6J5HclfjPmZX1uOXi1NP8.roa
Signing time: Tue 17 Oct 2023 10:28:06 +0000
ROA not before: Tue 17 Oct 2023 10:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9056
IP address blocks: 194.149.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:2d:b2:96:76:8c:30:a7:a2:58:75:d3:90:0d:f4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 17 10:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8b6e7e70e89e477257e33e6657d6e3978b534ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:83:15:a4:6e:e8:0a:60:9d:36:d6:e1:56:
fe:cf:38:24:22:ff:69:4d:c5:af:13:dc:5b:a3:cc:
ad:10:0e:58:7a:ed:e9:9c:da:c4:39:44:34:c0:8e:
1c:62:bb:e1:3b:1d:c3:3c:e3:34:22:63:8a:b9:1f:
7a:02:62:d6:5f:67:e6:1f:41:b6:5d:03:64:68:4a:
50:a9:7b:7d:f7:94:03:fb:59:0c:90:d0:5b:50:68:
11:eb:9d:3e:a3:de:f9:43:bc:2a:56:a2:11:44:3b:
2e:70:e4:fb:a6:04:79:b3:ce:15:e4:63:42:3f:f6:
e6:5e:2f:1a:f5:10:f7:51:91:cf:98:84:d8:ad:b0:
c7:f8:f3:d6:7f:07:66:0e:0e:21:e9:f6:71:5b:15:
82:77:df:44:4a:c2:e5:ef:33:87:9e:5b:0f:40:b9:
9c:39:41:d4:24:41:f9:2f:23:18:b6:25:f4:09:0b:
c0:a9:3c:24:01:5f:08:10:35:ae:9a:8a:0d:83:6d:
77:64:8b:fe:ff:ca:a0:b5:ec:50:8b:af:5a:85:0c:
66:a8:b7:dd:73:bf:b7:0d:97:4a:16:bd:7c:9e:8f:
a9:c1:66:b1:12:2b:5f:4b:31:e3:b9:ec:98:64:28:
78:28:0e:d1:5e:63:92:68:69:0f:d0:94:a2:a6:3e:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:E7:E7:0E:89:E4:77:25:7E:33:E6:65:7D:6E:39:78:B5:34:FF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yLbn5w6J5HclfjPmZX1uOXi1NP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6d:64:77:06:83:29:c1:49:e8:0a:7a:20:82:9f:1d:9b:55:
eb:2c:a2:9a:f9:b4:4b:9e:ad:6f:9d:31:5c:cf:27:d0:d4:c7:
34:e7:55:ef:5f:e7:b1:a2:0d:4b:9a:7b:59:fe:cc:32:fc:86:
a7:91:d4:d4:0e:07:16:3a:86:74:de:9a:fa:4a:b9:c8:9f:5b:
aa:f1:38:b8:27:35:90:c8:6b:6c:0b:8d:24:95:00:57:dc:b1:
52:8d:e8:c6:f5:ad:49:db:30:fe:74:5f:31:37:52:8a:b4:29:
4b:35:8d:c0:b4:23:17:9e:62:33:38:ec:a1:d7:9c:b7:c6:13:
08:c4:9b:02:fc:6a:32:ba:2c:94:5d:d3:21:64:bd:ac:f6:50:
f9:6e:3b:bb:20:6f:76:7c:aa:c8:80:ec:4b:ed:00:f9:e8:d8:
a6:1f:a3:e5:95:19:7e:f1:a4:76:b8:c8:a6:b6:e7:08:64:94:
bd:57:ea:54:da:82:fa:11:1a:a7:a3:21:50:64:18:ec:a4:f9:
11:cc:3f:2d:eb:55:87:01:c5:44:13:9f:ed:63:5d:6e:3a:19:
31:4a:70:20:33:fd:fd:0f:38:5e:0f:dd:7c:a4:96:17:e5:cb:
7e:d4:ee:98:95:6f:4f:c9:c5:4e:80:17:08:b7:b9:b0:03:38:
c9:bb:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org