Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/00Q1bQMC-rQEC9BwBik7nkCPwLQ.roa
File: 00Q1bQMC-rQEC9BwBik7nkCPwLQ.roa (raw, json)
Hash identifier: Br9ejhQ37xSv9AQdgi/CpdxYwp1q+9ohQFU6KfOfrg0=
Subject key identifier: D3:44:35:6D:03:02:FA:B4:04:0B:D0:70:06:29:3B:9E:40:8F:C0:B4
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 018CC56EC02BB0AAF9CA47DCE8E76209BD09
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/00Q1bQMC-rQEC9BwBik7nkCPwLQ.roa
Signing time: Mon 01 Jan 2024 14:30:18 +0000
ROA not before: Mon 01 Jan 2024 14:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 194.42.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c0:2b:b0:aa:f9:ca:47:dc:e8:e7:62:09:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Jan 1 14:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d344356d0302fab4040bd07006293b9e408fc0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:19:51:42:19:95:21:88:4a:6c:77:60:18:
60:58:58:0b:56:04:38:9f:71:d3:e5:28:53:30:a2:
0d:76:2a:72:ed:16:e2:6f:c1:08:70:c2:95:3b:7e:
cb:e2:c9:79:f0:b4:38:d9:91:5e:6b:61:d7:91:9e:
e6:13:c5:97:5b:15:2e:e2:b4:06:f5:6d:d8:24:ed:
a2:fa:8f:f9:51:9a:b0:d8:ce:b7:21:21:52:28:de:
9b:21:3e:dd:58:6b:9c:9b:04:3a:d6:1a:68:23:b6:
36:90:0e:9b:ee:20:34:94:98:76:c1:4d:eb:05:e6:
b6:9a:f6:9e:d4:bd:26:b8:35:8f:08:5d:57:eb:3a:
b2:7b:1b:d3:86:ec:c6:64:87:4f:68:ab:81:60:d2:
2d:96:b3:85:e0:9c:bc:bd:5e:8e:5c:0d:35:6e:1a:
c5:23:cd:7f:f5:f9:87:c4:d7:a1:ca:2b:97:a7:cf:
7c:a6:20:d0:33:e6:db:1e:e6:16:f5:1b:81:22:5e:
09:a4:06:5d:de:d2:b1:7d:67:32:4e:68:94:e7:bd:
cd:e9:fd:1f:13:be:6b:70:47:8e:8d:35:a6:ad:60:
23:80:86:af:33:c5:7f:02:2b:8c:a6:8c:ae:2d:f3:
25:a3:d6:7c:90:27:60:67:20:2d:eb:5f:c7:00:69:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:35:6D:03:02:FA:B4:04:0B:D0:70:06:29:3B:9E:40:8F:C0:B4
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/00Q1bQMC-rQEC9BwBik7nkCPwLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.160.0/23
Signature Algorithm: sha256WithRSAEncryption
14:78:f4:fb:b3:9d:81:84:83:70:48:b7:92:1b:17:52:f0:d0:
46:b9:ac:6d:64:cf:56:a8:3a:82:d7:54:6f:1c:83:8c:18:5f:
8b:de:b0:1b:24:28:4c:3e:51:39:c0:83:da:b8:f7:6c:a7:f2:
87:8e:9f:a7:80:d8:c0:13:5b:e2:90:5c:27:70:1c:66:82:57:
d4:47:85:6d:3e:dc:e1:99:5e:ea:d9:df:db:d9:2d:70:fc:c9:
e0:28:31:f1:af:ca:bf:2a:9d:54:ed:83:a8:73:c4:b0:fd:b4:
72:b0:3f:d2:9b:c7:ff:ae:5b:94:0e:dc:93:9b:98:39:e7:e0:
5c:83:57:0d:9b:46:e4:17:a0:b3:4f:bc:74:9c:69:fb:ce:1b:
28:75:7a:38:c9:71:82:cb:3b:bd:19:aa:64:94:12:7f:26:14:
a1:c7:fd:09:8b:fc:dc:03:c6:7b:e9:e2:d0:ba:a3:7c:e0:dd:
83:85:ae:05:7b:7c:f4:a2:9e:a0:19:15:f9:6a:5b:ac:70:98:
c7:5d:d2:65:7a:75:ed:db:3b:b8:12:4a:08:48:02:88:1b:51:
d2:8d:e8:6d:35:a5:d5:c8:5f:22:20:36:ce:10:0b:95:5c:7b:
b3:79:8d:c2:80:11:4c:39:15:22:b5:71:f1:32:2c:e7:3a:c9:
9e:d5:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:44:36 2024 by rpki-client on console-fra.rpki-client.org