Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aNRf3fh5MkjkRIxAQL8ieh8pC_o.roa
File: aNRf3fh5MkjkRIxAQL8ieh8pC_o.roa (raw, json)
Hash identifier: HDMMkBDbd6+9f/do0dmIt2R6DDYiXtVElRBKhzTW0f0=
Subject key identifier: 68:D4:5F:DD:F8:79:32:48:E4:44:8C:40:40:BF:22:7A:1F:29:0B:FA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189D09F74DB9F85DDDEC9C317DF3F965657
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aNRf3fh5MkjkRIxAQL8ieh8pC_o.roa
Signing time: Mon 07 Aug 2023 15:30:58 +0000
ROA not before: Mon 07 Aug 2023 15:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 194.147.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:9f:74:db:9f:85:dd:de:c9:c3:17:df:3f:96:56:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 15:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68d45fddf8793248e4448c4040bf227a1f290bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:ed:f3:11:19:38:11:f9:b1:d9:68:32:51:
a9:d1:60:ba:41:8e:2a:96:40:dd:08:5b:76:d3:dc:
54:04:3a:92:72:23:53:10:4c:73:24:8c:3e:26:e7:
d1:55:87:49:e0:cc:4a:78:e6:1c:c1:16:5e:b0:c8:
70:eb:c6:3b:a1:78:11:b4:0b:4c:47:e2:05:68:68:
b3:fb:37:a2:f4:52:e1:f1:95:78:c8:72:46:94:72:
b8:b2:02:9d:40:e6:e6:bf:47:3d:16:11:b2:74:8c:
fb:b3:c3:e6:4c:27:96:09:92:9c:43:57:d5:45:16:
16:3c:84:47:32:a8:73:71:2d:e9:86:cc:e4:f9:9a:
23:fe:7c:d4:d7:8c:0a:8d:de:47:56:a6:fb:ff:7f:
a0:69:71:72:dd:3f:65:ab:06:4a:67:5f:60:cc:bf:
3b:e4:a6:95:ef:dc:c0:fe:3f:01:70:7a:2b:d8:db:
d3:d9:75:4b:41:df:81:93:66:c4:0b:fa:05:92:98:
1a:d6:04:9a:83:26:1b:fd:e3:f8:6e:98:78:03:63:
a7:80:35:00:58:85:7e:24:8b:8b:a9:2d:18:39:08:
e8:37:7d:c0:e4:0d:45:cf:c5:84:a5:59:fd:68:d0:
da:d8:ec:bc:b4:aa:c1:62:7a:b8:51:99:03:6c:c1:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:5F:DD:F8:79:32:48:E4:44:8C:40:40:BF:22:7A:1F:29:0B:FA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aNRf3fh5MkjkRIxAQL8ieh8pC_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fd:ba:58:88:11:5f:a7:07:ee:a6:10:6f:7f:dd:f8:9a:43:
ba:a0:c5:61:59:28:e5:91:92:45:66:88:b4:6c:52:94:b6:4c:
b9:09:e3:b3:bc:d6:57:5c:7e:18:bc:eb:93:06:e3:61:63:12:
9c:b5:44:6f:94:74:fd:1f:6e:a7:4f:dd:9b:9e:63:c8:cc:c3:
f9:24:ff:79:37:f2:14:0b:b0:d7:9e:62:f1:0e:49:69:a6:0c:
d1:9f:f9:19:1e:44:26:0e:fd:af:c4:24:0e:4a:d9:62:fa:3d:
a4:34:aa:e6:47:8f:16:9c:fa:24:a4:4a:50:a6:4c:e5:9c:b1:
35:a7:b8:e3:f0:d5:45:e3:3f:20:6d:62:78:b9:76:d0:61:2f:
11:ab:4d:61:b4:46:7b:a1:0c:c5:6a:16:c4:e8:89:dd:88:6c:
64:49:69:c7:a0:7d:2c:5e:0f:f0:d5:c6:3d:02:92:f1:bd:d6:
9d:5d:a7:98:44:33:41:a1:f8:e8:c4:1b:47:c4:d7:78:d6:49:
d0:77:71:20:43:da:dd:db:a3:9a:b2:94:5f:3f:6d:42:bb:69:
7e:1b:eb:33:c9:f0:94:0b:3f:fb:a4:91:d5:8c:d5:55:ce:8e:
a9:86:c9:a1:c5:ce:44:9a:75:a3:09:24:73:1d:18:98:3f:16:
78:6f:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org