Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/EcLxqHTFKg1w8jIHDAoLEO1IHvc.roa
File: EcLxqHTFKg1w8jIHDAoLEO1IHvc.roa (raw, json)
Hash identifier: bfTh6C9JTE58sTJbN41CZFkUfNCjPgRPpDBvZM3ch8k=
Subject key identifier: 11:C2:F1:A8:74:C5:2A:0D:70:F2:32:07:0C:0A:0B:10:ED:48:1E:F7
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 01856F948D2113EAE10601318AE1A0ECB01E
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/EcLxqHTFKg1w8jIHDAoLEO1IHvc.roa
Signing time: Sun 01 Jan 2023 23:04:44 +0000
ROA not before: Sun 01 Jan 2023 23:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.9.4.0/24 maxlen: 24
194.9.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:8d:21:13:ea:e1:06:01:31:8a:e1:a0:ec:b0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Jan 1 23:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c2f1a874c52a0d70f232070c0a0b10ed481ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:45:63:01:ea:41:97:c4:1c:70:08:e9:58:
fa:42:f8:c9:f8:77:97:64:b0:87:47:3e:28:c0:c0:
3e:a1:eb:60:77:55:bb:8b:a8:82:89:89:fb:9f:ee:
48:7e:5e:40:f3:0d:a2:e1:c1:36:51:91:21:6e:d7:
92:23:70:5b:39:a5:59:b7:9d:4e:40:07:7c:87:2d:
d0:19:a9:44:00:6c:57:3d:a5:ad:28:5f:b9:1f:3c:
a0:2e:26:4c:07:55:38:0d:2e:fc:fa:95:6f:ed:d6:
63:58:cb:e4:5d:f5:d2:fe:78:53:58:d5:56:a0:e8:
da:a5:ab:27:de:62:51:be:31:31:3b:be:ff:43:4f:
44:b2:b4:58:7e:95:44:bd:44:f2:20:4f:88:f2:df:
f5:03:94:72:d7:ae:f8:cf:81:b1:6f:f4:41:da:3a:
c7:5f:7c:9a:d3:28:fc:e3:6b:de:12:3c:a1:ef:a3:
90:9c:3d:22:23:0b:74:54:da:97:aa:fb:26:60:65:
4f:b8:55:f9:e3:da:a2:9f:2c:7f:e8:eb:2b:23:97:
6b:96:e6:2d:29:ec:f0:00:7a:47:e2:33:cb:2d:ad:
8c:7e:27:79:98:f8:66:ae:f5:2e:5c:2b:e0:ba:51:
7e:c4:5d:a6:c4:08:04:b6:8d:4c:11:fd:ac:98:c5:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:F1:A8:74:C5:2A:0D:70:F2:32:07:0C:0A:0B:10:ED:48:1E:F7
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/EcLxqHTFKg1w8jIHDAoLEO1IHvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.4.0/23
Signature Algorithm: sha256WithRSAEncryption
44:5e:7a:b5:6c:26:dd:be:5b:c2:98:a3:c2:2f:30:9c:29:84:
c2:63:f3:c0:b3:45:30:fd:f9:25:0c:e3:68:65:89:44:e9:79:
64:6f:4c:73:5e:b8:28:64:29:d6:05:98:0f:f0:52:73:df:9e:
58:38:8b:24:42:cf:bc:ea:e4:82:4c:8e:4f:ce:2c:d5:86:b0:
72:2d:b0:7b:af:76:8e:d0:0c:98:00:00:b1:61:65:70:b8:46:
45:93:03:4a:98:31:91:cb:34:97:78:4f:2d:b4:8d:0b:9a:68:
97:c2:33:8b:2a:b7:28:f4:6e:0e:c8:a2:43:ba:dd:f5:8b:a2:
d1:0b:fe:55:28:d7:2a:ab:ba:84:7f:45:b3:4f:32:bb:f0:74:
e6:f1:f8:a5:80:21:07:2d:57:ee:f7:60:c1:e1:37:8a:57:ee:
11:7a:96:3a:bc:02:d7:d7:97:6c:19:1a:b6:37:4f:8c:c9:1e:
00:d2:e7:b3:f6:59:b2:c0:dc:6e:c4:85:9b:77:16:e0:d9:e9:
09:66:cb:82:64:30:75:5a:fc:61:94:cf:00:0c:03:e6:5a:fd:
28:21:7c:23:7f:e2:b4:08:9c:0b:56:eb:c8:a5:d4:e1:58:2f:
ba:2a:eb:ec:76:45:8b:aa:bc:e2:c5:1b:d8:90:1c:a9:e7:33:
e9:73:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:39 2024 by rpki-client on console-ams.rpki-client.org