Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/RCrf4r7aPut0N_HB1Nr0T9zcrI0.roa
File: RCrf4r7aPut0N_HB1Nr0T9zcrI0.roa (raw, json)
Hash identifier: JjpCR1LV1vjW5PRlJdZj7g7XlPI4mwYx337r6o2ZQMw=
Subject key identifier: 44:2A:DF:E2:BE:DA:3E:EB:74:37:F1:C1:D4:DA:F4:4F:DC:DC:AC:8D
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0186F39DC1FACE38E7408C8A056D95DC1844
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/RCrf4r7aPut0N_HB1Nr0T9zcrI0.roa
Signing time: Sat 18 Mar 2023 07:27:27 +0000
ROA not before: Sat 18 Mar 2023 07:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 194.88.150.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 20 Mar 2023 13:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:9d:c1:fa:ce:38:e7:40:8c:8a:05:6d:95:dc:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Mar 18 07:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442adfe2beda3eeb7437f1c1d4daf44fdcdcac8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:ad:1f:77:04:bd:be:ee:50:fb:7c:71:c8:
69:92:62:02:12:5d:ee:4f:e3:a0:28:e9:e3:07:82:
79:92:17:1a:64:3d:c9:e7:44:38:e8:1a:63:e0:33:
d1:bf:7d:59:35:49:6a:83:42:ed:33:a3:76:cf:4d:
64:10:94:cd:4f:d5:0d:05:19:9c:0e:8e:8d:35:e9:
fb:39:b7:3c:b3:2d:b2:33:0c:df:2e:ac:ef:98:3d:
91:15:60:ab:eb:c1:79:77:5f:f5:8e:d8:b2:1a:88:
54:c1:fa:31:ad:ad:9e:ad:5c:bb:75:4e:bf:38:26:
6d:f2:94:44:45:97:a8:4f:01:71:4a:7b:de:8f:7b:
78:2c:88:6d:49:ae:47:e5:2c:ed:cc:b7:a6:a3:83:
d3:a7:8c:6f:dc:68:d8:b2:b6:34:67:b7:dc:9c:92:
c7:c3:b6:5f:19:5c:69:47:5b:21:93:51:8d:b1:75:
c8:08:ca:61:01:96:9d:79:14:12:1e:49:35:b8:6c:
01:63:69:d9:b3:74:53:8f:65:c9:27:f0:f8:1d:10:
5e:0a:5f:91:f5:6e:72:f6:61:2c:7d:4a:21:a9:cb:
66:5b:16:36:b2:c5:5d:d3:53:44:d1:1b:d7:36:36:
cf:2e:ee:ac:48:bd:19:a3:a2:ab:31:a5:ae:58:a8:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:DF:E2:BE:DA:3E:EB:74:37:F1:C1:D4:DA:F4:4F:DC:DC:AC:8D
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/RCrf4r7aPut0N_HB1Nr0T9zcrI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:6e:2f:b2:d4:60:c2:92:c9:23:de:12:ab:d5:31:0e:ba:15:
27:8d:b0:40:ea:74:a8:39:d4:92:7b:fe:77:30:a8:ee:9d:c4:
37:4d:0b:6e:4e:76:10:43:4b:db:9b:de:95:5d:34:8a:47:2f:
a9:91:57:dc:3e:2a:a4:ef:c7:f7:d3:a5:32:b1:32:4c:3d:65:
60:aa:ca:d3:a4:0d:e8:3c:56:3a:df:03:0f:8c:be:93:ff:d3:
d0:28:04:80:2e:1c:25:0a:9f:93:44:94:77:2a:85:e3:e2:f3:
3c:65:2d:48:74:6e:10:1d:48:82:4c:e3:66:19:3e:4b:49:31:
f9:20:7e:84:98:ad:e9:7f:f6:94:94:b9:96:5c:a4:45:4e:81:
ae:21:98:25:57:df:33:16:34:4d:95:38:0d:98:5c:ab:78:6e:
c5:f6:2e:5a:e7:74:d3:bf:2e:c7:8f:1d:24:12:32:3b:be:ba:
cc:72:e6:17:86:4b:e2:c4:42:05:3c:3d:7f:1d:66:7d:f9:5e:
52:1c:b9:4d:e4:a4:91:f9:34:4f:14:d9:13:af:9e:d5:b8:18:
f6:8c:c6:dd:19:7c:37:88:35:e7:be:5e:0d:e9:07:66:1f:5b:
66:66:68:fe:c0:e4:48:c1:9f:11:05:73:28:a4:8a:85:69:03:
d8:b5:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org