Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-r5EC6nO6IW9Kp2_d6eAFrVqjqI.roa
File: 1-r5EC6nO6IW9Kp2_d6eAFrVqjqI.roa (raw, json)
Hash identifier: rRLvVeJqjZQz0a8wWTvj3nDO3Nb7bJ9xMnCa9wOVPxg=
Subject key identifier: FA:BE:44:0B:A9:CE:E8:85:BD:2A:9D:BF:77:A7:80:16:B5:6A:8E:A2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B4D420D6706B883EC01545E5D3FB2C4FE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-r5EC6nO6IW9Kp2_d6eAFrVqjqI.roa
Signing time: Fri 20 Oct 2023 13:24:16 +0000
ROA not before: Fri 20 Oct 2023 13:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216119
IP address blocks: 194.67.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:42:0d:67:06:b8:83:ec:01:54:5e:5d:3f:b2:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 20 13:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fabe440ba9cee885bd2a9dbf77a78016b56a8ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:65:fa:91:62:7e:1c:d6:35:92:ee:1b:b6:
36:5c:d8:d5:75:40:96:94:6b:ca:ce:2c:37:e2:55:
dc:03:81:b6:87:85:30:ea:77:f6:42:a5:b8:4e:2d:
8e:c8:c2:1d:f3:12:e9:ad:3a:91:e7:a0:92:86:cb:
4a:4e:eb:58:82:d8:06:73:6c:d8:7e:28:7f:f4:18:
48:8d:7a:be:75:14:b2:5c:7a:b8:28:e4:0d:d8:dc:
76:81:2c:50:8d:c1:88:2d:42:2a:ed:d3:59:ac:0f:
a4:b7:4e:d7:03:3f:55:4a:a4:40:e4:52:45:a5:00:
67:13:05:42:b8:8f:ff:93:d3:4c:d1:7e:c5:0a:fb:
aa:89:6e:90:1e:c7:e0:e7:31:02:d5:32:fd:80:d7:
32:90:95:31:6b:8c:ef:01:e1:54:0a:31:01:12:fd:
ee:38:41:34:a8:21:44:8a:e8:cf:0f:6c:1b:28:6b:
41:41:31:b5:8a:f5:1b:ab:15:27:ca:2e:31:73:7f:
e3:74:66:c8:26:9f:d7:4e:b6:83:a9:2e:00:ea:44:
c2:58:f1:18:e4:ea:7b:71:4e:22:2d:cc:b5:44:4b:
0e:f2:70:a1:a9:06:e0:8e:d4:68:f0:9a:48:bb:0e:
ed:8f:e2:52:08:1d:3e:7e:59:d6:56:91:90:9d:76:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:44:0B:A9:CE:E8:85:BD:2A:9D:BF:77:A7:80:16:B5:6A:8E:A2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-r5EC6nO6IW9Kp2_d6eAFrVqjqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.195.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b0:cc:c3:ec:74:46:f0:c8:16:76:a9:3b:c2:b3:11:b6:ef:
d4:0a:f7:45:46:42:71:f3:3b:77:86:d3:26:e2:77:7a:91:97:
55:88:67:0a:19:86:cb:c2:65:f5:77:56:e6:2b:8b:48:b8:48:
66:5d:40:f9:f0:c3:83:fd:21:23:a3:77:b6:7f:b4:26:0d:80:
73:91:d8:57:77:8e:21:88:f7:eb:9b:99:73:61:ba:4f:5d:13:
cc:b7:55:bb:19:4b:55:b4:88:aa:74:27:bd:19:22:21:d1:06:
d0:fa:6b:5f:b1:aa:85:7b:8d:2c:a0:54:63:60:38:7d:44:ae:
1c:f3:d0:90:2b:b6:43:d7:8f:b5:55:62:ea:7f:1c:50:44:95:
3b:b7:02:4f:84:95:f5:de:9b:3b:7c:1c:68:c8:bc:71:1e:21:
e3:e6:c1:01:e7:c9:db:54:e0:6f:b6:55:65:88:89:e8:e3:76:
6b:2b:7f:fa:3a:9f:41:f0:96:a1:97:c1:0d:75:07:da:e8:d1:
a1:7a:9d:d5:7d:73:bf:10:84:8a:01:fc:9a:97:e2:da:95:6f:
45:ee:3c:d5:32:fd:0c:a9:47:7d:03:b0:49:30:b2:85:9c:c8:
67:a6:7c:5a:90:0d:ef:2f:95:54:a6:6c:f6:d2:a7:35:06:55:
2d:e1:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org