Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/3Yey2zMbPbPlc3o6OgQiznuYlKI.roa
File: 3Yey2zMbPbPlc3o6OgQiznuYlKI.roa (raw, json)
Hash identifier: kH1p/2NE7c0UUuhMa3q2De8jIdNNs++KEeeOJYIBqog=
Subject key identifier: DD:87:B2:DB:33:1B:3D:B3:E5:73:7A:3A:3A:04:22:CE:7B:98:94:A2
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 018D8F185FED86A98176124B9124AD1C423A
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/3Yey2zMbPbPlc3o6OgQiznuYlKI.roa
Signing time: Fri 09 Feb 2024 18:19:15 +0000
ROA not before: Fri 09 Feb 2024 18:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197435
IP address blocks: 194.0.179.0/24 maxlen: 24
2a0a:a300::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Feb 2024 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:18:5f:ed:86:a9:81:76:12:4b:91:24:ad:1c:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Feb 9 18:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd87b2db331b3db3e5737a3a3a0422ce7b9894a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:30:2b:6d:b5:61:5a:57:70:07:9c:ac:1f:
bb:72:b0:c1:69:74:3e:a5:89:f8:27:10:53:58:f9:
5d:b0:3e:67:40:2c:4e:f2:79:c6:a4:17:ee:21:e2:
e1:02:0f:31:4f:ae:2e:40:6f:b6:ef:88:fc:0f:df:
9c:0d:0a:fb:3f:4d:e4:9f:19:4c:bb:1c:ad:3d:b9:
1a:87:76:28:b6:71:83:bc:a6:35:5a:72:94:bc:98:
a4:6c:c6:88:d4:87:8b:e9:fe:26:8b:e4:aa:f7:73:
97:3f:93:00:05:37:08:7f:7d:a0:92:72:aa:5b:bb:
aa:c3:86:4b:30:4e:60:8c:d2:75:8b:77:12:2f:ad:
87:9a:3f:a0:e1:0b:9f:0a:81:05:b3:84:8a:9a:fb:
0f:0d:3e:be:13:3a:db:83:01:ce:0f:ae:ab:4b:92:
0f:e4:9e:4f:5c:e3:02:a8:ca:24:a1:b8:65:15:b8:
6d:37:26:48:28:c9:b7:1a:26:b0:de:31:e9:d6:f1:
bd:c0:c7:7c:5d:ba:a9:b5:f1:cc:d5:fe:31:2f:1e:
3e:cb:15:c5:92:c0:f9:d7:64:36:f9:a0:b2:ab:a2:
44:f1:03:da:60:24:4a:67:11:17:ec:8b:69:45:d0:
7e:c7:45:91:35:7b:d1:5d:d1:9d:0f:5a:ae:fb:12:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:B2:DB:33:1B:3D:B3:E5:73:7A:3A:3A:04:22:CE:7B:98:94:A2
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/3Yey2zMbPbPlc3o6OgQiznuYlKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.179.0/24
IPv6:
2a0a:a300::/29
Signature Algorithm: sha256WithRSAEncryption
b1:c9:9a:ff:0f:c2:ad:80:90:a5:28:9c:53:7e:8c:2a:67:59:
89:41:87:9f:1a:e8:1c:eb:bd:c3:96:99:ed:39:80:36:73:1f:
43:38:72:12:51:83:e7:53:96:eb:e3:b7:2f:a5:6a:02:12:f1:
d8:28:14:46:43:02:a5:53:6c:2a:03:fc:44:ee:f6:09:ba:b2:
9b:9d:8c:d1:fa:db:63:01:ee:2c:6a:20:ed:25:96:73:02:45:
47:14:e8:41:b6:2c:ca:69:8f:4e:fc:8f:7c:85:03:ce:b6:f6:
70:fc:e9:75:74:da:56:b8:77:19:5c:76:7c:99:4a:e9:3d:c7:
9f:81:a9:75:27:4a:f7:81:b7:76:44:2e:4f:cb:a1:36:2a:54:
c0:fa:cf:aa:60:0d:76:d2:ad:8b:4d:8d:2f:ec:85:85:a5:d6:
47:d0:ff:8e:47:14:1c:33:88:f9:c7:88:d0:bb:2a:6f:a1:b1:
39:d7:3c:c6:f0:cd:48:0d:5c:39:b7:34:bf:a4:79:45:91:7e:
45:10:3b:62:90:8e:19:6b:56:5b:e4:4b:e9:98:2f:b3:27:49:
d6:3d:0c:d7:f6:92:13:1f:11:44:cb:f5:65:5b:cf:4f:6a:3b:
90:84:40:b2:c4:c4:64:83:54:f9:72:14:7f:23:5f:f7:f8:1c:
51:2c:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 18:30:19 2024 by rpki-client on console-fra.rpki-client.org