Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa
File: jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa (raw, json)
Hash identifier: cWx7nWTobO72+6VhB1HmDUMnRv8wtIKaMJ5mudvVUJE=
Subject key identifier: 8C:B2:12:E5:73:6A:0E:F2:FE:27:CD:59:4C:87:DC:5F:5A:D4:2B:7B
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 018F0A3927027BF50DBA123A8B7D86864F45
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa
Signing time: Tue 23 Apr 2024 09:11:08 +0000
ROA not before: Tue 23 Apr 2024 09:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215218
IP address blocks: 194.164.39.0/24 maxlen: 24
2a13:e700:0:100::/56 maxlen: 56
Validation: Failed, certificate revoked on Thu 25 Apr 2024 11:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:39:27:02:7b:f5:0d:ba:12:3a:8b:7d:86:86:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Apr 23 09:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb212e5736a0ef2fe27cd594c87dc5f5ad42b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:69:97:98:ba:7f:7f:a5:9a:c8:b7:1b:c0:
34:21:c6:5f:18:d4:7b:7e:c4:70:e2:c0:04:74:35:
61:ef:e9:d9:10:32:50:53:ee:8b:78:c7:84:7a:d3:
b9:80:40:49:6b:88:10:50:2f:f7:3a:19:13:43:15:
b5:6f:a8:b7:18:38:20:e6:46:25:ff:92:5d:e6:a0:
16:bd:e2:0c:48:4c:1d:83:82:91:32:eb:d8:0c:19:
8f:74:e5:73:39:37:22:6b:ec:3e:43:28:41:51:aa:
17:f5:ed:ac:22:ac:44:6c:a2:a4:82:fc:25:d5:9d:
cf:0d:94:3c:12:aa:c8:7f:69:10:b0:b3:73:5b:f9:
38:16:a8:49:7f:c0:1e:99:aa:d4:f0:d0:1e:b8:51:
18:e2:38:05:d3:2b:32:13:10:6b:5e:94:18:f3:74:
db:1f:1d:b5:e9:81:14:d0:69:59:4d:6c:f5:74:07:
c4:5c:76:ce:36:1b:23:3c:01:cb:0a:6b:c1:09:98:
87:38:13:96:8f:ed:14:ac:2a:92:3c:a2:45:8c:98:
a9:a5:cb:6a:b5:71:be:9c:63:3b:62:94:32:09:4b:
06:9b:f8:8e:d3:84:51:93:99:a7:26:b0:8c:a0:94:
ae:83:3c:cd:0b:72:0c:b0:d7:9d:62:9a:ce:bc:1a:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:12:E5:73:6A:0E:F2:FE:27:CD:59:4C:87:DC:5F:5A:D4:2B:7B
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/jLIS5XNqDvL-J81ZTIfcX1rUK3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.39.0/24
IPv6:
2a13:e700:0:100::/56
Signature Algorithm: sha256WithRSAEncryption
a8:1c:c7:29:9b:0e:b4:9a:ad:80:91:cc:64:83:76:ea:a2:6f:
71:c2:83:3f:f1:8a:4b:fe:58:62:44:3f:7e:6d:1c:f3:2c:ce:
e2:5b:19:90:ab:67:f0:1e:27:63:ff:65:47:8e:a1:8d:ec:c6:
1b:9f:d9:44:3c:5b:5e:08:55:ca:17:dc:8b:ce:90:61:4f:44:
c0:da:a1:46:0f:35:bf:c2:0a:b3:e4:64:32:42:07:71:72:50:
c6:2d:f1:c9:6e:ec:39:f9:48:e4:07:a8:02:ff:5a:54:09:dc:
62:16:18:fc:90:d2:1b:5b:ec:cb:fd:f4:6e:b5:15:fa:b0:aa:
ef:63:77:2b:7c:cd:69:99:06:46:61:f5:89:bb:62:1e:31:39:
93:90:8b:1b:f5:8d:53:66:d7:d4:da:62:a0:92:ad:9a:7a:c9:
c7:df:f4:52:f0:7b:b2:8e:45:b9:5e:4e:3c:da:88:7e:c7:50:
9d:00:6b:1b:85:6c:5a:10:62:ec:7a:10:d2:f2:6a:3c:a3:8c:
51:39:15:d8:0b:9c:a1:19:44:ad:9c:ba:43:9d:67:97:db:62:
e3:ab:e2:c3:83:ab:16:2f:06:f8:9c:d9:7b:87:b7:7f:1c:9f:
30:45:f8:8a:92:9c:fa:05:eb:2c:03:78:e1:3f:23:5a:b4:13:
fe:8f:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:11 2024 by rpki-client on console-ams.rpki-client.org