Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1wW3sADXcs9M3ytjnfzWqgriO4g.roa
File: 1wW3sADXcs9M3ytjnfzWqgriO4g.roa (raw, json)
Hash identifier: 3BvI1oIgvl68aeU8dtMqUqjru++lTPhrCnZTGNqriXY=
Subject key identifier: D7:05:B7:B0:00:D7:72:CF:4C:DF:2B:63:9D:FC:D6:AA:0A:E2:3B:88
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC012898F302F7561855C73DB97094BA
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1wW3sADXcs9M3ytjnfzWqgriO4g.roa
Signing time: Fri 10 Mar 2023 14:51:13 +0000
ROA not before: Fri 10 Mar 2023 14:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52094
IP address blocks: 194.147.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:01:28:98:f3:02:f7:56:18:55:c7:3d:b9:70:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d705b7b000d772cf4cdf2b639dfcd6aa0ae23b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:a4:bb:7e:28:1b:9b:6d:07:68:62:96:a4:
1e:51:70:62:a5:76:08:74:19:4d:06:e6:4e:a2:3f:
b4:6f:a8:c9:90:43:a6:ff:aa:c0:8f:04:02:e9:28:
c6:90:c0:f6:2e:19:60:2e:b2:5f:87:19:ac:0c:24:
c8:47:62:39:f4:d5:4f:84:63:d4:7c:73:0b:20:0f:
f4:10:b9:b0:cb:fc:80:38:2c:6d:00:e4:c1:b0:6b:
a1:e8:cf:d7:cc:a5:a9:6d:cd:50:45:6b:c9:10:80:
69:bd:be:20:ee:0c:35:d9:ee:54:75:7b:f8:86:43:
e7:fd:e1:97:c8:3c:fe:0d:68:29:59:11:3e:be:c8:
ca:ae:5b:cf:0d:a3:a2:b8:25:6f:bc:57:4c:96:34:
7d:c1:2a:5d:14:f0:3d:56:7d:e3:75:51:58:d4:22:
b2:12:03:4f:b5:c5:e5:bd:ed:3e:33:0b:3d:dd:54:
62:26:34:13:d2:29:dd:8b:af:dc:b1:76:08:54:72:
2b:2a:cf:c5:60:2a:6c:e4:7d:5b:a2:66:79:8d:3b:
39:fe:08:99:13:4a:5d:56:a4:7d:2d:7c:43:4b:0b:
a2:75:95:5d:b3:2c:6e:a2:ad:30:22:a7:0f:fb:42:
d1:83:ac:bb:8d:7a:05:64:23:1a:d6:61:04:c7:96:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:B7:B0:00:D7:72:CF:4C:DF:2B:63:9D:FC:D6:AA:0A:E2:3B:88
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1wW3sADXcs9M3ytjnfzWqgriO4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.106.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7f:98:a8:74:1d:5c:2b:8c:78:0a:ed:e6:cd:29:48:31:07:
ba:c7:a9:7e:58:c5:65:ec:53:67:0a:57:84:22:22:95:63:1d:
10:ce:15:73:4e:07:04:2d:68:27:69:88:8a:9b:76:bb:9a:26:
ee:0d:36:f3:54:43:8c:a6:7e:67:46:50:ff:4d:74:a5:ef:4f:
93:65:8d:fa:a3:b9:b5:af:35:af:ac:59:68:57:5a:14:af:b3:
60:d8:61:51:11:10:9e:49:94:8d:b8:70:db:ef:97:f2:64:38:
bb:aa:7a:e2:2e:c6:44:21:62:97:a6:4a:fa:53:28:71:e9:9c:
6e:a5:14:0b:13:f1:90:72:69:1b:4a:55:e6:f4:91:b3:93:fb:
63:97:72:45:c0:21:31:24:da:03:e7:b0:0d:58:c8:9e:32:0e:
83:4b:7d:c1:90:ca:ef:1a:3b:4f:9d:87:b1:a8:db:34:a4:4f:
ad:1c:64:42:8b:c7:2f:99:ab:6f:dd:33:73:37:26:ce:7e:43:
e9:b5:c5:3e:c6:d7:8e:7c:bb:34:14:03:25:5c:61:28:63:00:
3a:88:d8:90:6f:8b:64:6c:49:60:d5:34:b1:e7:f5:ff:62:05:
be:2e:32:92:8a:bd:17:02:75:1d:38:56:34:b1:d8:46:86:f6:
f2:9f:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org