Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/It6-Vq7JZ3esJ7iH8WHSiNG8_Lw.roa
File: It6-Vq7JZ3esJ7iH8WHSiNG8_Lw.roa (raw, json)
Hash identifier: QdoQ0CuVVKT1/Oaj85sYdk45ne/OoAF4NkYcPx2DGQE=
Subject key identifier: 22:DE:BE:56:AE:C9:67:77:AC:27:B8:87:F1:61:D2:88:D1:BC:FC:BC
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 018952203B9A89B5F2079B56313D36AB92CB
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/It6-Vq7JZ3esJ7iH8WHSiNG8_Lw.roa
Signing time: Fri 14 Jul 2023 01:59:51 +0000
ROA not before: Fri 14 Jul 2023 01:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207465
IP address blocks: 194.147.139.0/24 maxlen: 24
2a07:e480:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:52:20:3b:9a:89:b5:f2:07:9b:56:31:3d:36:ab:92:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Jul 14 01:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22debe56aec96777ac27b887f161d288d1bcfcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:69:85:d6:ea:9f:23:54:cf:e3:ca:a9:45:
31:ee:7b:96:78:83:49:1a:4c:8b:45:81:2c:8b:fd:
33:14:50:78:29:4d:6c:f1:d5:bc:2e:ae:6c:8a:61:
2e:ea:7a:19:3c:41:c2:c4:cc:e8:f0:8b:6a:74:e7:
f7:9d:3b:5d:a9:49:42:e5:2a:8a:cd:a2:4b:1f:96:
47:f1:0b:0b:84:ac:1b:85:ce:53:70:7a:3f:70:4c:
c9:35:e9:48:99:7e:de:ff:e1:43:43:9c:61:a4:a7:
19:a0:2c:6b:10:45:af:b2:f5:0e:da:ee:45:e1:91:
b4:69:df:94:24:a2:08:ba:e8:19:4b:4f:83:ef:a0:
6f:b8:b2:12:17:74:9c:f4:17:cb:8c:6d:0a:97:44:
f0:85:2a:7d:98:98:05:98:a0:3e:0e:73:08:3b:2e:
4b:08:11:5f:32:e6:5f:b4:c3:0c:55:d0:e0:69:a4:
f0:4f:32:42:98:e8:f2:df:fc:4b:a4:e0:22:0d:69:
fe:b5:af:ec:22:d3:bb:db:61:e5:bc:82:91:f1:21:
7a:24:2c:6e:78:92:ba:bb:4b:51:32:96:a8:aa:eb:
c2:0c:3e:00:6c:6f:f0:c2:c1:4f:d9:9f:5d:70:99:
00:7e:a2:a4:5d:2d:9f:bb:f7:be:ea:e8:db:c8:02:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:BE:56:AE:C9:67:77:AC:27:B8:87:F1:61:D2:88:D1:BC:FC:BC
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/It6-Vq7JZ3esJ7iH8WHSiNG8_Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.139.0/24
IPv6:
2a07:e480:2::/48
Signature Algorithm: sha256WithRSAEncryption
74:2f:22:e8:0c:de:78:ac:68:11:77:b7:ed:47:00:a2:f8:c7:
11:73:68:44:e2:d6:81:02:e6:6b:87:b0:fc:8c:b9:50:ff:89:
63:1d:e5:6c:04:f3:ee:13:2a:91:c2:32:7b:22:b4:53:49:75:
08:19:47:35:35:fa:63:82:e3:d0:28:50:95:f3:db:0a:eb:0a:
42:f2:2e:33:7a:41:4e:a8:3b:db:8f:a9:b3:10:e5:b8:e4:7a:
70:dd:84:f3:8c:5d:18:ac:3c:1e:fe:ef:31:de:37:9e:87:c9:
4f:1d:c0:8a:3c:59:33:31:49:ec:95:a0:da:08:57:9a:10:05:
a3:4a:ed:de:e0:3e:f7:92:c8:57:17:d3:03:70:21:38:7a:f7:
00:03:33:d2:ec:17:9d:6d:6c:7b:91:b0:05:e8:0d:98:93:9a:
37:01:d7:72:df:8b:73:9b:9a:69:ed:71:6c:cf:27:79:d8:0f:
b2:cd:ac:c0:62:0e:7a:bd:fe:41:a0:c2:fa:d1:17:52:ea:4b:
d4:7e:2e:9b:14:8b:98:c9:d6:58:63:9b:79:c5:8a:2d:41:d1:
1a:24:6d:b9:50:85:a0:b0:13:36:ae:9b:9e:27:41:df:ab:f9:
d9:57:c8:ab:04:72:81:75:00:b5:8c:54:86:76:e4:43:54:04:
24:a8:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:26 2024 by rpki-client on console-ams.rpki-client.org