Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/1cp7oRnQV7KA8nNkiKtJecKMh8o.roa
File: 1cp7oRnQV7KA8nNkiKtJecKMh8o.roa (raw, json)
Hash identifier: jYILwiV1ChDuUE81Ozpj0DWFQt1fCG7oixKjAi5HkzY=
Subject key identifier: D5:CA:7B:A1:19:D0:57:B2:80:F2:73:64:88:AB:49:79:C2:8C:87:CA
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 01857169D6271D8DF666E392CA3C2FA9E220
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/1cp7oRnQV7KA8nNkiKtJecKMh8o.roa
Signing time: Mon 02 Jan 2023 07:37:19 +0000
ROA not before: Mon 02 Jan 2023 07:37:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57348
IP address blocks: 194.8.250.0/24 maxlen: 24
194.8.251.0/24 maxlen: 24
2001:67c:1814::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d6:27:1d:8d:f6:66:e3:92:ca:3c:2f:a9:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jan 2 07:37:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5ca7ba119d057b280f2736488ab4979c28c87ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:39:d6:b3:a2:df:fd:4a:b0:d4:d0:d3:48:
bd:a1:f0:c2:23:44:32:97:d4:31:7b:e0:fa:48:de:
31:78:ce:6b:c9:6d:f9:fa:28:48:3c:7d:b2:6d:c8:
a4:e5:09:65:06:59:09:8b:4f:f8:2b:fc:31:12:50:
78:9e:45:33:46:cb:20:8d:fc:9b:e5:8e:6f:3d:79:
b9:66:d7:f1:91:b6:88:9a:db:20:4e:d1:12:10:88:
7f:2a:d4:52:68:52:5c:ab:2f:f0:2e:2c:e4:99:80:
93:a0:9d:0d:64:cc:81:f3:8a:ca:e5:59:1b:47:b7:
5f:3b:92:4a:dc:8c:c1:f8:80:42:ee:02:0b:3b:36:
a5:62:59:35:4e:d0:c9:31:2d:17:4f:a4:56:56:c2:
f8:eb:f8:07:cb:9f:fe:e5:26:a7:fd:87:7b:ff:66:
84:8e:d6:56:5d:05:34:2e:34:5b:ce:9d:d0:9e:5f:
31:e4:90:ca:3d:b3:21:0b:1c:57:15:db:de:cb:c6:
10:be:2e:0b:8f:37:43:88:2b:ef:bc:8c:eb:6d:e2:
49:62:90:1a:c6:07:d3:06:b5:40:7c:e8:e6:14:7b:
61:d6:47:2e:91:b3:f0:f1:32:9e:49:f0:cb:d0:55:
b8:e8:35:90:7d:4c:c2:d2:04:7e:ab:6a:bc:0e:7f:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:7B:A1:19:D0:57:B2:80:F2:73:64:88:AB:49:79:C2:8C:87:CA
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/1cp7oRnQV7KA8nNkiKtJecKMh8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.250.0/23
IPv6:
2001:67c:1814::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c6:43:81:13:39:cf:89:d2:e3:e2:a8:03:79:2e:b8:23:14:
78:f2:80:55:19:34:71:78:76:df:31:26:28:8d:58:ea:a5:f7:
78:4a:e5:06:3d:f9:e2:70:d9:b5:65:db:b6:e8:2e:f7:97:4f:
ac:f6:36:0c:43:a3:5c:35:4c:96:fc:0c:e4:01:67:c4:a0:18:
18:22:17:19:f4:87:76:7d:a4:08:fd:b9:aa:ee:32:d9:8a:a8:
56:23:c9:d9:53:5c:06:d7:fa:23:08:83:8e:12:82:5a:96:6c:
7b:06:68:2d:5d:b1:28:db:a3:87:b9:0b:15:3d:93:dc:83:96:
c2:e4:5d:b1:ac:69:6c:bf:3c:ca:b3:42:0f:1f:5a:e6:e4:59:
21:0d:f9:06:16:3c:9b:42:cb:cd:b3:58:b1:ab:7c:fd:09:02:
8d:7c:c3:ed:e0:f2:06:fb:86:96:da:88:52:52:b6:11:35:23:
39:47:1b:90:dd:89:de:8b:9c:bc:d8:1b:ee:2f:a3:e6:bc:8c:
5a:08:66:35:2e:10:d6:62:3e:5f:ba:89:4b:e3:c9:b1:8c:e3:
74:86:c3:4f:22:ad:6a:95:41:b1:c0:a5:ea:22:89:ce:08:05:
74:4c:98:a2:60:40:84:7e:45:4f:59:dd:2f:23:fa:1b:6b:d8:
f6:a5:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org