Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jtG1mvfTXrvf_Pj1WGAOEgtkMig.roa
File: jtG1mvfTXrvf_Pj1WGAOEgtkMig.roa (raw, json)
Hash identifier: i9IAw44sN4JZoMswBs6lNR6HiJztoYa8qHnsQPXs+6c=
Subject key identifier: 8E:D1:B5:9A:F7:D3:5E:BB:DF:FC:F8:F5:58:60:0E:12:0B:64:32:28
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0185723A3059912973D56E8BC2655047740E
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jtG1mvfTXrvf_Pj1WGAOEgtkMig.roa
Signing time: Mon 02 Jan 2023 11:24:54 +0000
ROA not before: Mon 02 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 194.151.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:30:59:91:29:73:d5:6e:8b:c2:65:50:47:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ed1b59af7d35ebbdffcf8f558600e120b643228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:61:b3:de:7f:17:8f:cf:8c:4d:fc:d4:d0:
5f:c4:2e:cf:16:fc:1e:63:cb:7d:ba:c8:9c:13:60:
20:cc:41:1c:1f:c2:a5:7e:30:15:a1:86:73:15:55:
f7:f9:7d:2a:ff:98:94:0b:1a:c4:b2:1c:92:d3:9a:
a6:c7:4a:2f:4e:c3:97:57:da:73:49:56:32:ee:e2:
a3:a7:cf:96:55:3e:19:0b:eb:ce:4c:48:1e:cc:b3:
50:8d:bf:bd:f0:d4:09:77:47:58:d6:e9:67:b1:1e:
8a:ee:b0:ad:a9:4d:b6:84:06:3f:30:74:43:37:15:
30:cb:cf:c7:0b:37:f7:af:94:36:c0:df:a1:6e:7b:
b7:a4:6f:ce:be:12:7d:11:77:ac:23:93:c2:85:5b:
1b:ed:f8:b4:cd:51:d9:ab:41:2c:cd:85:91:5c:b4:
75:40:6c:96:42:df:ce:89:5a:6b:70:b6:79:90:33:
aa:d2:1f:72:41:c4:9a:e6:d7:3c:69:69:9f:6c:c3:
6d:33:13:84:16:ef:43:a4:19:c8:37:1f:7d:77:e1:
2a:90:67:79:e6:d0:de:37:d5:95:df:ff:a0:c4:5a:
ea:a6:eb:03:15:67:c1:48:cf:10:50:2c:80:74:8d:
e7:90:60:fc:a4:51:77:79:ed:e6:84:76:96:50:48:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:B5:9A:F7:D3:5E:BB:DF:FC:F8:F5:58:60:0E:12:0B:64:32:28
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jtG1mvfTXrvf_Pj1WGAOEgtkMig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c5:b5:44:bc:d7:15:6d:3b:11:af:47:dd:d6:51:e6:b6:e4:
e0:22:c8:cd:81:c2:64:f7:ae:24:38:6c:0d:bd:35:c2:ff:6d:
0c:62:bb:8f:46:64:9d:a9:33:14:5a:d6:6b:92:cd:57:3b:41:
8d:9a:04:a0:b2:86:18:98:76:4e:6b:38:5f:79:d2:11:9d:cf:
52:19:40:e8:7a:aa:bd:be:df:5b:8c:5d:5e:12:4d:65:db:d4:
60:a7:53:1b:8d:51:8d:02:b8:22:48:b5:6a:e0:8c:31:3e:0d:
ea:4e:31:a9:e0:fd:2f:4d:a1:b0:8a:3b:73:ca:9e:73:f6:ed:
c6:31:da:f7:6b:54:32:85:17:f3:ba:a7:d5:52:8a:7a:38:88:
d0:8a:96:3f:38:48:ed:c0:22:5f:2b:c9:a6:80:30:6f:7a:42:
41:64:93:ec:fc:b7:14:1d:9b:16:c5:59:c4:23:c9:e4:5a:fb:
43:a2:a8:c6:19:38:3e:bd:55:c6:bd:48:66:d9:ea:55:35:98:
58:49:f2:0a:44:c7:a1:3f:29:2c:e2:b7:1b:46:a7:a7:e7:db:
84:5c:dd:24:19:48:a6:42:a4:ca:b7:b4:c3:08:cf:d9:6b:7d:
eb:25:ae:9d:92:c6:3c:2a:57:39:00:d1:96:2d:60:c3:4b:45:
3b:d3:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org