Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/_BW74AYaU7i7trFeUK6q6GA7FvI.roa
File: _BW74AYaU7i7trFeUK6q6GA7FvI.roa (raw, json)
Hash identifier: +3mokCntn9GiQDczkTDWOIyawSBz1JZtrxi/kGOzsss=
Subject key identifier: FC:15:BB:E0:06:1A:53:B8:BB:B6:B1:5E:50:AE:AA:E8:60:3B:16:F2
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 018CCA2BA138A0FE7C2432E36464CEA4A2A4
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/_BW74AYaU7i7trFeUK6q6GA7FvI.roa
Signing time: Tue 02 Jan 2024 12:35:06 +0000
ROA not before: Tue 02 Jan 2024 12:35:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212269
IP address blocks: 194.37.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 09:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:a1:38:a0:fe:7c:24:32:e3:64:64:ce:a4:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 2 12:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc15bbe0061a53b8bbb6b15e50aeaae8603b16f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f3:a8:94:46:16:54:af:35:3d:be:6a:6b:da:
48:32:e2:c5:97:02:55:0d:89:a5:b9:82:c0:46:7c:
37:c8:bf:2a:d0:c2:17:8c:fc:0e:0d:69:61:23:ff:
6a:04:85:cd:c1:4b:45:c4:c2:b7:d8:8c:c9:fd:d5:
a4:02:b1:3b:0e:c8:6f:32:f4:cf:41:3f:d0:9a:9f:
4d:89:91:01:df:51:ce:9c:d5:6d:68:d4:ee:72:2c:
74:3c:31:46:7f:4d:37:af:21:bf:0d:3f:fa:fe:39:
70:da:fc:de:ef:50:53:a6:19:4c:1e:3c:ed:9e:7e:
a2:8d:fb:02:de:25:31:75:86:ab:1d:9e:11:db:4d:
22:ca:7a:dc:c1:23:c0:74:03:32:80:a9:1f:5d:c7:
0d:fe:d4:97:b3:6f:ec:da:f1:d7:8a:04:06:b0:70:
5d:ab:03:b7:bd:20:c6:72:ae:c0:0f:b4:5e:65:34:
22:bf:29:94:98:f5:c4:97:83:81:18:8a:f1:66:a2:
85:a9:7f:33:1e:6b:28:9b:5d:73:fe:b9:c2:97:c6:
46:99:32:74:48:62:3f:6c:c5:01:7b:8c:82:20:e0:
ab:ec:eb:12:52:5a:7a:45:ad:c9:b4:b7:7c:a9:81:
04:0d:39:43:3c:2f:1d:4f:24:83:57:e1:36:87:12:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:BB:E0:06:1A:53:B8:BB:B6:B1:5E:50:AE:AA:E8:60:3B:16:F2
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/_BW74AYaU7i7trFeUK6q6GA7FvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:13:20:6c:bf:32:19:41:c4:89:72:01:b4:4c:bc:7b:b9:1b:
7b:70:66:39:a3:2c:59:f9:a2:f8:00:e2:91:bb:bd:ba:78:1c:
ed:5c:5b:25:0e:5d:9c:f7:42:83:32:4f:c7:ce:68:d4:dc:20:
ff:3a:0c:cf:36:5a:89:9d:85:7e:6a:7a:84:cc:b1:89:23:21:
35:27:d2:79:36:e9:62:53:2a:5f:c8:53:07:80:63:71:4b:58:
4c:59:90:23:26:10:47:de:52:be:8e:dc:f3:ab:eb:2b:9e:44:
e6:d3:90:aa:6f:bc:1e:fa:0f:5c:58:b2:bf:5b:f2:4b:f8:fc:
ff:ee:af:e6:be:85:71:dc:fe:8b:6c:ca:c8:9b:10:e6:08:99:
e8:4e:df:51:cb:ba:63:96:5b:7f:4c:b0:43:46:01:11:22:8c:
85:36:04:16:2c:cc:74:ea:cf:6f:7a:4b:68:5b:0e:fe:07:b9:
63:c9:5d:50:1b:00:66:2b:3f:2a:ed:65:41:71:49:dd:3c:c8:
c4:be:2d:b2:5a:c9:e2:6a:28:a3:64:41:57:7e:7f:fe:93:9e:
ef:37:4d:7d:f9:c4:54:5b:53:b6:af:46:0a:5f:db:36:47:85:
e6:9d:74:c9:44:96:01:50:14:e8:cb:e3:bc:13:ec:6a:80:d3:
a6:de:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 11:23:49 2024 by rpki-client on console-ams.rpki-client.org