Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/nUW44Mo6UzEDPchd2mPKKiGKXcQ.roa
File: nUW44Mo6UzEDPchd2mPKKiGKXcQ.roa (raw, json)
Hash identifier: TkeGcnuV57nxBkTgAUWEp7frU6XWuPs+XD+Zod8oFrg=
Subject key identifier: 9D:45:B8:E0:CA:3A:53:31:03:3D:C8:5D:DA:63:CA:2A:21:8A:5D:C4
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 018CC6B85620405E751BF48AF7E962C95B11
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/nUW44Mo6UzEDPchd2mPKKiGKXcQ.roa
Signing time: Mon 01 Jan 2024 20:30:18 +0000
ROA not before: Mon 01 Jan 2024 20:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202405
IP address blocks: 194.147.196.0/22 maxlen: 24
194.147.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 06:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:56:20:40:5e:75:1b:f4:8a:f7:e9:62:c9:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 1 20:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d45b8e0ca3a5331033dc85dda63ca2a218a5dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:23:ed:77:e0:4c:28:ef:1b:e2:70:55:c7:
3d:e3:6c:8b:f5:97:ae:df:81:ae:96:80:70:44:66:
5f:73:22:79:59:6c:75:39:93:c5:05:f4:09:24:b3:
2a:88:ff:c3:a2:1b:41:5c:2b:5b:17:23:ef:ad:96:
8e:dd:7c:75:ad:d7:84:22:e8:d5:b9:94:44:26:89:
b0:62:1c:e8:b2:61:fe:40:38:32:12:aa:2c:83:b8:
af:20:2b:d3:3c:11:0d:ff:60:7c:60:a4:db:98:e0:
20:d7:3d:da:aa:6e:fc:11:85:09:31:e2:af:f1:81:
42:92:0b:d6:41:26:bd:8c:6a:34:d9:aa:5d:f9:93:
18:e7:41:8d:93:4a:ee:51:2d:da:85:cd:b9:58:bb:
6e:ca:5a:d9:83:45:a2:b4:0c:f8:28:46:06:83:12:
6a:d7:ed:07:6e:96:4d:33:04:50:9c:61:77:ec:12:
c8:47:4f:e6:39:cf:b8:ed:1d:d8:e2:81:52:40:ac:
82:1e:12:c9:f8:36:f6:a9:33:5a:65:ae:c7:53:da:
f6:30:e3:0e:8b:5c:27:91:3f:90:ea:b9:d4:55:03:
fa:b3:1f:c7:7e:04:f1:86:25:66:87:47:97:10:de:
62:57:51:97:a4:55:e6:ab:94:09:58:80:67:e3:b5:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:B8:E0:CA:3A:53:31:03:3D:C8:5D:DA:63:CA:2A:21:8A:5D:C4
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/nUW44Mo6UzEDPchd2mPKKiGKXcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.196.0-194.147.207.255
Signature Algorithm: sha256WithRSAEncryption
68:de:e3:e0:dd:33:e3:45:16:7c:38:c7:4f:60:7b:f9:a6:20:
d8:02:cc:0c:0a:1a:4f:4b:9d:c4:07:ab:b0:01:15:cd:fc:28:
35:1f:82:f4:cb:bc:de:e2:92:bd:7e:b4:59:7e:af:c0:38:bd:
dc:e3:42:8b:01:a3:1b:83:b2:9c:99:83:15:38:a6:91:70:25:
27:42:ff:a8:ee:3d:05:bd:12:cd:a0:a3:bc:16:40:ab:43:7f:
a2:16:64:fe:61:6a:1f:39:85:da:bb:ab:fa:0b:41:11:73:0f:
07:9b:b0:3b:53:98:a1:73:78:90:fe:9b:0e:e3:32:f5:f5:54:
a3:7b:a5:32:c4:2b:91:39:0a:db:d1:5d:ce:d6:a6:96:5a:e0:
97:ac:8c:4f:7e:b2:db:00:2b:fe:ba:39:71:50:7e:5c:a3:66:
9a:cd:28:c1:da:59:c2:cd:1d:37:dc:a5:58:d0:30:d9:cc:26:
4a:65:b9:2d:f6:7f:49:59:bb:ee:64:a5:a0:de:87:92:fd:17:
ed:9e:1e:c1:ba:22:62:13:e9:bd:d5:22:3f:c4:7f:d8:58:b2:
29:76:d5:ce:a1:f3:8c:44:65:ba:f6:ef:67:44:27:bf:2c:f8:
75:ab:fb:d5:75:38:2c:6d:78:64:b1:f9:10:a9:6e:fe:be:5e:
84:68:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:08 2024 by rpki-client on console-ams.rpki-client.org