Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xFVBpS8kJaGtREuP9UKmdXKAAeQ.roa
File: xFVBpS8kJaGtREuP9UKmdXKAAeQ.roa (raw, json)
Hash identifier: TVTOelVCuIkaRTSyHa2pI9BQy2A8YoaYioGoE9/aImU=
Subject key identifier: C4:55:41:A5:2F:24:25:A1:AD:44:4B:8F:F5:42:A6:75:72:80:01:E4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DA17EDCBEBCFB7F9360DC3C1605275574
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xFVBpS8kJaGtREuP9UKmdXKAAeQ.roa
Signing time: Tue 13 Feb 2024 08:04:22 +0000
ROA not before: Tue 13 Feb 2024 08:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 194.71.27.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.132.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 13:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:7e:dc:be:bc:fb:7f:93:60:dc:3c:16:05:27:55:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 13 08:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45541a52f2425a1ad444b8ff542a675728001e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:87:03:00:bc:6c:3d:fa:5c:bc:9f:78:e7:
c3:f8:c1:61:04:ef:6d:d1:9c:71:fb:75:f0:d9:7c:
36:59:ea:a7:58:a0:b0:5f:79:8a:8d:ec:2d:e4:18:
6b:6c:b2:d9:13:91:cf:00:39:ac:f0:ae:42:27:53:
02:7b:fa:4b:e9:fe:35:5f:3e:c6:c1:10:fd:bd:56:
e7:ab:fe:a2:cb:6e:2b:70:83:07:42:08:ac:00:6b:
c0:6a:c7:69:46:c0:2e:25:bf:24:2f:8f:68:94:68:
39:6f:de:c7:24:41:eb:3e:f4:cb:b2:94:88:63:74:
32:df:4f:60:a8:38:39:5e:3c:a8:9e:17:a5:f3:c1:
d1:8d:cd:a8:40:7a:7a:b6:b9:63:a6:08:a8:8d:04:
4f:6b:e3:7a:a5:b9:c2:36:57:e3:d6:92:ad:5a:bc:
2c:f1:64:b5:8f:7e:35:a7:12:16:35:8a:a7:7c:90:
93:07:02:b2:d5:da:6e:87:ee:9d:7e:b2:6d:c1:e5:
9c:bb:43:41:74:83:75:e9:11:b6:84:54:ec:68:c7:
31:d7:a2:9b:9a:f2:09:5a:f6:10:40:02:5b:f2:38:
6c:43:79:76:7b:4b:42:fc:79:2c:2e:b0:4c:aa:e6:
e4:47:b8:46:19:da:ac:3f:e5:b3:c2:a2:fb:f9:8a:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:41:A5:2F:24:25:A1:AD:44:4B:8F:F5:42:A6:75:72:80:01:E4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xFVBpS8kJaGtREuP9UKmdXKAAeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.27.0/24
194.71.140.0/23
194.71.248.0/21
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:65:7d:0e:3f:0a:56:52:31:9c:c6:77:6a:e4:4a:3f:be:ab:
ae:93:94:00:da:6c:bf:db:a6:e5:e6:78:83:e1:ca:de:d0:32:
7a:cb:1e:71:4b:69:58:1f:55:69:9c:3c:49:3e:59:33:99:8e:
b0:ec:de:39:f1:47:97:01:b4:91:15:c8:09:5b:5b:1b:dd:81:
0c:c9:2e:f7:e9:6e:ab:81:84:26:7a:08:f5:25:8e:c7:93:09:
ae:47:2c:48:58:6c:5b:a3:4a:f8:ca:92:58:e1:8a:ae:5d:af:
c3:83:29:ee:a0:c7:03:e9:9b:17:3a:91:bc:f8:fa:20:83:7c:
17:17:af:af:8c:7d:3e:f0:b8:a6:a5:54:db:9c:cc:dd:17:ea:
c2:fe:5d:3a:da:62:6b:65:d4:e9:97:a3:db:31:9e:ce:85:7f:
b5:f2:bc:7d:01:e7:9a:53:31:8b:96:86:b9:d0:60:f4:04:6b:
a4:af:55:cd:1b:68:47:6f:1e:9c:f8:c9:c0:af:11:69:25:34:
97:cb:e9:d8:25:43:ae:67:01:19:0c:80:31:de:92:5d:d3:d3:
41:b4:93:6f:8f:8f:9e:93:e8:73:2d:11:86:97:69:e5:97:e4:
5b:74:af:3f:d3:e2:c7:90:09:5e:c2:07:22:63:ee:b0:a2:44:
57:5e:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 17:34:59 2024 by rpki-client on console-fra.rpki-client.org