Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/STZu9dQarsXB5gAxhAIGHkMAL_c.roa
File: STZu9dQarsXB5gAxhAIGHkMAL_c.roa (raw, json)
Hash identifier: C0p7FCPFxxH4EQeFNVZ9roiQDCsSU0FXTc1O4yPg/CE=
Subject key identifier: 49:36:6E:F5:D4:1A:AE:C5:C1:E6:00:31:84:02:06:1E:43:00:2F:F7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188E50AE4DBC64BFAE39C5CF819A76AB1E3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/STZu9dQarsXB5gAxhAIGHkMAL_c.roa
Signing time: Thu 22 Jun 2023 21:37:56 +0000
ROA not before: Thu 22 Jun 2023 21:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 194.147.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e5:0a:e4:db:c6:4b:fa:e3:9c:5c:f8:19:a7:6a:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 22 21:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49366ef5d41aaec5c1e600318402061e43002ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:ed:4d:03:5f:73:25:55:f5:26:ad:17:f7:
4d:3f:77:b6:7c:54:0c:6d:0f:3b:aa:f7:2c:c2:d9:
ab:19:3a:9b:45:51:ff:f3:78:42:5f:d1:ba:8b:e3:
cb:c5:74:c4:97:0d:eb:44:17:5e:9b:76:c7:6e:e6:
84:07:e5:8e:00:4a:84:06:43:08:06:72:02:30:11:
39:07:01:04:63:32:e2:d0:b6:60:41:71:7f:28:41:
13:da:ae:dc:6d:62:4b:bf:ff:f0:f0:bc:5a:0a:e4:
5d:a6:97:eb:53:eb:dd:2d:bf:aa:3c:29:22:db:f7:
8a:1a:39:61:e1:08:56:eb:e7:96:9a:88:be:ff:9f:
97:4f:3a:26:35:f0:57:e5:09:b3:0a:95:7f:b3:83:
2b:f3:ee:6f:3f:b0:95:5c:5b:c4:9d:89:7f:a4:4e:
d2:92:04:ef:82:48:3f:a0:15:c2:4e:f0:56:d6:26:
4f:da:b0:2b:ba:de:08:e9:24:89:56:4a:b2:31:22:
25:28:05:11:60:d2:d4:9a:0e:a5:f6:de:ca:3e:25:
37:69:c2:80:38:d5:56:11:3e:3d:c1:a2:04:71:9b:
8f:6a:06:c6:ce:67:c1:04:45:d3:89:5a:1d:8f:5d:
72:39:9e:89:f9:ee:38:6d:46:04:0e:37:20:a4:a6:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:6E:F5:D4:1A:AE:C5:C1:E6:00:31:84:02:06:1E:43:00:2F:F7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/STZu9dQarsXB5gAxhAIGHkMAL_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e3:72:5b:fb:9d:51:ba:64:33:0e:c7:d0:b3:f6:e9:13:e1:
0b:ce:c8:3f:78:b8:ae:da:c3:9c:47:1f:b7:0b:95:7e:4f:e5:
ac:af:19:66:97:ae:75:a5:9c:ba:fe:e7:f7:da:99:7e:94:c9:
62:76:63:81:1b:18:c1:9a:57:5e:7e:de:db:48:78:41:27:9b:
f3:88:c5:ae:5d:84:bc:75:95:05:f9:af:35:af:b7:f4:05:81:
35:75:a0:79:35:62:72:2e:09:3f:72:19:7c:e4:fa:43:b5:39:
a8:81:4c:46:3f:74:cd:30:15:77:22:dd:a3:cc:8e:30:c8:5f:
28:ca:4f:ef:59:c0:6e:df:1f:01:b4:f7:b8:c2:0e:cf:52:33:
cd:de:dd:5c:c8:be:a0:81:33:b6:24:c4:26:34:51:1b:4b:b4:
4c:a8:0b:56:51:ce:8e:e2:50:63:5c:d1:eb:a4:21:d6:dd:7f:
67:e3:78:2c:75:de:93:d2:ba:56:b1:a4:d0:65:af:98:83:df:
05:8d:39:e6:7e:74:49:11:f9:96:72:d5:2b:d7:d6:4c:71:33:
2a:5b:57:99:18:00:f4:c5:5b:45:42:1a:ab:7a:a7:8a:88:bd:
ff:21:9f:a2:0a:24:be:3e:58:de:0e:eb:94:a5:5e:fc:d3:75:
09:df:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org