Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/I0mvzDzkZ3DMyOhjnO_bSV8Nia4.roa
File: I0mvzDzkZ3DMyOhjnO_bSV8Nia4.roa (raw, json)
Hash identifier: 9Eol1xaAEqqieDhlNN4kjVNbIHfzwOvmkbsB3bXELz4=
Subject key identifier: 23:49:AF:CC:3C:E4:67:70:CC:C8:E8:63:9C:EF:DB:49:5F:0D:89:AE
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 018CC6B855A38F6651DE072FCC592C889358
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/I0mvzDzkZ3DMyOhjnO_bSV8Nia4.roa
Signing time: Mon 01 Jan 2024 20:30:18 +0000
ROA not before: Mon 01 Jan 2024 20:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20546
IP address blocks: 194.147.196.0/22 maxlen: 24
194.147.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 06:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:55:a3:8f:66:51:de:07:2f:cc:59:2c:88:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 1 20:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2349afcc3ce46770ccc8e8639cefdb495f0d89ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:00:09:93:43:3b:e8:57:f7:59:a3:04:00:
d5:58:2d:62:db:fa:ca:21:b8:83:2e:c0:67:e1:36:
75:64:98:f3:57:fd:df:36:0c:ec:14:6f:b7:68:bb:
d2:44:4b:84:43:65:37:d2:2e:90:a4:93:f8:c7:8e:
b6:04:c6:05:a6:e0:ca:58:89:f6:55:7d:46:30:23:
ca:62:86:21:d0:5b:28:65:27:1f:c0:38:56:c0:80:
11:53:84:ea:25:27:d6:b8:d1:ca:1f:03:f7:59:7c:
a0:06:d3:8d:01:50:e9:1f:50:7f:6b:e2:7f:76:35:
f4:fe:1d:57:53:f3:f7:94:9f:d0:ac:82:cd:61:a8:
eb:46:86:27:34:d4:c1:0b:67:b0:ee:f1:61:5b:0e:
6d:ed:84:a2:b1:2e:e7:0a:55:03:cb:3a:81:fc:6e:
2a:55:11:9f:05:cf:23:61:83:bd:8b:ff:40:2a:f3:
ee:65:5a:c7:ba:c3:99:1a:f1:60:66:a5:e2:06:72:
c2:31:54:c6:bf:ea:33:db:03:3b:a6:bb:15:fb:fb:
3c:f1:68:46:c5:fc:11:2a:b2:a8:51:93:85:8d:c9:
e6:77:06:87:16:0c:6f:fd:e3:3f:49:2a:8a:d9:56:
a9:3c:e3:7f:a6:dc:41:37:c6:65:a1:e1:23:da:66:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:AF:CC:3C:E4:67:70:CC:C8:E8:63:9C:EF:DB:49:5F:0D:89:AE
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/I0mvzDzkZ3DMyOhjnO_bSV8Nia4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.196.0-194.147.207.255
Signature Algorithm: sha256WithRSAEncryption
8f:c9:f2:1e:3a:25:94:9e:df:13:2a:ce:30:3e:2e:46:01:04:
58:62:9e:d3:e1:ee:31:7d:21:40:99:63:c1:b1:f5:54:75:90:
74:27:7f:14:9a:f1:8e:90:1c:df:88:49:1a:d2:09:78:b1:56:
8a:87:f8:8d:49:4e:96:da:5b:10:2c:48:d6:36:3c:f8:fc:5c:
17:73:68:f2:e2:4e:9d:bc:e8:f9:54:de:dd:73:27:e1:58:c1:
69:42:64:c4:d8:1d:dc:76:45:0c:8b:5f:39:91:ee:2d:d5:38:
0c:e8:0e:4c:04:23:f1:b4:90:6f:95:70:0a:eb:b2:78:fa:05:
9c:5a:66:56:94:33:52:cf:1a:c7:4d:84:92:0b:55:73:de:46:
80:4f:0e:de:d1:3c:1d:a3:31:e2:43:12:5e:e8:3b:89:84:a0:
83:70:73:ad:3c:d6:73:89:6a:c1:a0:34:17:9a:9d:5e:c8:49:
48:55:3f:0b:25:16:c9:22:c2:70:0d:55:5a:35:87:f5:dc:98:
89:3f:52:f7:d4:c6:28:4e:5c:b0:d5:0c:ed:2a:00:92:cb:d7:
f8:ab:7e:c9:8f:58:5f:67:e4:11:0f:31:0b:d9:1e:59:ad:47:
b3:09:30:e3:6a:b2:09:1c:1a:7d:d8:a4:3d:e7:51:04:28:48:
2d:7b:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 08:48:39 2024 by rpki-client on console-fra.rpki-client.org