Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/e91MfmNtI2dsG2LwaPn36FSQo6c.roa
File: e91MfmNtI2dsG2LwaPn36FSQo6c.roa (raw, json)
Hash identifier: F7M0vDrPAZUFjUAYZbGJ40QdVpYcpidMOcpu5tXbGyU=
Subject key identifier: 7B:DD:4C:7E:63:6D:23:67:6C:1B:62:F0:68:F9:F7:E8:54:90:A3:A7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01856EAFC8B0D8190A193CE3833FB6D37C41
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/e91MfmNtI2dsG2LwaPn36FSQo6c.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 194.6.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c8:b0:d8:19:0a:19:3c:e3:83:3f:b6:d3:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bdd4c7e636d23676c1b62f068f9f7e85490a3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:2e:a6:77:ef:e2:2e:0a:e2:10:54:c2:dd:
46:19:c4:5b:6e:0c:7b:cf:78:95:14:87:1e:d9:f6:
36:e5:f1:cd:39:45:bf:02:a2:d8:b0:be:72:5d:5e:
ac:80:a1:86:5d:5c:1c:93:6f:c0:b2:37:29:73:57:
e7:ec:a7:46:10:e6:b5:f9:10:88:cf:39:37:b8:7e:
33:da:fe:f8:7a:b6:90:6a:fa:d9:31:62:a8:91:66:
32:8b:9a:4b:f5:74:26:31:a2:9f:b8:cf:6d:81:c0:
cf:de:70:97:38:a8:2d:ae:3c:2a:98:8b:15:31:07:
1b:ac:9d:8f:20:ee:f6:8d:8a:a9:ff:4c:fd:f3:d6:
2e:7c:0d:f4:b2:45:71:43:21:98:c6:c5:0b:b5:0f:
76:ed:c6:65:82:77:bb:c1:21:e9:7b:ae:39:cf:45:
37:15:48:21:a6:84:93:f1:73:9e:b7:54:aa:88:f9:
82:8f:89:ba:ef:5a:5b:8f:10:ed:4e:b5:9b:4b:90:
9e:6c:03:73:b4:05:6d:7f:b6:0b:04:c4:1a:ec:68:
22:20:b1:e7:d8:90:3d:55:20:4a:24:61:0e:92:3d:
5a:b9:4c:20:63:6c:34:c1:da:92:c1:53:7d:c2:bd:
5b:a9:b5:0b:3f:01:0c:56:a8:fd:a8:1e:e3:94:5e:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:4C:7E:63:6D:23:67:6C:1B:62:F0:68:F9:F7:E8:54:90:A3:A7
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/e91MfmNtI2dsG2LwaPn36FSQo6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.255.0/24
Signature Algorithm: sha256WithRSAEncryption
69:65:19:b2:bf:87:37:38:ba:d3:db:be:0f:2f:56:e8:cf:cf:
a4:7a:7c:03:8c:c8:bb:6c:c7:99:4c:46:32:11:9c:28:a3:ab:
6c:4d:2c:09:7b:1b:c4:df:b8:cc:2c:32:94:62:57:94:66:2a:
eb:9f:b4:10:b0:7c:ba:1a:79:ca:c4:0a:c7:5f:60:c6:07:fb:
10:96:e6:1a:84:b4:62:80:3c:b0:16:48:5a:a4:15:1f:ce:6b:
bb:02:44:d2:67:9c:13:db:13:7e:b8:e1:d9:bd:5f:93:c2:28:
72:00:ea:8a:9c:06:51:9d:2e:d1:2d:95:18:ce:dc:5b:b5:76:
e9:bc:ba:ce:57:d1:00:52:25:a2:94:f3:21:88:ef:3c:c5:d6:
f1:9f:55:56:20:b8:fe:6c:80:48:58:1e:c6:22:cb:de:12:59:
f0:71:91:2f:af:5c:da:dd:7d:63:b5:a5:9f:c4:65:87:54:27:
e8:a5:29:62:a8:14:a2:54:ab:08:20:9b:90:21:fa:cf:6d:a7:
41:de:9b:4d:1a:5f:72:66:9e:98:33:d4:f3:c1:f0:5d:04:90:
d7:b4:29:96:6f:f4:9c:79:42:5a:9e:34:a7:2c:cc:f2:a2:cd:
ba:52:dc:36:11:95:96:bc:74:79:ba:7d:5d:6b:46:b1:d5:e8:
3b:c1:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org