Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/1-dZq8d4ARO_tejqTGVwDONAejJM.roa
File: 1-dZq8d4ARO_tejqTGVwDONAejJM.roa (raw, json)
Hash identifier: CO9EBmISIlr4q4xRMVIYhQT70yLjvcAHolmDmi2xpcA=
Subject key identifier: F9:D6:6A:F1:DE:00:44:EF:ED:7A:3A:93:19:5C:03:38:D0:1E:8C:93
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 0185730CE772E6C9F582AB18B8947262D7F6
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/1-dZq8d4ARO_tejqTGVwDONAejJM.roa
Signing time: Mon 02 Jan 2023 15:15:03 +0000
ROA not before: Mon 02 Jan 2023 15:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 194.11.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:e7:72:e6:c9:f5:82:ab:18:b8:94:72:62:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Jan 2 15:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9d66af1de0044efed7a3a93195c0338d01e8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:aa:24:18:5f:24:cd:2f:b9:6e:17:bf:da:
c4:89:44:cb:03:7e:79:cb:ba:6b:74:6b:94:6e:5d:
da:25:cc:46:0b:10:eb:16:9c:58:ee:f1:23:37:da:
71:9f:e3:6e:30:54:06:cf:94:ab:07:27:af:e4:38:
9e:70:da:a9:04:44:c0:aa:4e:dd:2b:41:a6:a3:d1:
1f:59:5a:cc:7f:9c:41:9f:47:36:d4:a1:0e:92:be:
ee:b4:e7:d3:23:b6:24:38:64:fa:2e:3d:a5:62:9c:
f2:23:94:1c:58:dd:99:57:5c:74:5c:6a:04:2f:c4:
79:24:b1:18:88:62:49:6f:5f:4a:e3:54:5e:2f:69:
29:76:8d:4f:2e:53:e1:73:b2:76:7d:60:99:47:66:
dc:ed:7e:20:3a:ec:8f:ff:35:b6:7d:19:ac:82:18:
e6:4a:39:43:d1:a1:f9:a8:71:89:46:3e:75:9f:b4:
78:2c:e2:8a:4e:d6:c5:ed:2f:07:ba:a6:ae:88:9d:
3f:4c:56:cc:cd:cd:e1:f6:3c:21:7a:b4:c0:48:27:
07:ef:06:a7:2f:00:23:a0:93:d4:1b:2a:6b:5e:29:
50:8c:15:87:29:03:7d:c3:dd:9c:bc:b9:c7:a0:9e:
c7:29:37:57:58:d2:61:c8:a0:63:30:01:2d:e7:3b:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:6A:F1:DE:00:44:EF:ED:7A:3A:93:19:5C:03:38:D0:1E:8C:93
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/1-dZq8d4ARO_tejqTGVwDONAejJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.160.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ed:64:7b:f4:e9:9b:88:7f:65:db:46:59:f6:3b:b6:0a:71:
39:ce:78:4a:f4:a5:10:c8:e1:bf:b1:28:f3:46:e1:2c:92:48:
9b:0b:a8:26:fe:e5:08:2f:25:1f:21:ff:2a:0b:61:8d:0b:69:
14:f8:e2:bc:06:31:32:77:26:05:b0:ed:cf:3a:6b:7d:0b:31:
7c:87:e5:5f:11:5d:30:26:63:c8:37:61:36:d3:51:06:89:c1:
4b:91:30:6c:94:40:3f:bf:e6:84:82:d2:e7:82:90:c7:12:bf:
e1:db:9d:21:00:17:6c:f2:b1:d1:88:8b:8a:ff:f4:54:dc:65:
00:9d:8a:5d:1d:c3:0e:f0:a7:9e:c6:4a:85:10:f4:df:26:34:
b1:e5:2d:bf:a2:d4:d0:81:87:2c:f6:88:5c:fd:5b:b7:b7:70:
ff:cf:de:7e:7a:26:c1:0d:45:9f:15:d7:c5:de:64:1c:fb:bf:
c4:30:31:d1:d6:9f:10:68:7d:d2:4d:99:5a:4d:4f:80:2d:9d:
b8:66:45:6c:68:53:52:e9:e7:53:0f:3c:2b:7d:9b:98:7e:8a:
57:01:4c:22:4a:e6:d3:99:ff:2f:c5:70:a4:98:13:ae:9b:b3:
8c:96:31:a4:c8:0e:0d:83:1b:ef:28:0f:60:e1:d0:3a:5c:16:
a6:4b:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:11 2024 by rpki-client on console-ams.rpki-client.org