Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/8waWdU8TtCwOfRrSu3EBlhF7-JY.roa
File: 8waWdU8TtCwOfRrSu3EBlhF7-JY.roa (raw, json)
Hash identifier: aRGUr+4xr+nBLd2wT5Q9C8iIDfrUPmOVt4JxRVrj5ks=
Subject key identifier: F3:06:96:75:4F:13:B4:2C:0E:7D:1A:D2:BB:71:01:96:11:7B:F8:96
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956C27061D62FD25638FC2A8A12ADF
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/8waWdU8TtCwOfRrSu3EBlhF7-JY.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 11:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6c:27:06:1d:62:fd:25:63:8f:c2:a8:a1:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f30696754f13b42c0e7d1ad2bb710196117bf896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:44:52:35:a4:bb:0d:19:11:05:be:ad:6f:
47:9e:b9:a4:df:10:62:e3:98:1a:0e:44:7c:3d:58:
9b:73:76:df:a3:24:47:01:f3:32:4c:d5:8f:c7:7d:
ac:33:1e:94:dd:83:a2:ba:0c:31:c5:12:74:18:ce:
2a:b6:d5:b1:ed:8d:63:c0:ee:3e:f0:b4:17:e7:70:
ea:07:57:99:cd:a0:60:93:64:a2:74:d0:24:82:12:
da:0c:dc:02:af:f0:e3:cd:07:4e:c7:b0:16:93:1d:
d4:33:c7:7f:e6:a9:fe:1c:bd:90:f3:ef:b1:69:c9:
c3:f0:ea:45:fa:34:c2:e1:dc:9f:c8:3d:35:e5:43:
6e:38:04:2d:ff:e2:e5:e6:de:4c:03:a2:79:00:79:
ac:f7:46:c5:e1:94:79:30:be:62:5c:7b:87:d5:15:
a9:ba:b3:4c:cf:ef:fb:79:30:16:54:e7:c4:37:75:
dd:88:20:e0:4e:c3:25:04:be:6d:78:42:83:f4:3f:
66:01:ae:f9:a2:a3:2c:fa:51:54:49:89:44:ad:a5:
1c:0b:d3:bc:1f:2d:47:95:ad:f8:b1:2a:d5:d6:9e:
4d:c5:2c:99:db:e6:89:f0:94:87:5c:8d:cb:8b:ff:
db:53:a7:e9:ff:ca:d6:25:00:9f:13:22:e0:5d:32:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:06:96:75:4F:13:B4:2C:0E:7D:1A:D2:BB:71:01:96:11:7B:F8:96
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/8waWdU8TtCwOfRrSu3EBlhF7-JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3d:fc:d8:4a:7e:02:bb:05:a4:03:b2:e8:ca:f8:c5:95:b6:
fb:d0:66:51:67:34:6f:ae:5b:dd:7b:f4:bb:5c:5d:1a:17:0a:
b7:ea:c8:09:b3:4d:77:06:cd:1c:9a:6c:f5:62:7a:44:1c:d9:
38:95:1e:62:62:88:86:08:14:95:28:2b:40:64:20:1b:9b:50:
5f:5e:2b:f2:bb:5e:66:fa:b1:dd:41:e0:fc:7b:17:d6:69:4b:
8f:57:b0:63:33:f5:22:00:a2:a4:e2:4f:aa:a9:94:8b:ec:25:
64:d1:81:0a:ef:ae:ab:55:fc:38:38:1b:e2:2c:5c:e7:82:e3:
65:50:ca:1f:6e:1c:b2:34:1d:f2:f5:e6:98:3f:00:67:fa:62:
f0:01:68:0b:2b:85:db:32:4a:68:50:ba:c1:df:27:ac:27:16:
65:f4:ca:6f:cb:d3:0c:ae:e8:9f:e5:f7:ff:a7:c2:54:96:15:
b9:80:fe:e2:ca:c1:d3:bd:2e:d3:a7:8c:f5:9c:32:f5:be:b5:
f7:b7:8d:85:c5:32:e4:38:63:85:c5:bf:1e:d0:68:29:e2:e0:
f2:16:bc:69:5f:02:40:c9:03:be:c7:93:90:fc:1a:87:69:eb:
49:ca:d3:df:7d:bf:20:e8:70:6a:80:82:21:5a:2f:51:63:40:
bb:8a:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org