Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3wAyouOc6XgNe2LIU7TquCHMIr4.roa
File: 3wAyouOc6XgNe2LIU7TquCHMIr4.roa (raw, json)
Hash identifier: +6pQK4XGYKqTXDvu5UL9UPUjWPoFOngNEz77+FpG5IQ=
Subject key identifier: DF:00:32:A2:E3:9C:E9:78:0D:7B:62:C8:53:B4:EA:B8:21:CC:22:BE
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 018675C606E75B40273CC33E588FF339D9F8
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3wAyouOc6XgNe2LIU7TquCHMIr4.roa
Signing time: Tue 21 Feb 2023 20:59:17 +0000
ROA not before: Tue 21 Feb 2023 20:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 194.15.114.0/24 maxlen: 24
194.26.18.0/24 maxlen: 24
91.213.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 12:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:c6:06:e7:5b:40:27:3c:c3:3e:58:8f:f3:39:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Feb 21 20:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0032a2e39ce9780d7b62c853b4eab821cc22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:77:2c:ca:ca:ce:3b:f7:51:29:da:f8:12:
7e:40:e0:ce:c3:8c:de:9e:0c:9b:59:09:d9:1b:26:
95:16:ef:9e:6a:ef:c3:3d:c0:d9:be:7c:eb:d1:d3:
5e:ed:ea:93:24:58:9d:fc:e5:22:80:44:6c:be:7d:
69:cf:49:72:84:92:9d:5e:8a:78:91:a9:01:26:5f:
57:ce:e0:8f:31:21:c9:3b:d7:51:ae:08:6b:9e:0a:
c1:08:b3:fe:4b:26:9e:a7:27:3c:9e:0d:c3:c0:45:
fb:ca:9d:59:9a:87:5a:03:69:bd:d6:6d:63:ec:4c:
5c:ee:78:4e:d3:8d:be:28:8e:41:a5:c3:1a:59:2c:
d3:2b:63:48:c0:eb:f2:4b:f6:c5:64:82:ba:a6:cf:
3d:67:de:74:be:80:89:5a:b7:b1:8e:de:8e:44:7e:
26:85:6f:30:d7:14:f6:3a:2f:17:9a:f7:f4:0c:75:
80:18:2a:9c:6c:f4:0e:0a:b2:40:4a:a1:67:f7:ad:
e0:ca:bd:11:fa:51:4d:23:5b:3d:1b:0f:9d:69:1c:
2f:ba:3c:f4:20:20:18:3d:c7:a0:1c:29:a7:40:3b:
4e:67:63:62:e2:4a:1c:d0:89:48:a5:f7:55:5b:9c:
1f:a9:0a:cd:86:ff:27:d5:90:6f:6f:da:36:66:4f:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:32:A2:E3:9C:E9:78:0D:7B:62:C8:53:B4:EA:B8:21:CC:22:BE
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/3wAyouOc6XgNe2LIU7TquCHMIr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.8.0/24
194.15.114.0/24
194.26.18.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1e:33:a0:bb:e0:12:90:71:70:18:12:67:47:ad:9d:74:b3:
2d:16:ec:2e:2d:7d:d5:6b:d5:46:7d:5e:8c:51:4e:e8:35:5e:
cd:3e:a0:ef:24:03:a3:ee:e2:6f:e0:78:54:16:99:71:63:f2:
d5:09:e9:18:42:10:62:e0:78:bb:d5:82:ed:77:ec:81:19:82:
8f:3d:d2:e1:ee:95:a5:ab:fb:5b:16:de:5a:24:64:6d:eb:32:
52:a6:45:c1:95:c3:d3:97:7d:62:ae:4e:fc:ad:47:21:7d:78:
c5:ae:e0:2b:9d:4f:df:4d:38:2e:fd:1b:62:28:20:5a:3f:1c:
f5:80:27:c6:a7:45:58:b7:82:cf:ff:a0:ac:6b:49:d9:cb:cc:
4f:ec:92:94:ae:e8:3a:ba:12:e0:2a:75:bd:e3:25:ff:43:68:
90:03:1b:30:82:3a:56:d7:f0:62:57:c6:7a:2b:8e:c8:16:15:
c9:bd:a7:53:1e:48:23:02:fa:2e:42:e3:f5:fd:9e:ae:d6:ef:
3d:5f:46:28:11:0f:c5:79:ca:d4:31:d5:ba:ae:3d:a0:8a:91:
84:8d:6b:f0:bd:e1:f2:ad:d6:62:e4:a9:e3:50:46:ae:9e:40:
00:e0:6c:e0:98:ed:75:56:ad:7a:ab:d1:9f:11:ee:e3:6e:b9:
12:34:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:30 2024 by rpki-client on console-ams.rpki-client.org