Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/JKWpIqw-xNsCf4y6Jb7JHkxkb_c.roa
File: JKWpIqw-xNsCf4y6Jb7JHkxkb_c.roa (raw, json)
Hash identifier: NCX8XDHdhDznZ6CnnnEyEWwTZRuWozfF7S44eJNAQtM=
Subject key identifier: 24:A5:A9:22:AC:3E:C4:DB:02:7F:8C:BA:25:BE:C9:1E:4C:64:6F:F7
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 018C122FA6A124311AC28643246656A4530E
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/JKWpIqw-xNsCf4y6Jb7JHkxkb_c.roa
Signing time: Mon 27 Nov 2023 19:09:21 +0000
ROA not before: Mon 27 Nov 2023 19:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200339
IP address blocks: 194.147.153.0/24 maxlen: 24
194.147.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:2f:a6:a1:24:31:1a:c2:86:43:24:66:56:a4:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Nov 27 19:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24a5a922ac3ec4db027f8cba25bec91e4c646ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:8b:35:35:bb:29:4f:44:5c:5f:b0:42:2f:
2b:8c:4b:9f:c4:cf:45:8e:11:d0:c9:9d:d6:ef:bc:
09:d6:72:3f:37:21:ab:9f:b4:b7:82:f1:c4:01:a5:
e6:81:b0:46:a7:48:6c:a9:d4:bd:69:d7:67:22:fe:
24:a5:5d:b3:df:6d:66:a0:9b:a4:fa:d5:a5:bc:94:
fb:4d:bf:a6:fb:db:ca:41:c9:a5:d4:17:a5:2f:1f:
ca:c6:b9:a4:a9:e1:07:f0:97:44:a0:7e:17:05:81:
f4:49:e1:1a:71:20:40:20:af:2a:b9:08:19:e1:aa:
87:3c:91:2a:33:33:b6:c0:b3:e6:e6:2a:42:85:a3:
81:d5:17:bf:fd:19:ad:52:a3:f9:eb:d7:c7:27:38:
61:7c:99:9d:7b:bc:ef:ea:cf:4c:6a:2b:c8:7a:94:
9f:f8:dd:3c:93:f9:2e:ff:04:bd:b5:7c:a1:e9:6d:
95:d2:51:aa:82:26:10:7a:33:46:99:ca:57:da:83:
59:56:d7:08:24:a9:d4:af:71:a2:f1:cd:93:7a:f7:
22:c7:7d:01:bd:53:62:9a:21:28:b2:c9:bd:b0:e6:
72:ae:39:3b:8a:fb:b8:a0:c3:8f:cc:41:73:84:0b:
b8:6f:7d:60:c7:c7:cb:4a:73:89:ed:27:5e:89:0a:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:A9:22:AC:3E:C4:DB:02:7F:8C:BA:25:BE:C9:1E:4C:64:6F:F7
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/JKWpIqw-xNsCf4y6Jb7JHkxkb_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.153.0-194.147.155.255
Signature Algorithm: sha256WithRSAEncryption
49:30:1c:e4:27:11:20:6f:f7:62:03:d2:f2:9d:df:9f:9a:d2:
e5:8c:1c:03:bf:d2:70:17:b2:3e:8b:23:c1:92:11:da:63:b4:
c0:5f:0e:2e:89:62:7b:87:40:a5:91:bd:9e:08:ff:35:17:82:
c0:3f:66:f4:6a:f5:a7:fa:4d:e7:5b:2d:d7:66:28:31:18:1f:
6d:2d:7f:2f:68:5b:85:f7:4c:89:e7:0b:65:8f:b3:50:dd:ff:
e8:5e:53:22:5c:7b:98:e1:e1:b1:b5:a8:b3:f9:fc:af:45:dd:
75:7e:0e:c7:42:2e:a3:44:25:da:e8:fa:c2:09:52:50:cd:65:
10:5f:e9:6b:b3:d4:26:6e:c1:72:ff:8e:9e:d4:6e:63:8d:65:
3c:6b:47:cf:c8:38:02:49:b0:d3:08:48:94:b0:cd:6c:db:a8:
fc:ba:f3:3f:01:db:73:9c:f9:0a:8f:67:51:2d:a2:e3:cb:a7:
22:31:57:05:79:13:aa:8a:a1:0e:dd:ec:49:2f:f6:c8:8a:8d:
4a:15:91:61:cb:c7:02:0a:5c:84:f2:fe:e4:70:31:71:f0:3b:
88:5a:c2:47:9f:30:67:1f:da:7e:5b:c1:49:cc:6e:c3:8b:82:
ef:70:de:28:dc:65:33:0f:b9:11:53:d3:0f:0b:79:c8:b5:a5:
fc:da:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:21 2024 by rpki-client on console-fra.rpki-client.org