Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/kJng3g8JQ2bZEyaQVqHrbGHARDA.roa
File: kJng3g8JQ2bZEyaQVqHrbGHARDA.roa (raw, json)
Hash identifier: aP3xQaCma8SXDwSn7thWAasgvUfWoi+Y8ty+L5sO9hc=
Subject key identifier: 90:99:E0:DE:0F:09:43:66:D9:13:26:90:56:A1:EB:6C:61:C0:44:30
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01857230E1A5316C7AA712DD66EFD0E47A2C
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/kJng3g8JQ2bZEyaQVqHrbGHARDA.roa
Signing time: Mon 02 Jan 2023 11:14:44 +0000
ROA not before: Mon 02 Jan 2023 11:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.93.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e1:a5:31:6c:7a:a7:12:dd:66:ef:d0:e4:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 2 11:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9099e0de0f094366d913269056a1eb6c61c04430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:60:0e:23:18:79:0e:45:4d:61:66:69:b8:
cc:18:47:7b:86:21:5d:e1:dc:93:03:66:17:78:60:
bd:18:08:80:25:43:35:b9:ac:e4:af:eb:49:b9:a2:
43:97:ef:1f:2e:93:a4:4d:2f:fd:8c:61:ea:34:e5:
16:5b:37:a9:ab:dd:34:00:c5:b7:03:6f:a8:32:f3:
10:9d:58:02:6f:3c:e6:82:d8:75:b8:8f:70:c0:f3:
fc:b9:46:8b:c0:51:15:75:a7:29:6c:d5:0a:78:3d:
93:8e:e7:80:2a:b6:27:8c:4b:5a:43:0e:48:c9:25:
8b:57:1b:2f:e6:c8:47:f2:83:5d:79:6a:79:35:ec:
9f:40:19:18:1a:d9:7e:22:06:cc:76:d3:2a:db:5a:
fc:df:22:32:60:46:64:a5:0a:ef:ad:07:6a:1c:c2:
6a:d9:1c:fa:38:8c:49:ef:c1:62:5d:8b:28:f1:f8:
50:61:26:53:51:5a:63:16:45:4b:ce:dd:15:bb:69:
c1:a7:c4:a1:6b:30:08:97:1d:34:d8:12:5d:49:ce:
62:b6:72:df:99:ee:19:82:37:7d:7b:25:ee:1f:f7:
dc:4f:35:03:94:fe:88:25:de:fc:11:2d:30:f0:e7:
c8:34:1d:1c:a2:f9:00:14:a4:be:fc:cd:8e:29:a9:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:E0:DE:0F:09:43:66:D9:13:26:90:56:A1:EB:6C:61:C0:44:30
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/kJng3g8JQ2bZEyaQVqHrbGHARDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.93.0/24
194.37.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:39:d0:91:d7:b9:81:10:01:57:99:28:cb:ec:b0:5a:09:ae:
b4:e0:f3:73:a3:43:58:de:ec:74:36:ce:46:b0:96:a2:eb:b3:
14:ce:b9:7b:4b:c2:a0:e5:e2:01:34:43:71:68:13:30:eb:a3:
9b:54:c9:16:62:70:97:ad:07:9e:04:62:a6:6d:4f:26:be:07:
55:2b:ae:5c:e2:f7:b4:b9:e8:18:1d:f2:d3:77:9e:9b:3b:68:
e9:b1:1c:c3:bf:22:87:8a:2c:ae:c3:a0:d9:2b:ee:8e:a2:7c:
38:a0:24:a1:75:be:e9:f5:ca:27:7b:7c:9b:f5:11:3e:4a:80:
a0:81:71:53:91:14:85:00:c4:fb:0c:dd:5f:1a:ad:2a:d5:9b:
d2:12:0d:a1:e7:76:35:a6:72:d3:df:d3:43:8d:36:7b:d0:1e:
2c:49:29:21:50:72:90:cb:c1:73:29:3e:b8:62:a7:73:55:50:
db:a3:1a:e3:9c:a0:6d:a3:be:19:f5:40:23:82:73:c4:9f:0f:
af:8e:24:ca:c3:84:ae:3b:e6:ef:16:15:46:95:73:f4:c4:f1:
32:0e:89:df:96:ae:2d:0b:a0:fa:39:7a:cf:c6:31:25:21:4c:
e9:85:12:d2:a8:d7:22:5e:d1:24:47:a4:90:bb:62:15:48:77:
1a:03:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 23 14:53:18 2023 by rpki-client on console-ams.rpki-client.org