Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2q9nqV_S98sY_WdaoKZU1kap5uE.roa
File: 2q9nqV_S98sY_WdaoKZU1kap5uE.roa (raw, json)
Hash identifier: 2uRyrj6uCiDWblIq6DhfZRDABo5ve8h8o69CA3dhwkQ=
Subject key identifier: DA:AF:67:A9:5F:D2:F7:CB:18:FD:67:5A:A0:A6:54:D6:46:A9:E6:E1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C86FEFAAEFDC361B8A7ECE7F27EBC2EA2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2q9nqV_S98sY_WdaoKZU1kap5uE.roa
Signing time: Wed 20 Dec 2023 11:31:46 +0000
ROA not before: Wed 20 Dec 2023 11:31:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26141
IP address blocks: 194.26.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:fe:fa:ae:fd:c3:61:b8:a7:ec:e7:f2:7e:bc:2e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 20 11:31:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daaf67a95fd2f7cb18fd675aa0a654d646a9e6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:75:40:ab:bf:4b:47:68:66:4d:3f:d3:e9:
7a:7f:45:47:cb:ea:00:1a:78:9b:87:26:db:34:bf:
50:8e:21:e5:f9:24:2a:70:12:0d:2a:34:1d:fc:cb:
60:c7:f9:ec:4c:70:e6:00:df:98:97:6a:9c:31:fc:
70:ae:25:00:38:f5:aa:cb:a0:4d:8a:dc:56:74:c1:
d5:4b:9d:95:55:90:e4:db:e6:09:73:16:87:95:0a:
6b:78:2b:d9:79:8c:b0:8c:fb:c0:95:eb:42:87:26:
55:af:e8:75:d0:c3:7d:80:61:43:fa:4b:36:48:ab:
d0:6d:04:ec:8c:57:19:d0:36:d5:38:99:d0:a4:a4:
6c:00:c8:cd:bd:41:a2:0a:ec:d2:72:4e:71:b3:21:
32:33:bf:e2:33:58:7b:57:82:1e:2a:a1:f7:a4:84:
b8:09:b8:53:5e:22:c5:58:ac:43:1b:50:5a:63:4f:
8a:72:ab:af:a1:c1:90:e9:f3:49:6f:96:33:51:24:
6e:3a:2c:ca:39:cd:c8:67:6a:fb:bc:6b:5d:c7:c7:
fc:ad:f6:03:97:8b:20:53:18:1e:b5:fe:32:08:8b:
4d:d7:d1:d1:7c:ac:9f:89:5c:45:6b:07:d1:b5:f0:
91:3c:8a:e7:25:55:c1:2a:99:90:0e:ca:5a:c1:77:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:67:A9:5F:D2:F7:CB:18:FD:67:5A:A0:A6:54:D6:46:A9:E6:E1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2q9nqV_S98sY_WdaoKZU1kap5uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
75:89:25:9a:76:4c:ee:d6:10:50:f1:d2:44:6e:11:4e:77:f7:
a5:ac:6b:81:5e:0f:38:6d:3b:2e:ee:42:9e:50:da:ca:77:bc:
08:23:6e:b1:f2:9c:4a:be:bf:c1:59:b2:b2:c6:ab:a5:68:57:
cd:f5:10:ed:72:32:bb:38:56:25:5b:b0:da:48:38:2d:7c:21:
67:57:86:31:7b:0c:08:73:9e:94:da:67:d9:9c:f8:f8:22:ba:
3d:21:35:c7:be:89:bf:d7:6e:4d:ac:87:7a:99:8c:4f:66:7b:
ac:20:ed:52:04:31:c4:b9:ac:1d:ad:5f:0f:20:18:3c:6d:05:
87:69:8e:57:0f:7a:a1:a3:99:5c:17:8b:7b:b4:b3:75:29:11:
37:0e:e6:71:28:94:da:f3:44:43:76:de:58:2b:f2:b5:64:85:
5e:bd:f7:35:20:26:0d:77:e4:12:85:f2:43:11:f2:5d:f6:63:
9f:da:a0:58:0a:70:1a:bf:8a:38:12:66:54:93:77:db:12:16:
a8:1a:7f:6f:66:37:51:42:4c:ca:d7:c0:e0:b0:26:a2:b8:be:
af:33:52:48:9a:f7:06:20:1f:3c:40:1d:9a:f7:59:a4:1b:db:
e8:bd:bd:0d:69:e9:31:7f:ab:33:72:19:8a:3f:da:f1:98:f1:
64:87:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org