Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/SNTooQeRD393pGKNSFuO5KtlMbs.roa
File: SNTooQeRD393pGKNSFuO5KtlMbs.roa (raw, json)
Hash identifier: CsqIC6ZWX+s7VmjNW3lS6/7pUVKQJaUW/uDGKhY3dsM=
Subject key identifier: 48:D4:E8:A1:07:91:0F:7F:77:A4:62:8D:48:5B:8E:E4:AB:65:31:BB
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 01856D5CEBFE09EEB4D1B91FB578F3944BB5
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/SNTooQeRD393pGKNSFuO5KtlMbs.roa
Signing time: Sun 01 Jan 2023 12:44:44 +0000
ROA not before: Sun 01 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48152
IP address blocks: 194.116.128.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:eb:fe:09:ee:b4:d1:b9:1f:b5:78:f3:94:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jan 1 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48d4e8a107910f7f77a4628d485b8ee4ab6531bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:3b:24:68:35:81:85:6d:c3:b2:be:29:03:
a6:02:d9:d1:e9:d7:e7:4e:94:7d:14:96:a3:60:b1:
70:bc:12:5f:d4:c0:e9:51:1d:15:05:de:0e:f6:77:
45:05:3f:fd:88:14:0e:f1:26:ec:11:44:b9:eb:a7:
a9:ff:e7:af:67:84:b8:38:89:60:ea:e7:22:64:fc:
57:14:d0:01:22:44:79:24:97:95:35:17:d7:92:39:
dd:e6:6c:43:3d:88:bf:02:f2:5b:74:96:83:e6:e2:
56:06:cb:e4:4d:97:9b:81:b3:40:d7:7d:36:30:3b:
71:44:d5:2e:76:36:ca:91:ac:28:6e:d9:38:84:91:
1a:0d:18:1a:62:09:6a:6b:78:6b:f0:78:98:39:4a:
62:0b:bb:67:f6:53:9e:69:e5:87:45:de:19:82:ad:
4c:03:6a:b1:ae:11:71:da:bd:e6:5e:90:47:b5:49:
84:64:d7:98:e6:30:10:eb:b3:12:dd:37:e1:1c:ee:
ee:fb:9b:c7:13:a9:7e:81:ff:3e:75:57:86:68:70:
e7:bf:5c:57:1b:4d:0f:61:05:aa:6a:df:6e:f7:6d:
53:2e:80:38:16:b4:4a:94:07:5e:1f:d9:08:4c:b9:
3a:87:24:c7:c7:b6:c2:40:5b:a5:13:b6:47:4e:e2:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:E8:A1:07:91:0F:7F:77:A4:62:8D:48:5B:8E:E4:AB:65:31:BB
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/SNTooQeRD393pGKNSFuO5KtlMbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.128.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:bf:61:41:ea:e0:69:18:6f:dd:2c:89:10:06:25:e2:e9:d9:
e0:aa:b3:54:d2:f8:d1:af:4f:b5:a8:c3:35:af:10:49:fa:b1:
f3:e9:40:46:14:51:ea:40:37:31:92:fd:51:30:85:74:54:76:
3e:d4:38:09:89:c4:9f:fd:ae:42:97:55:08:8c:06:a7:5c:b1:
2b:ca:21:e8:45:b6:12:67:3a:a5:7c:58:3a:a3:7b:af:7f:fc:
92:55:b9:7a:0f:e3:07:a4:ca:77:9b:e2:00:09:01:92:84:e8:
65:0f:f5:3b:a9:6f:1d:e1:37:dc:e3:48:e2:6d:0f:fa:e1:4f:
20:f1:47:78:6f:7e:7f:70:90:02:9c:e6:de:be:51:48:27:34:
d7:9c:5b:a0:41:4d:ea:3d:1b:93:60:25:bd:59:cf:6e:9c:f6:
d3:46:ad:9e:04:2e:4e:5b:4d:74:ec:e1:54:b9:f7:fe:87:a7:
d2:d9:b4:58:e3:ef:75:13:8b:e7:97:49:65:06:ce:da:e4:ac:
ba:3f:18:61:36:46:3b:b3:69:9e:35:4f:96:c9:b3:a9:d6:38:
de:86:4f:eb:2c:4f:10:95:4a:2f:6c:2b:bf:01:fa:1b:2d:4b:
69:bd:2c:16:82:ce:d9:c0:9d:a3:8e:a2:dc:53:53:25:3c:64:
51:08:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:40 2024 by rpki-client on console-ams.rpki-client.org