Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wuDHbq5QrH43nbTZqKH1FD_KyhE.roa
File: wuDHbq5QrH43nbTZqKH1FD_KyhE.roa (raw, json)
Hash identifier: sBmnbUfwJsvYMQB7lHrk2yWbVf7TysQL81lCQiSxTiI=
Subject key identifier: C2:E0:C7:6E:AE:50:AC:7E:37:9D:B4:D9:A8:A1:F5:14:3F:CA:CA:11
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B716E9BAF1F5C8182A40C43E2F69FE98B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wuDHbq5QrH43nbTZqKH1FD_KyhE.roa
Signing time: Fri 27 Oct 2023 13:59:15 +0000
ROA not before: Fri 27 Oct 2023 13:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199961
IP address blocks: 194.67.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 12:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:6e:9b:af:1f:5c:81:82:a4:0c:43:e2:f6:9f:e9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 27 13:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2e0c76eae50ac7e379db4d9a8a1f5143fcaca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:b2:25:05:1f:23:b1:7d:25:3d:28:22:fd:
0e:dd:33:d6:60:bf:a3:22:73:e2:18:fd:c4:e6:f0:
3b:ee:9f:4b:73:0a:ad:d5:bd:a4:d1:ff:0d:76:5d:
d0:21:16:5e:db:60:5f:57:88:80:cc:24:e9:23:86:
2b:78:fd:81:b9:f5:cf:8d:69:f4:54:13:16:27:6c:
a3:be:73:75:de:67:d9:aa:bd:6b:3e:ce:60:59:2d:
f2:dc:c7:40:a1:01:59:46:0a:d5:21:a4:6f:03:80:
2f:07:fb:5c:37:d8:99:f6:6f:4a:90:e8:bb:bb:7e:
2d:f3:3b:02:09:f5:d2:ff:a0:43:9b:f4:02:72:af:
6e:a5:d5:e3:bc:cd:39:1f:18:ff:f5:e1:f6:87:67:
41:1b:86:f5:e9:df:0d:53:3a:cd:c6:b8:84:03:b0:
d3:8d:4a:65:01:99:0d:18:a9:ec:8f:10:bb:61:7f:
18:26:3f:2c:f8:d3:52:72:ad:cc:13:4e:f2:5e:e6:
4d:13:f9:3c:f8:91:21:cc:41:db:50:f9:d2:a8:75:
43:11:cf:04:60:f6:31:5d:e2:44:a8:bf:cf:21:4f:
c8:b5:7e:c8:1e:74:81:ba:1b:52:fd:5d:7d:f7:e5:
a7:08:30:5f:91:3c:c2:b1:57:bb:f1:1f:2f:2e:cc:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:C7:6E:AE:50:AC:7E:37:9D:B4:D9:A8:A1:F5:14:3F:CA:CA:11
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wuDHbq5QrH43nbTZqKH1FD_KyhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.194.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a5:8e:53:06:54:48:5e:97:a4:3d:50:3f:3e:f6:28:93:5d:
b1:f3:39:85:ab:51:c9:3d:62:b9:e6:25:73:a4:03:2b:4b:dc:
fc:a4:05:1f:e3:a1:1b:de:ac:3e:a0:c6:f6:f0:63:c4:bf:ed:
dc:0e:22:cf:07:96:0e:e3:00:a9:0f:60:2f:9a:4f:43:f5:3e:
66:5d:6f:d8:0b:5d:32:40:88:5d:ca:66:de:3f:e7:cc:7f:76:
eb:cb:2f:59:94:02:ac:62:59:63:b4:b7:00:4d:0b:4e:51:3d:
0a:0e:a8:87:14:61:c1:30:f3:cd:70:9d:24:f1:70:b5:a3:6d:
42:81:60:90:6a:fa:68:74:8a:c7:4f:1f:d9:e8:98:69:fc:77:
ff:65:2e:8e:90:ed:e7:30:df:b4:f0:95:25:27:53:e6:cb:1c:
6e:4e:c2:ed:6a:17:55:12:01:3c:52:10:88:52:c2:43:f9:34:
54:50:ca:0f:b0:02:01:11:d6:96:56:61:1e:86:50:3a:62:e3:
57:84:56:12:d3:af:e6:02:02:69:67:5b:09:09:13:28:a4:d9:
46:9a:28:51:a4:72:ca:d1:e1:43:5b:c0:75:ea:15:eb:c8:ad:
a9:82:56:66:c2:44:ac:6c:70:40:1d:73:fb:5a:ed:d7:fc:8e:
8a:d7:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org