Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/CN1qYjv7KXt4qnmCosZv8y6vKc8.roa
File: CN1qYjv7KXt4qnmCosZv8y6vKc8.roa (raw, json)
Hash identifier: cpxi9iKdF5ytnaxhFRWkt2JkSQ/xFIR97VVJjXme/v4=
Subject key identifier: 08:DD:6A:62:3B:FB:29:7B:78:AA:79:82:A2:C6:6F:F3:2E:AF:29:CF
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 01856D8AE76B811A66870E1196B3516E1B0D
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/CN1qYjv7KXt4qnmCosZv8y6vKc8.roa
Signing time: Sun 01 Jan 2023 13:34:57 +0000
ROA not before: Sun 01 Jan 2023 13:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43046
IP address blocks: 194.102.131.0/24 maxlen: 24
2001:67c:53c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e7:6b:81:1a:66:87:0e:11:96:b3:51:6e:1b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Jan 1 13:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08dd6a623bfb297b78aa7982a2c66ff32eaf29cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:8f:ae:25:20:7f:82:31:4e:f9:0f:7e:bc:
a9:ca:f3:3d:cc:34:da:05:63:fd:b8:16:bb:5f:8a:
1f:61:d2:ef:6d:d9:01:1d:3e:bf:68:97:cd:8d:4e:
3d:99:ab:b8:aa:29:b3:a1:f2:b5:f9:ba:bd:56:98:
6d:2c:c2:4d:9b:05:7d:5b:8d:e8:32:c0:8c:f1:a9:
59:3c:dd:d5:24:11:e3:4c:58:b2:01:f9:26:fd:08:
e3:13:3c:f7:c8:c3:7e:b0:23:01:ff:04:14:11:b7:
6c:4e:4d:37:34:ab:19:3a:03:df:f1:3a:8d:24:d3:
ba:7f:dc:fc:af:2d:fa:e6:b4:05:a8:09:0f:c1:b7:
1d:46:7c:a5:67:a2:1d:df:f0:ef:07:11:cb:b1:12:
89:ed:03:64:9b:35:b8:f2:41:46:72:f1:67:2d:ba:
b0:71:e4:61:09:be:9b:50:98:ca:79:b0:90:8b:af:
d6:0d:b6:8c:d4:ad:63:e6:80:c3:91:38:84:47:b5:
3a:fc:7c:19:50:85:7c:6e:db:29:36:c4:60:e1:d7:
47:0f:84:cc:bd:2b:c9:ad:72:5b:c5:50:0b:bd:9b:
a8:42:55:a6:ac:3b:74:64:8b:78:71:6a:92:8e:a4:
c2:a3:00:68:dd:51:68:44:51:cd:00:ff:1d:d1:10:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:6A:62:3B:FB:29:7B:78:AA:79:82:A2:C6:6F:F3:2E:AF:29:CF
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/CN1qYjv7KXt4qnmCosZv8y6vKc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.131.0/24
IPv6:
2001:67c:53c::/48
Signature Algorithm: sha256WithRSAEncryption
07:11:c4:b6:6a:48:44:5a:05:b8:3d:c2:97:8f:5e:78:f9:d5:
2a:ec:91:3d:4c:64:68:c5:b3:79:7c:c2:cc:08:8b:af:44:c0:
d4:70:2c:dc:3e:f2:09:ba:08:72:d0:2e:8a:0f:ca:da:20:78:
26:5b:d1:25:07:8d:ab:32:66:68:8a:fe:49:17:83:42:b8:97:
46:dd:c0:fe:52:91:d0:35:c5:3d:2f:4e:50:98:32:e1:b3:fa:
0c:0d:b7:48:ca:10:45:54:74:2f:c0:38:49:63:f1:9d:65:97:
cd:10:c0:2c:36:61:9e:a9:68:3d:d1:66:7f:cf:40:8c:0f:05:
d6:18:d6:d7:d6:fb:10:e9:70:86:c9:dc:79:7d:15:5f:6c:4c:
7f:10:67:d0:51:38:ff:18:8a:b3:28:b1:d5:1d:ee:ba:dc:99:
3e:17:55:08:71:2f:fb:f4:45:58:4f:6b:1a:79:93:40:39:01:
c2:43:7e:96:e6:1e:c8:10:db:08:80:c7:d2:14:3c:9b:f6:71:
74:08:ea:cc:d8:89:c3:ab:7d:cc:2e:3c:2f:03:0c:90:25:34:
db:00:4a:21:0e:52:6e:5d:ac:b4:85:da:70:06:f7:28:34:d6:
14:bc:71:3b:4c:ab:4f:22:00:7c:a6:48:30:61:bc:ed:ed:56:
3a:96:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org