Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/_mqdIoCHtT8OlP9hIiB_hcFNFec.roa
File: _mqdIoCHtT8OlP9hIiB_hcFNFec.roa (raw, json)
Hash identifier: ApqsyWpfEoIH8/1kOUwWXPIks9HE5zG15xg0q7aOrhk=
Subject key identifier: FE:6A:9D:22:80:87:B5:3F:0E:94:FF:61:22:20:7F:85:C1:4D:15:E7
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0186F39DC1219189349DA8E990BE2C86F267
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/_mqdIoCHtT8OlP9hIiB_hcFNFec.roa
Signing time: Sat 18 Mar 2023 07:27:27 +0000
ROA not before: Sat 18 Mar 2023 07:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.88.150.0/24 maxlen: 24
194.88.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 13:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:9d:c1:21:91:89:34:9d:a8:e9:90:be:2c:86:f2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Mar 18 07:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe6a9d228087b53f0e94ff6122207f85c14d15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:83:6c:bb:f5:07:32:3a:57:89:36:16:fe:
76:6a:6c:76:42:2e:12:f9:87:93:af:e6:6e:51:67:
65:81:94:a4:5d:8f:c9:c4:37:eb:56:df:75:8b:44:
49:c2:dc:29:46:00:e5:c6:58:ba:1a:19:ce:2e:53:
8d:a0:55:13:fc:d0:c8:77:ce:52:d9:5a:33:56:a0:
7f:45:3a:61:6e:07:4d:31:a7:d1:c2:72:59:55:40:
dd:f8:85:92:60:6f:06:e1:7f:8e:a6:81:84:58:40:
df:b5:1d:6d:00:20:68:a6:78:f6:51:58:b2:0b:b6:
05:47:8d:9d:bc:d7:ad:11:ab:51:06:d2:de:0f:19:
1d:6f:ed:64:3c:06:d2:91:98:59:49:fe:a4:a2:a4:
59:7e:03:b7:6a:fe:23:d2:e8:07:b0:f2:d8:6c:b7:
31:89:a6:47:c8:8e:23:3b:1a:d9:2d:ec:bf:42:a6:
d0:0b:e4:e2:5f:69:a7:bc:ab:13:16:f8:5a:27:47:
56:0d:b1:f1:2b:57:93:e9:a3:30:2a:5e:b0:d4:b2:
b4:f8:f4:6b:97:d5:c3:ca:91:ee:b9:19:00:53:05:
f0:7c:bc:8e:73:93:f7:2b:82:cb:b6:c0:2d:90:de:
e4:fc:64:ed:03:d7:ff:96:fa:f2:bc:74:6d:d1:4a:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:9D:22:80:87:B5:3F:0E:94:FF:61:22:20:7F:85:C1:4D:15:E7
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/_mqdIoCHtT8OlP9hIiB_hcFNFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
Signature Algorithm: sha256WithRSAEncryption
68:92:b6:01:e4:6c:51:83:5c:87:67:c4:84:7c:28:2c:80:ec:
53:8c:25:45:17:f0:6f:c1:f3:63:0e:d0:cc:1a:07:a2:b7:06:
13:ea:6a:3b:85:a6:ab:7d:05:2a:72:97:71:6b:d8:f5:9e:1a:
ba:a8:01:a4:c0:ab:57:1f:eb:e8:bc:1f:b1:71:3e:33:4b:cf:
cc:6f:33:49:7a:a1:2e:db:5b:ea:28:80:40:59:3a:91:13:7c:
f8:00:4c:13:4f:66:3a:93:2a:84:29:0c:c9:1d:5f:21:ce:45:
3b:9d:13:9f:e6:60:49:8b:70:eb:53:cb:88:82:67:80:0e:43:
6d:c3:57:04:97:6c:d3:09:23:3d:be:3a:ef:31:98:19:78:21:
cb:90:56:bf:a6:6a:1a:75:41:9a:a4:90:4c:ea:ac:68:f1:39:
8a:b4:93:ed:28:c8:c7:f5:20:cd:c0:03:0a:bd:62:48:3f:95:
ec:68:1f:90:ce:e1:6b:c6:e8:86:f4:8a:b9:da:ec:d8:30:2b:
71:6b:73:ce:8c:e9:a5:1f:4e:aa:98:ef:17:73:08:69:9a:0f:
fb:4b:86:62:85:83:a2:cc:a3:b7:c4:5f:d0:9b:65:6f:5b:79:
b8:9d:14:cf:97:57:47:ac:07:aa:9e:56:09:75:ca:56:d5:29:
40:cb:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org