Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TAp5_uSJ1b6CtIPAXTIKnQ_0O6E.roa
File: TAp5_uSJ1b6CtIPAXTIKnQ_0O6E.roa (raw, json)
Hash identifier: GBsMKc+P3wpMecIWjIHNTwjaOR+XKka5xR09Cx5T84M=
Subject key identifier: 4C:0A:79:FE:E4:89:D5:BE:82:B4:83:C0:5D:32:0A:9D:0F:F4:3B:A1
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018E9E0BEB4FCB8E5EEF27B18D086B4D0FCC
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TAp5_uSJ1b6CtIPAXTIKnQ_0O6E.roa
Signing time: Tue 02 Apr 2024 09:02:44 +0000
ROA not before: Tue 02 Apr 2024 09:02:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 05:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:0b:eb:4f:cb:8e:5e:ef:27:b1:8d:08:6b:4d:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 2 09:02:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c0a79fee489d5be82b483c05d320a9d0ff43ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:ad:ed:50:eb:d0:3e:97:42:33:2a:54:e2:
0a:cc:46:22:08:0d:d6:52:a0:ea:19:d1:13:c3:fd:
7c:1e:e3:08:4b:16:01:8f:71:a3:4a:1b:ce:d4:01:
c6:74:c2:e5:ca:ab:b9:a6:f3:9e:ba:ad:fd:7f:a0:
ce:bd:cc:c5:5d:35:46:42:19:8b:26:a5:4b:c3:ff:
95:a8:d7:06:12:97:f5:ab:26:9d:1a:5e:7e:6f:ea:
df:09:2e:f0:2f:86:d8:c9:34:0b:73:1f:62:ca:57:
1f:cf:5f:5a:22:ef:d4:53:cd:2b:00:16:c8:48:30:
bc:2d:f0:2f:61:40:54:a7:c9:bd:10:fc:4a:ca:d1:
77:81:ce:19:f6:38:0f:9a:52:9d:15:2b:14:53:3d:
ff:da:73:64:46:02:6a:33:88:e7:56:a9:5e:d9:89:
a5:fd:77:32:01:90:d8:1e:42:ed:40:51:63:10:88:
07:97:e0:2f:00:46:84:a4:ab:c8:81:04:f3:12:73:
95:4c:4f:ed:78:c7:b7:48:66:15:cc:ba:1b:6c:b7:
e1:70:5c:ff:37:71:62:15:a3:92:d9:db:dc:ab:02:
c8:ea:17:94:f3:4e:ca:35:15:5d:5c:d1:b3:1c:8c:
1e:a7:4f:43:80:09:b3:cd:25:5d:4f:31:0d:14:50:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:79:FE:E4:89:D5:BE:82:B4:83:C0:5D:32:0A:9D:0F:F4:3B:A1
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/TAp5_uSJ1b6CtIPAXTIKnQ_0O6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ef:0b:d7:77:bf:d7:de:dc:6a:2d:e9:d3:9f:23:03:02:33:
53:eb:01:ce:c5:c0:74:ff:0e:49:e9:bf:9c:13:eb:e5:37:b1:
52:8c:56:97:28:4d:bd:5d:39:e8:06:db:04:35:e0:97:b2:96:
2c:7f:7f:fd:a1:f5:f5:9b:98:09:f2:16:75:c9:a2:04:6c:dd:
e1:91:c4:6d:16:9f:00:d8:1a:46:a5:28:32:eb:d8:cb:e3:37:
e3:42:67:9a:96:c3:99:ae:11:c4:03:f6:dd:d4:84:85:0a:5b:
25:c7:cc:f0:62:ad:d2:da:8a:1a:06:6e:2c:1d:93:c3:90:64:
de:da:32:63:56:12:16:96:d9:39:70:3a:46:e2:63:39:38:7e:
62:b1:6a:ac:6d:89:c6:0d:2d:c9:63:89:eb:79:e9:b1:b0:bf:
c8:2b:11:6b:56:2c:e3:f3:c9:23:98:e3:8f:b8:a6:b8:76:4e:
bf:4d:d1:2c:3e:78:af:6b:d8:3b:6c:38:b4:2b:0e:4d:e1:13:
8a:f8:0c:ec:36:ba:c5:df:2f:a0:62:71:e8:be:ed:09:62:1d:
2d:8c:a4:16:0d:31:5a:2a:91:c4:85:26:82:d3:d6:8f:fa:52:
54:f4:ac:78:97:77:6f:15:82:7b:17:69:4a:db:9b:25:40:c7:
53:e0:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org