Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J8Hr_3P_Nc2u4gVWWujaUgUrQms.roa
File: J8Hr_3P_Nc2u4gVWWujaUgUrQms.roa (raw, json)
Hash identifier: Q6mV2ek6X/FMtxdxwAx2nA7etRhADvl+rldCPQBNhpk=
Subject key identifier: 27:C1:EB:FF:73:FF:35:CD:AE:E2:05:56:5A:E8:DA:52:05:2B:42:6B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018FC3363CC7ACE1A0C1822ECE2B74B79F07
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J8Hr_3P_Nc2u4gVWWujaUgUrQms.roa
Signing time: Wed 29 May 2024 07:17:42 +0000
ROA not before: Wed 29 May 2024 07:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 194.124.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:36:3c:c7:ac:e1:a0:c1:82:2e:ce:2b:74:b7:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 29 07:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c1ebff73ff35cdaee205565ae8da52052b426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:42:12:41:5a:2c:90:b7:47:f1:f0:20:0b:
99:1f:50:02:43:0d:70:a8:01:28:fc:d5:92:85:fc:
87:5c:45:1a:61:8f:14:8f:e9:4b:a0:4d:82:a6:76:
f4:00:33:54:c6:0f:58:d7:26:30:6e:41:bf:ab:b8:
50:64:7c:0a:3c:24:e9:0e:a2:00:a4:8a:21:9d:a4:
d3:7c:cb:a7:86:d0:ac:66:dd:17:a7:82:f1:9d:50:
88:ee:bd:03:f6:2d:75:dc:51:68:63:58:ec:d9:da:
49:85:03:26:4e:7e:0a:ca:4d:ee:34:9e:c5:58:f0:
7d:42:1c:3d:16:73:08:27:70:b6:cd:6f:b4:e4:25:
ac:b4:a6:28:fa:21:a9:a7:ca:07:ae:bd:7b:30:0e:
d0:f9:80:ea:f2:eb:78:4e:3a:ca:71:65:05:ff:c4:
d1:16:30:26:86:90:b3:93:e7:44:2c:a2:46:06:d3:
34:f9:8d:df:fe:a6:03:78:b7:e5:0a:b7:34:1f:fb:
b3:7a:33:43:06:35:7b:ef:65:7d:2e:b4:53:38:20:
43:12:ae:99:c5:25:60:ee:13:10:e3:07:c6:72:ba:
5f:71:f9:06:0f:57:c7:6f:1c:dd:5b:92:47:15:7e:
57:9c:39:00:02:27:04:67:5a:99:03:b5:ee:83:8d:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:EB:FF:73:FF:35:CD:AE:E2:05:56:5A:E8:DA:52:05:2B:42:6B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J8Hr_3P_Nc2u4gVWWujaUgUrQms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
02:34:e6:8b:7d:65:c3:46:93:18:16:6b:a1:04:21:5d:68:ad:
60:0b:13:18:d0:e8:9d:a8:bd:3b:3f:5e:ee:59:e9:37:2d:42:
36:e9:e2:42:65:1d:11:9f:09:f8:a7:d4:b2:10:e8:58:92:20:
02:91:9b:3a:c0:f5:eb:c2:da:95:48:05:6e:94:cf:c2:12:b3:
d9:e8:a8:4b:09:34:a0:1c:43:54:06:18:67:3e:d3:2f:fb:bb:
d9:b0:20:2e:d1:54:43:06:10:3c:c0:2d:95:b9:f0:f6:59:79:
0b:63:51:22:20:58:3a:85:9f:0f:16:9c:b8:88:fb:3b:ec:5d:
ac:75:e8:be:b6:7a:d1:0b:5c:a2:fa:c9:25:43:65:97:60:bd:
10:81:db:7d:6c:1f:97:2b:b1:01:da:64:12:53:37:2d:69:46:
10:64:e3:92:e8:e8:c3:f8:fb:5d:a5:eb:35:10:ee:e5:7d:a1:
47:2d:d6:9c:13:ae:60:8a:3b:14:5f:47:08:a3:bb:30:1f:29:
e7:47:5b:e7:0f:6a:4e:03:ea:10:cf:53:2f:94:ad:fa:09:2c:
89:f4:ed:72:a2:2d:3a:b0:2c:72:88:ee:9f:a7:dc:b9:cd:a8:
50:98:6a:e3:f4:5e:66:f3:6c:e7:c3:6f:68:c4:a2:b5:9b:bb:
24:32:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:07:27 2024 by rpki-client on console-ams.rpki-client.org