Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/CaIcRcYebuJ7dfCwiDRQBvsV8Xk.roa
File: CaIcRcYebuJ7dfCwiDRQBvsV8Xk.roa (raw, json)
Hash identifier: PMs6UkYjMjh77MAk8kzcXRVQ65PG/qkPB+oCYS9gxlI=
Subject key identifier: 09:A2:1C:45:C6:1E:6E:E2:7B:75:F0:B0:88:34:50:06:FB:15:F1:79
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 018570B9909ED478BD6F6E62D62E3D909A30
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/CaIcRcYebuJ7dfCwiDRQBvsV8Xk.roa
Signing time: Mon 02 Jan 2023 04:24:47 +0000
ROA not before: Mon 02 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.42.96.0/23 maxlen: 24
194.42.104.0/23 maxlen: 24
2a0f:340::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:90:9e:d4:78:bd:6f:6e:62:d6:2e:3d:90:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jan 2 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09a21c45c61e6ee27b75f0b088345006fb15f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:60:74:f5:1d:d0:9f:57:5a:71:e1:2f:6a:
de:b4:53:99:99:b0:48:b7:29:f0:b9:ec:05:a3:15:
ca:6d:40:34:bf:11:e1:ad:9a:1d:6b:7c:01:b0:64:
98:f6:bc:39:95:4e:a8:1a:c9:de:55:1a:fd:86:c9:
d2:e2:3a:0b:6a:ff:79:4b:74:88:34:dc:2d:a8:c4:
95:3c:c9:96:f5:05:ff:ae:b1:0d:0e:22:40:84:40:
b2:b4:fa:50:5f:ec:40:80:8e:b7:38:24:00:b9:38:
37:43:25:49:6d:0b:99:b9:5a:52:d9:de:ed:ad:b7:
05:3f:30:6e:f5:5a:42:4a:0b:25:b9:dc:10:7b:9f:
93:86:85:30:0a:b9:dd:82:e2:42:ac:8b:0f:1e:89:
a0:fd:c7:f7:9f:54:9f:c2:23:6c:f4:40:ac:07:d4:
3d:62:03:43:59:79:52:4d:3f:ff:b3:43:08:46:ae:
47:fc:61:79:fa:7b:52:f7:0f:d8:33:e4:d2:02:40:
8a:75:eb:05:06:0a:58:06:0b:84:20:81:35:1b:28:
b5:18:dc:9a:bb:8b:61:3e:06:c3:0f:6e:c8:ce:bd:
9e:f1:a2:74:e9:94:65:b5:6a:c3:ee:7a:a5:0e:5d:
a5:d9:8b:45:d6:37:94:26:a8:0a:55:1a:bc:81:d3:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A2:1C:45:C6:1E:6E:E2:7B:75:F0:B0:88:34:50:06:FB:15:F1:79
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/CaIcRcYebuJ7dfCwiDRQBvsV8Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.96.0/23
194.42.104.0/23
IPv6:
2a0f:340::/29
Signature Algorithm: sha256WithRSAEncryption
5c:c5:5c:0d:94:cc:f6:c6:29:81:3c:38:9b:8b:0f:27:47:d4:
23:55:6b:13:1d:27:6c:37:1c:01:83:28:46:27:08:73:71:4a:
26:e3:27:f2:ac:4c:6c:c5:b6:39:78:a9:c3:77:bc:85:20:ab:
50:6b:27:b2:f6:f2:61:da:63:e7:43:0c:10:97:ca:2b:4e:50:
e6:35:25:b5:a1:4a:e3:a8:c9:b2:b8:f2:94:d3:ec:c0:1c:e2:
eb:bb:b9:ca:3e:45:22:37:1f:c9:af:64:7e:01:da:42:b0:35:
b8:d9:0b:4a:51:43:a6:71:cc:8f:b4:e3:02:17:4f:af:0d:a1:
0b:b2:47:c8:e6:14:3d:ef:bc:54:ab:12:af:01:c2:7b:70:76:
4a:fa:5f:cc:bb:36:7a:39:10:29:91:39:5f:4e:d4:a8:3e:a0:
85:21:c1:8f:58:e9:3b:6f:12:bd:0a:ba:23:1a:e3:4f:17:49:
06:03:e4:c3:58:b6:ff:ad:d2:43:f3:d8:27:78:31:e6:d5:be:
2f:c1:c0:ae:f7:88:7e:00:7e:89:00:51:fd:d2:f4:1c:42:84:
c1:36:a1:d0:5f:6f:11:06:62:6a:4c:13:f7:fa:11:14:d7:aa:
2f:51:b0:63:e7:0f:0e:bb:8a:4f:f8:de:ec:b8:86:48:3b:c5:
1f:3c:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:03 2024 by rpki-client on console-ams.rpki-client.org