Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/EGpGyeOFTRbaTsYr8a_-BkQDwqw.roa
File: EGpGyeOFTRbaTsYr8a_-BkQDwqw.roa (raw, json)
Hash identifier: Q6Tr8BisuHqazPr056/jhBePbPkUCw5PALATluXzHQo=
Subject key identifier: 10:6A:46:C9:E3:85:4D:16:DA:4E:C6:2B:F1:AF:FE:06:44:03:C2:AC
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018CC42454DF73693C263C5E2653BAF7E7A7
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/EGpGyeOFTRbaTsYr8a_-BkQDwqw.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 194.8.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 16:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:54:df:73:69:3c:26:3c:5e:26:53:ba:f7:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106a46c9e3854d16da4ec62bf1affe064403c2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:c1:b5:c7:ce:1b:b1:6f:f4:06:05:a3:f9:
c9:4b:89:ff:a3:84:4e:bc:6c:95:ee:ec:88:ba:44:
78:5e:af:ef:54:dc:42:dc:2a:55:41:ab:c4:21:f1:
ae:c9:b8:05:ac:f9:86:45:54:fb:f2:43:be:93:ff:
82:73:7b:c4:d8:1f:71:9e:b0:cb:01:fb:eb:4f:96:
a7:9d:71:12:d8:f2:d5:d8:27:a6:d4:bd:0e:73:a7:
c7:bb:23:6a:93:00:ba:00:23:13:0e:8d:56:dd:0d:
8d:18:1f:34:12:bc:f0:5b:ae:3c:85:6a:55:bc:30:
ee:1e:a7:81:44:62:55:f9:f7:36:c9:34:7c:55:0c:
3a:51:b1:5e:cf:85:e0:78:b8:00:bd:35:09:d0:a8:
f7:9d:3c:e4:21:4a:f2:2b:65:17:e7:50:db:e7:1e:
78:19:5c:f4:e2:23:30:9f:4b:63:63:60:1c:17:cf:
a6:56:13:e6:65:a0:5b:94:da:59:35:15:0a:c4:80:
6e:5a:ef:65:e3:d7:b5:62:e4:a5:41:41:6f:4a:ec:
b5:da:50:b2:06:e3:e8:60:7f:c4:ba:c2:8d:3b:bd:
4b:5b:81:75:cc:e7:80:77:c2:0a:47:06:2b:04:26:
24:69:a6:cf:19:88:88:ec:53:b0:e3:3c:57:b5:e3:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:46:C9:E3:85:4D:16:DA:4E:C6:2B:F1:AF:FE:06:44:03:C2:AC
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/EGpGyeOFTRbaTsYr8a_-BkQDwqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.80.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5d:ce:3c:92:12:22:df:ff:ac:46:dd:75:05:f5:b7:0b:84:
4e:84:fc:c9:dd:3a:f9:a7:c5:3e:52:2d:a5:18:cf:24:fe:50:
55:fc:34:1a:ae:bc:e9:f8:c4:a6:0e:0c:e8:6d:67:de:a7:d8:
4b:19:14:53:a0:73:a2:8d:25:84:9a:25:ce:c3:0a:28:35:25:
72:a3:c7:6b:1d:68:ae:28:24:d2:c8:c6:53:2f:7a:bb:b1:34:
04:37:cf:88:d2:c6:80:de:84:a9:2f:0b:3d:e3:78:c3:46:aa:
4d:1b:0e:9f:10:b4:a4:f4:a5:0b:ec:0d:da:98:aa:3d:2c:a7:
57:74:4a:8c:cb:34:fd:7c:f0:7a:c7:52:7f:f7:bb:48:ba:63:
cc:fb:67:0d:fe:ee:d7:88:9b:de:87:1b:b4:dc:56:d5:fa:e0:
03:58:69:60:ba:9b:1a:07:a4:80:33:51:d4:a2:4f:24:cb:ea:
5b:dd:e3:85:46:03:21:b9:76:38:16:54:fa:f7:25:a1:c0:f1:
f9:e6:c4:4a:d6:72:a5:a7:94:f9:b3:0d:01:50:ff:99:03:01:
cd:35:ea:9a:03:d9:79:2c:5d:06:10:ab:c8:14:2e:23:1a:69:
2c:76:1d:29:7d:00:e9:71:19:ec:2b:7a:b7:a3:5b:43:d7:03:
f1:5c:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org