Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/rXLVnYFVX_74J8yyalQ7AYwMnaI.roa
File: rXLVnYFVX_74J8yyalQ7AYwMnaI.roa (raw, json)
Hash identifier: W4r9yZpmxMdU/ksNlHJIl/ti4H3De9nJDIhodQf7zys=
Subject key identifier: AD:72:D5:9D:81:55:5F:FE:F8:27:CC:B2:6A:54:3B:01:8C:0C:9D:A2
Certificate issuer: /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial: 018571BA2BB8C36476A75A85075EFC68E2C0
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/rXLVnYFVX_74J8yyalQ7AYwMnaI.roa
Signing time: Mon 02 Jan 2023 09:05:04 +0000
ROA not before: Mon 02 Jan 2023 09:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.76.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 11:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:2b:b8:c3:64:76:a7:5a:85:07:5e:fc:68:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Validity
Not Before: Jan 2 09:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad72d59d81555ffef827ccb26a543b018c0c9da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:69:ea:e6:12:0c:89:57:00:d9:6b:6c:0e:
3c:76:20:92:f1:e3:59:ce:37:bb:9d:02:8b:0e:d7:
9e:2b:5c:08:0f:ce:de:cc:83:7a:f1:57:8c:4b:b6:
90:1c:c7:ef:6f:cc:52:1f:3e:2e:e1:ab:17:f5:ce:
ab:a1:e3:c7:ad:9a:98:ca:2c:c1:95:39:86:bc:9d:
c1:64:eb:09:8f:56:cb:0c:ce:6d:93:22:d7:9f:bc:
74:49:05:ba:9c:e8:d9:ea:72:be:2a:8a:9b:70:d4:
f3:55:b8:fd:e2:f8:48:0c:8c:64:16:06:82:14:ce:
ce:46:fd:ad:b4:d7:56:41:fb:c2:cc:70:1e:12:08:
52:b8:93:ee:b9:fa:3d:11:6f:73:b1:ab:9a:2e:e3:
7e:44:f2:59:d7:98:d3:67:b0:09:31:eb:76:1c:13:
e0:31:c0:01:91:49:69:cf:97:4e:84:80:63:92:fb:
84:d5:ff:9d:18:8d:58:ef:69:a9:8b:ca:44:b8:df:
07:26:9e:35:e5:92:4a:18:71:69:63:7c:21:e7:b6:
0b:0b:ce:4c:2c:49:a2:86:c8:3f:cb:84:58:b5:3c:
ec:35:8a:72:bf:e7:2c:db:3d:64:55:f7:e1:27:7a:
21:fe:e8:46:e2:0a:75:0a:fb:7f:b8:d8:42:b1:40:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:72:D5:9D:81:55:5F:FE:F8:27:CC:B2:6A:54:3B:01:8C:0C:9D:A2
X509v3 Authority Key Identifier:
keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/rXLVnYFVX_74J8yyalQ7AYwMnaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e6:76:05:47:88:82:e6:66:df:a7:be:92:45:bf:dc:e8:41:
0d:e4:33:d8:d0:7e:7e:7b:0d:15:28:d4:b1:90:0b:4b:46:e5:
7d:3f:2c:07:61:fd:11:8a:9b:16:cb:dc:5c:40:48:b4:f9:4f:
ae:a1:1f:9c:bc:50:32:69:17:5d:3a:d9:8b:48:a4:9b:5b:7b:
5a:21:f0:56:8c:05:52:03:54:ab:17:67:bb:df:57:a6:5b:c1:
9d:52:02:13:c4:8c:e2:51:04:01:0d:93:ec:e9:8e:f9:c5:f3:
52:c3:ce:02:01:2f:4a:be:ac:1d:68:dd:fa:22:0d:7c:eb:15:
fd:90:d8:df:f2:f6:b6:64:b6:fe:68:b5:5d:27:4a:9b:b8:11:
66:7b:17:50:57:42:95:2e:8f:4f:7d:97:b2:f7:7a:98:61:95:
59:0f:eb:26:b6:66:ba:0d:f5:2f:fd:28:24:5a:c9:14:13:ac:
6b:cf:5f:d5:6f:3c:27:77:3d:9c:b1:7e:df:ae:e8:86:50:b8:
93:97:d1:c0:0b:d8:2b:ea:a5:94:3f:d7:c6:27:e3:86:dd:9c:
87:7e:ac:a1:42:93:7e:69:33:14:2d:01:85:7f:29:76:ca:25:
df:15:67:07:f7:2a:2c:c9:b2:77:7f:c3:c2:1c:63:f4:ab:c7:
a0:22:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org