Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x1tOCmweO9fdmXQAm6OzcjjjzBs.roa
File: x1tOCmweO9fdmXQAm6OzcjjjzBs.roa (raw, json)
Hash identifier: KETy1CQkG2THZtVQPM0zjTQjAq5Glwsn8ESW/ZzusFY=
Subject key identifier: C7:5B:4E:0A:6C:1E:3B:D7:DD:99:74:00:9B:A3:B3:72:38:E3:CC:1B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186F06A5AFB7FC0503D9EBB36174E7D84F6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x1tOCmweO9fdmXQAm6OzcjjjzBs.roa
Signing time: Fri 17 Mar 2023 16:32:27 +0000
ROA not before: Fri 17 Mar 2023 16:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 194.147.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 09:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:6a:5a:fb:7f:c0:50:3d:9e:bb:36:17:4e:7d:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 17 16:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75b4e0a6c1e3bd7dd9974009ba3b37238e3cc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:fd:f1:59:3d:1c:d1:41:6e:2a:c9:bf:bc:
9d:a4:87:5f:0c:5d:2d:b3:97:ba:28:e9:c3:d3:c8:
c0:12:77:3b:f8:0e:0a:6a:b8:20:89:2a:01:74:c0:
74:d8:e9:31:9b:96:d9:e8:6d:ac:fb:61:35:c3:19:
43:e7:b2:de:48:37:de:b1:58:8e:e0:41:3a:a6:da:
2b:6b:be:a3:40:55:51:21:8c:8b:eb:6f:8d:78:cc:
0f:24:fc:47:cd:6a:6f:c4:ca:be:10:b7:07:40:92:
7e:66:60:91:3a:82:fe:99:a2:e4:ef:54:9d:b1:ab:
cd:46:4f:f3:28:9e:9f:40:e2:d6:6e:3a:a8:23:6e:
de:09:06:b0:49:d2:5a:09:73:bc:bc:a5:52:b1:38:
82:21:ee:58:4a:07:09:4c:ea:79:23:de:24:56:21:
fc:8c:ef:7d:07:b0:bb:6c:8b:c5:a5:66:55:f6:a6:
d4:41:ba:d3:30:dc:e6:55:a8:38:f6:52:14:90:01:
fc:7d:77:75:06:50:8c:c9:ec:8f:55:96:00:3a:73:
57:9e:2c:02:4d:05:64:10:e4:09:1a:09:c5:08:62:
a3:df:21:8d:1a:0c:ae:d3:ff:a9:c6:60:e8:76:5d:
b6:4c:38:5c:7e:66:83:d3:ad:f0:7e:ca:1b:7c:6f:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5B:4E:0A:6C:1E:3B:D7:DD:99:74:00:9B:A3:B3:72:38:E3:CC:1B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x1tOCmweO9fdmXQAm6OzcjjjzBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9b:b5:85:96:0b:dd:c6:81:c9:50:0b:d2:82:a7:b2:0a:a6:
68:65:e0:13:ff:08:1f:51:70:7c:89:fc:af:c8:13:a0:c6:b9:
3f:ca:d1:51:ea:5c:58:4e:45:5c:df:01:e6:f3:3a:1b:b1:76:
fc:8a:b7:3f:56:99:d5:30:88:a1:6a:ff:bd:e2:45:11:ea:29:
c4:18:3e:cf:cf:dd:cf:c5:27:5c:4c:1b:d1:63:51:68:56:15:
12:90:72:79:63:3e:ce:1f:fe:28:8e:71:b8:3a:68:13:fb:ec:
da:9f:db:51:9f:fc:3b:d0:31:11:e5:38:77:56:cb:f5:e7:9a:
03:a9:5f:b7:42:8c:bf:70:6b:80:b7:c5:0b:1a:7e:d3:77:0a:
38:75:09:be:dd:14:43:f5:17:b8:bc:45:9c:18:c5:61:f5:08:
ad:bc:e6:aa:13:60:f4:71:7b:fb:ed:95:5c:99:b7:ee:2b:3e:
6c:fb:40:e7:12:60:5b:71:3c:e4:61:0a:38:b7:09:f2:29:99:
79:b7:e6:cc:2d:95:68:31:1a:9b:d6:d5:a7:c7:85:7c:f4:de:
d7:3c:91:e9:83:dc:4e:a4:7d:1c:84:97:42:78:b1:27:ac:8c:
40:6b:96:ee:03:e0:39:ee:73:d1:b5:28:e5:28:f4:c9:64:d0:
85:7c:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org