Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/Kcwa4aL1x0DnhFSvT_Q-_9gLu2g.roa
File: Kcwa4aL1x0DnhFSvT_Q-_9gLu2g.roa (raw, json)
Hash identifier: klufK6+VScM+UOSRbrsfcZodmzrEv6ljyesOlnYi+xk=
Subject key identifier: 29:CC:1A:E1:A2:F5:C7:40:E7:84:54:AF:4F:F4:3E:FF:D8:0B:BB:68
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0185723A344EC26A98AC57E19BD3C4168D3B
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/Kcwa4aL1x0DnhFSvT_Q-_9gLu2g.roa
Signing time: Mon 02 Jan 2023 11:24:55 +0000
ROA not before: Mon 02 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31537
IP address blocks: 194.151.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:34:4e:c2:6a:98:ac:57:e1:9b:d3:c4:16:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29cc1ae1a2f5c740e78454af4ff43effd80bbb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:f4:9d:3f:fc:70:98:5e:aa:48:e2:ae:04:
8e:a5:f8:93:84:ca:4d:8b:24:56:78:90:1b:a5:07:
16:30:08:a7:07:7a:9d:ac:3d:af:36:c5:3b:c9:6c:
bd:5d:a7:dd:0e:c9:78:f3:7e:cb:41:cd:8a:38:d1:
29:7a:27:23:57:5f:c1:b4:11:f5:ea:a4:77:f4:f2:
67:ca:dd:90:8e:e2:34:9d:48:64:fa:ad:7a:47:81:
50:89:1a:ec:d9:ef:f9:ad:41:06:b7:5d:c0:36:76:
2a:42:62:51:79:9a:f2:a4:91:8a:7f:88:61:36:88:
fa:62:76:ba:de:96:37:3c:c1:45:2f:9d:5e:c3:fb:
81:7e:88:e4:22:3c:4f:d6:4e:21:9f:e0:cc:f4:bf:
98:e4:78:bf:d7:05:24:d8:7b:32:7c:f9:2c:e0:dc:
9d:c5:aa:ce:98:70:0f:a6:a4:99:90:d7:1e:23:fb:
6b:80:e5:32:ad:49:2d:37:70:5f:f8:52:4d:11:38:
d4:ad:33:4f:8a:c9:25:4a:bc:b1:c2:a0:34:7a:54:
03:a4:2c:27:37:45:5f:53:47:25:54:de:c7:a6:52:
8f:a8:03:39:30:a4:7d:8e:64:79:e0:34:0c:e1:c4:
9f:5d:4f:26:65:52:75:5e:9f:75:4a:dd:a1:af:24:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:1A:E1:A2:F5:C7:40:E7:84:54:AF:4F:F4:3E:FF:D8:0B:BB:68
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/Kcwa4aL1x0DnhFSvT_Q-_9gLu2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:34:1c:59:b4:99:a2:6b:be:2e:35:38:a1:18:72:49:ec:70:
17:73:12:86:fc:34:d0:f8:55:95:1c:48:10:75:27:b4:3d:67:
7c:66:9a:38:ac:34:7c:83:97:26:f7:88:e4:2b:b0:1c:71:20:
32:a7:8d:b9:28:e2:46:4f:a4:ec:70:95:03:b0:b3:53:97:18:
e0:57:40:ae:80:ff:18:3a:59:91:6e:79:5d:ab:e0:0d:86:71:
9d:f2:3e:3d:0f:87:5e:88:88:97:9a:65:3c:f5:c3:a5:3d:64:
8a:d1:cd:d6:68:c4:55:c9:d4:93:7f:5a:98:ee:74:6c:0b:07:
d5:4b:51:79:3b:7c:db:82:9f:05:0e:14:54:15:24:c1:e6:2a:
62:62:7e:86:85:f3:86:77:b8:95:78:df:ff:7b:e5:67:10:72:
66:76:fe:05:3a:da:57:b7:39:07:bc:7d:9a:76:1e:04:b1:dc:
a2:76:ed:1e:6d:6d:86:e6:9b:72:fc:66:a9:f6:f5:23:0c:82:
5e:bf:23:77:49:fb:7c:d6:6c:40:fc:8e:d4:ed:14:88:4c:03:
e0:48:70:83:9d:65:fb:06:b9:14:9d:d3:b0:f4:4e:b3:3e:f6:
ce:05:5b:76:de:03:08:dd:2a:86:49:ea:ec:8b:f4:10:0d:35:
76:70:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org