Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9V59gHY2tOuy73TzKcedYmN8feE.roa
File: 9V59gHY2tOuy73TzKcedYmN8feE.roa (raw, json)
Hash identifier: AxOqkCTqUJwzBTIJoxRtLsiJ87EQ75VXyX+2tjKQltI=
Subject key identifier: F5:5E:7D:80:76:36:B4:EB:B2:EF:74:F3:29:C7:9D:62:63:7C:7D:E1
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 018EFB94FB69C7BB7E3274D27921124034C9
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9V59gHY2tOuy73TzKcedYmN8feE.roa
Signing time: Sat 20 Apr 2024 12:57:08 +0000
ROA not before: Sat 20 Apr 2024 12:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29577
IP address blocks: 194.146.148.0/24 maxlen: 24
194.146.149.0/24 maxlen: 24
194.146.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 13:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:94:fb:69:c7:bb:7e:32:74:d2:79:21:12:40:34:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Apr 20 12:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f55e7d807636b4ebb2ef74f329c79d62637c7de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:00:d8:ad:96:d3:93:47:4d:7a:2c:bd:b5:
4d:3d:97:97:5d:6a:d3:4e:f5:46:65:e6:b4:a8:e3:
d9:db:c1:66:25:63:4a:30:62:37:48:13:b4:52:ac:
a0:ad:05:13:1a:21:40:d6:c8:49:2c:5f:77:48:af:
e8:5c:a8:5c:ba:3d:ae:bd:48:28:37:a7:51:56:1c:
68:cd:35:2b:49:cb:41:b3:80:ef:17:9d:5a:3f:fd:
46:b0:0e:c7:91:6c:6a:c4:dd:3b:89:d2:63:d3:ec:
e9:a0:c0:88:4e:bf:d4:5c:e7:db:af:6d:ee:2e:6e:
ee:8b:56:67:81:17:23:02:05:4e:ab:b4:c0:8e:43:
39:a8:3d:a7:be:56:f1:9e:5d:02:9c:0c:30:38:e4:
37:54:c1:f3:f1:69:fd:d1:58:a7:36:92:c1:65:92:
ac:06:eb:5e:7e:e1:2a:54:41:74:c0:a6:99:cd:5f:
50:f3:9b:97:03:8e:20:53:54:42:da:0f:0e:ef:ca:
76:ec:1f:f9:92:d7:02:64:1b:d3:cd:1f:1b:c7:89:
84:15:db:20:67:32:fe:c3:69:85:90:f3:f7:67:c6:
ca:59:7c:b4:36:43:82:75:33:b5:d5:ad:0b:cd:c1:
ce:5b:5e:ea:2a:4f:91:cc:fe:21:61:00:d1:51:7c:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:7D:80:76:36:B4:EB:B2:EF:74:F3:29:C7:9D:62:63:7C:7D:E1
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9V59gHY2tOuy73TzKcedYmN8feE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.148.0-194.146.150.255
Signature Algorithm: sha256WithRSAEncryption
81:bf:08:6b:f4:87:35:77:41:c4:4e:75:1a:fb:4c:f7:2a:3c:
da:53:bb:8e:b2:49:24:fd:2a:d4:8f:a0:da:1b:ab:07:16:d5:
de:8d:ab:9e:8f:db:82:a5:70:03:9c:69:78:31:7e:2d:da:46:
ad:1e:3f:5a:89:79:26:32:5e:ea:d3:9a:03:31:b8:f8:f3:6a:
9f:de:5f:bb:c0:6d:f5:56:f6:ff:76:b9:49:12:a7:c3:95:85:
42:b0:a6:70:f8:bf:dd:bc:b0:f9:45:15:f6:62:c8:f6:ca:9d:
cf:e5:24:ca:4a:9e:ed:85:1b:23:9a:12:3c:86:1f:ed:4b:06:
27:cd:a3:67:57:f6:22:81:d9:2d:4d:82:84:f6:d5:8d:29:2d:
87:7c:fe:a6:3c:bd:33:f4:6d:83:64:9a:04:d0:46:f4:dc:27:
27:05:70:3a:ec:25:d9:12:54:56:30:bc:5e:83:12:79:25:97:
7b:13:d9:d6:3f:c8:ac:0f:a3:16:c0:79:a0:13:9a:79:b7:8b:
80:83:eb:c4:39:ba:e2:fa:a6:37:24:8d:51:f5:4f:11:69:0b:
59:07:1c:49:2c:6a:ed:e0:75:f2:31:a5:8f:36:b9:3c:c1:9d:
89:4f:40:c6:40:f5:74:8a:ae:19:36:f4:68:cc:aa:b6:a4:5d:
6d:b1:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:07 2024 by rpki-client on console-ams.rpki-client.org