Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/veDReWUt0erJT766LBpcBAG7G0c.roa
File: veDReWUt0erJT766LBpcBAG7G0c.roa (raw, json)
Hash identifier: m7PfA3fXNenvlmRiektfrqwV/XgJQJngy4JDClDLZiw=
Subject key identifier: BD:E0:D1:79:65:2D:D1:EA:C9:4F:BE:BA:2C:1A:5C:04:01:BB:1B:47
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 01856F2FF2A2D8599E0D4E1E3B90E7124365
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/veDReWUt0erJT766LBpcBAG7G0c.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f2:a2:d8:59:9e:0d:4e:1e:3b:90:e7:12:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde0d179652dd1eac94fbeba2c1a5c0401bb1b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:b0:ce:3d:eb:8c:87:08:70:c8:a4:a3:52:
27:62:c6:59:82:fa:88:34:cd:56:31:ca:24:59:8a:
f1:a9:fa:03:6e:03:b0:6c:dd:5c:5d:69:b7:bb:f6:
5b:80:a0:6d:98:b3:a2:80:f5:0f:c5:3d:4e:9c:f3:
04:99:a7:a8:3b:94:99:ed:dd:01:8f:06:8d:31:2a:
c6:ec:bb:ff:3a:ea:a9:90:0e:31:a8:04:71:34:27:
a8:b7:1a:ba:d7:f0:85:02:e9:e2:a4:71:96:22:94:
57:4e:d7:4c:15:6d:57:0c:c3:ef:6f:7d:dc:34:d7:
5e:ed:0c:84:6b:59:e1:25:e9:3f:c8:93:b3:68:6c:
25:5f:05:fa:c8:c4:e6:8e:0b:e0:bd:69:75:a2:03:
64:a1:d0:66:9d:1d:ef:c4:58:45:e3:78:fc:72:80:
82:0f:a5:32:62:38:8f:bc:a7:a7:0e:e8:bb:49:8c:
53:f0:1a:46:b0:e3:fc:6c:f4:60:aa:0a:ff:fd:cf:
a6:23:8c:82:0a:58:66:45:fb:6f:1a:de:3c:96:35:
72:79:08:e3:ce:c1:19:e6:58:51:ec:f8:84:47:d7:
7a:f2:da:e5:96:f9:82:98:f5:7f:0a:0f:89:ea:17:
e3:43:c1:dc:d9:98:e8:9d:d1:9a:d6:d1:31:e6:4a:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:D1:79:65:2D:D1:EA:C9:4F:BE:BA:2C:1A:5C:04:01:BB:1B:47
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/veDReWUt0erJT766LBpcBAG7G0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
35:01:b1:56:ad:f8:aa:49:3f:9f:e1:a2:1c:16:10:2f:08:7a:
86:cc:c6:17:94:b0:d5:e7:2c:7c:cf:97:73:d2:04:58:19:d9:
20:c4:ed:0e:6e:20:f4:e5:64:81:02:4f:6d:8c:41:a4:85:93:
42:85:39:55:d6:80:3a:be:51:58:7e:e2:3a:13:56:fc:cf:25:
e8:2b:c6:5d:c7:a1:f5:e7:93:cd:16:4a:4d:5e:89:f9:5e:df:
2d:7b:44:12:fc:e0:c1:0c:fa:75:15:22:66:37:92:44:49:e1:
94:9d:a0:27:8f:9c:0f:8a:6a:c2:c7:ae:1c:4f:a1:04:c0:a3:
e3:63:31:6f:66:7e:65:b3:2e:b6:88:39:58:a8:98:88:3b:25:
14:03:d1:fb:55:b2:ac:f1:f3:4e:9b:db:88:d9:e8:83:e0:4e:
87:1d:01:ad:40:7e:aa:da:c3:7d:70:18:cb:59:3c:b2:e0:76:
25:20:82:b7:bf:58:9f:ff:32:f2:c3:b8:a7:eb:31:01:03:96:
38:62:83:e3:b1:35:91:7d:41:8f:aa:d0:d9:1e:ed:f4:a0:5e:
a9:fb:a1:b8:6a:f4:b5:dd:87:42:e5:e5:f8:e0:27:e8:0b:d6:
a7:eb:07:19:3c:12:35:de:44:59:57:78:9f:ae:25:ea:77:cc:
44:aa:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org