Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/piF8o_jOK3YWmGK1HJki-qQHfGY.roa
File: piF8o_jOK3YWmGK1HJki-qQHfGY.roa (raw, json)
Hash identifier: QJ3h1Zm0AOMEO48rpBkc2wo3ay25bzCE8Zxyv6FBzhU=
Subject key identifier: A6:21:7C:A3:F8:CE:2B:76:16:98:62:B5:1C:99:22:FA:A4:07:7C:66
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01924DF0F1AD457F8FCD48F66E1579F506F6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/piF8o_jOK3YWmGK1HJki-qQHfGY.roa
Signing time: Wed 02 Oct 2024 15:54:48 +0000
ROA not before: Wed 02 Oct 2024 15:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 194.76.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 10:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:f0:f1:ad:45:7f:8f:cd:48:f6:6e:15:79:f5:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 2 15:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6217ca3f8ce2b76169862b51c9922faa4077c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:4a:12:68:05:bf:3e:bf:65:23:f9:c9:bb:
97:b6:32:55:65:4c:4c:d0:87:0d:48:00:3b:eb:e5:
96:47:8b:f3:bd:41:ca:7c:09:9e:ea:6b:45:1c:bf:
85:19:83:eb:5e:aa:80:60:f6:72:92:c1:8a:6f:74:
f4:fe:d0:04:30:6b:c8:e7:65:a1:fc:3b:91:c0:b9:
f0:30:f5:4b:b7:e5:5c:65:dd:61:01:94:fa:12:da:
ff:75:74:11:fe:15:1d:c5:07:8a:e1:60:76:16:c1:
6c:95:8a:99:84:c2:3b:23:b5:4a:af:14:46:8b:99:
25:4b:7b:55:b7:32:57:83:5e:2d:42:11:2f:c9:73:
17:6e:7a:40:bf:ee:d3:2a:09:28:b5:27:eb:3d:d9:
c0:d6:68:ff:91:89:f9:7f:57:6d:d3:5c:e7:47:17:
18:52:1d:d6:b2:f3:47:bf:85:ad:85:4b:ad:5b:3f:
44:a5:ab:40:f1:50:17:0f:ee:e6:39:c9:03:dc:a8:
ae:aa:83:a7:95:07:0a:0c:d4:c3:23:76:0e:72:50:
89:2c:b9:2d:3c:db:cb:34:52:63:d3:55:59:61:22:
ad:e4:d5:a9:ac:fc:b8:f3:41:47:74:1a:92:d0:2b:
9b:18:bd:64:d4:31:4e:b8:6a:14:19:15:ba:c8:5a:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:7C:A3:F8:CE:2B:76:16:98:62:B5:1C:99:22:FA:A4:07:7C:66
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/piF8o_jOK3YWmGK1HJki-qQHfGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
40:68:e5:99:14:4f:de:d7:f7:72:b3:dc:5e:55:03:59:1e:62:
8a:6c:61:d2:c7:f0:b8:ec:6f:11:4f:39:9c:12:2e:a0:b5:55:
08:2d:3d:4e:60:bb:90:a2:48:ef:85:b2:5c:d0:9e:06:a0:d2:
aa:c7:75:ea:c0:e6:5f:03:23:f8:de:44:46:a8:33:f6:e8:dd:
1c:20:50:5f:ae:8f:42:29:e6:34:0d:ac:e4:a8:24:ad:b3:c5:
3a:fa:89:27:88:cd:9c:78:81:27:e0:33:02:97:54:30:84:e2:
c7:ca:a8:1f:e2:0b:46:f4:7d:e2:e3:eb:c5:b8:9b:6b:0b:47:
40:08:08:04:dc:c5:bd:6f:1b:4e:3c:23:d8:a3:a5:6b:82:03:
91:ba:dd:39:4d:55:c8:08:b3:a6:70:a9:b6:1d:65:96:ab:76:
06:77:d0:9b:15:ca:91:be:a3:b2:b4:1f:67:71:dc:41:7a:1e:
e4:97:0c:0e:a5:57:15:9c:3f:ea:9a:9d:f2:e3:3a:56:23:8c:
88:4b:6e:2b:d9:42:b1:c8:cb:c3:39:0a:e9:5a:f1:09:e0:2f:
f1:d1:9b:57:3f:d3:12:22:c2:39:89:71:cc:9d:2d:a8:89:13:
4d:d5:06:fe:f4:33:e2:52:1c:c3:f2:90:2e:38:1d:5b:e3:5e:
e5:ee:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:08:42 2024 by rpki-client on console-fra.rpki-client.org