Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/s7KrEjYECZyPu1Ci-Yzob8CP4Lo.roa
File: s7KrEjYECZyPu1Ci-Yzob8CP4Lo.roa (raw, json)
Hash identifier: NdIdqUG5ZBivbg3F5dOlxm7HpE+9va9R2GDKs5iWZbQ=
Subject key identifier: B3:B2:AB:12:36:04:09:9C:8F:BB:50:A2:F9:8C:E8:6F:C0:8F:E0:BA
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018B48AB6F64941414D17C57D0D130C2018F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/s7KrEjYECZyPu1Ci-Yzob8CP4Lo.roa
Signing time: Thu 19 Oct 2023 16:01:16 +0000
ROA not before: Thu 19 Oct 2023 16:01:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202345
IP address blocks: 194.147.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:ab:6f:64:94:14:14:d1:7c:57:d0:d1:30:c2:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Oct 19 16:01:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3b2ab123604099c8fbb50a2f98ce86fc08fe0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:db:b0:85:93:44:41:15:1f:d0:57:6e:da:
97:bc:5a:d3:53:fd:d4:c3:5b:32:17:41:f0:12:b6:
7d:b6:67:78:b0:9b:06:4e:93:53:bb:46:05:8f:78:
e9:87:87:53:9d:e8:d1:1b:e7:02:38:6c:82:8a:10:
05:7e:6d:40:91:cd:69:fd:84:5f:b3:f7:b0:d2:16:
be:4a:b1:79:bf:b3:25:71:b6:41:ed:59:ef:8a:34:
3b:5c:f3:5d:8a:e8:db:99:cf:ef:47:cc:6d:23:dd:
ec:14:1a:d4:11:fb:a9:d1:62:4c:c8:cd:b7:ad:56:
3a:7b:3f:1f:b7:8d:d5:e7:1f:97:1d:af:92:f2:02:
36:54:32:29:93:63:6e:77:74:09:f6:b9:1a:54:ad:
15:ac:36:cc:f0:25:4a:80:f2:fc:4f:5e:88:ff:90:
40:7e:b9:69:57:af:50:71:f7:5f:bc:26:c2:e6:36:
6e:ed:dd:20:a2:fe:b8:b0:9e:1b:7f:2d:6a:03:50:
84:8e:d3:50:b6:a5:82:cf:17:d2:d1:b9:4c:56:16:
95:0c:fc:9f:1a:5f:8c:55:48:4e:c8:0c:37:6b:32:
94:11:b2:c0:51:a6:08:b0:62:83:21:24:19:50:01:
75:17:8c:7d:39:ea:b3:23:e4:43:63:8f:44:4c:e9:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:AB:12:36:04:09:9C:8F:BB:50:A2:F9:8C:E8:6F:C0:8F:E0:BA
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/s7KrEjYECZyPu1Ci-Yzob8CP4Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.116.0/22
Signature Algorithm: sha256WithRSAEncryption
98:1d:d6:c7:21:be:0c:7f:39:ac:b4:7e:30:60:8f:8c:29:80:
58:57:d0:9f:13:0c:7f:37:2b:50:0e:10:05:61:ea:ec:55:a0:
c4:0b:d9:7e:5e:95:7b:07:93:b0:1a:f8:21:31:93:09:05:f2:
98:2d:46:ca:8c:87:3a:09:92:5b:31:02:1d:79:3e:a0:6d:bb:
14:f7:5e:fd:ad:ef:87:32:d6:86:db:ed:d0:e9:69:56:bc:98:
31:d3:ea:8e:c8:79:34:ef:c6:d6:dd:4a:4c:3b:e9:9d:8c:98:
1f:62:e9:53:13:bd:d5:d4:e6:43:7c:e2:28:79:a7:60:c7:c7:
0f:02:bd:f9:62:72:98:46:0d:d2:1a:f5:03:5c:1d:d9:12:38:
b0:09:2f:07:f9:85:de:ef:ae:fe:25:97:9e:c6:0a:e4:f0:76:
cb:a7:f4:89:47:c4:f8:35:f3:4f:3e:4a:4a:ee:fa:f1:22:d3:
de:60:1b:3b:6e:15:d4:81:8f:cd:7b:7e:59:80:06:79:ee:65:
e3:85:7f:8a:ef:1c:cc:a5:d8:f3:0a:6e:de:3d:c4:77:35:42:
57:dc:df:42:7b:69:b9:17:79:79:9c:d7:bf:96:a8:fb:c7:eb:
df:6a:11:64:1d:66:d0:c1:db:24:d0:91:ad:aa:9d:93:58:43:
44:79:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org