Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/E1I37anVIfMC2-Pz_7BeFHJcD6I.roa
File: E1I37anVIfMC2-Pz_7BeFHJcD6I.roa (raw, json)
Hash identifier: VeyBSVURLmQFsYtRlNT0BDPG7S7oW/irwlZHiomoaWY=
Subject key identifier: 13:52:37:ED:A9:D5:21:F3:02:DB:E3:F3:FF:B0:5E:14:72:5C:0F:A2
Certificate issuer: /CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Certificate serial: 01856EC228DA89D67E641B19F21822C144E5
Authority key identifier: AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/E1I37anVIfMC2-Pz_7BeFHJcD6I.roa
Signing time: Sun 01 Jan 2023 19:14:56 +0000
ROA not before: Sun 01 Jan 2023 19:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 194.29.74.0/23 maxlen: 24
194.26.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:28:da:89:d6:7e:64:1b:19:f2:18:22:c1:44:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Validity
Not Before: Jan 1 19:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135237eda9d521f302dbe3f3ffb05e14725c0fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:a8:d1:d6:9f:8f:d1:bc:39:1e:3e:73:e9:
e0:6c:ad:f9:0c:96:7d:b8:7f:6a:e3:65:29:92:09:
b6:92:35:c4:f9:12:e2:e8:66:36:58:25:a5:28:af:
12:23:60:15:62:7b:4b:d6:07:a9:02:e6:42:de:73:
f6:16:a2:00:b6:a7:0a:1e:f6:9b:22:6e:83:78:92:
ab:c1:f0:c1:ad:81:ec:84:50:22:7c:4a:f6:51:4f:
52:4f:dd:6a:e1:4f:fb:52:37:b0:2b:c3:d7:c8:80:
42:29:86:e2:a9:68:ad:9f:bb:17:6d:4c:cc:6c:1c:
eb:9d:14:94:51:13:cc:0c:3e:ed:7a:c4:01:20:f5:
b6:d2:55:d3:e9:32:72:6e:1f:21:51:05:b5:50:77:
97:9b:f5:5f:50:2b:58:62:bc:a4:d6:06:31:94:b2:
16:49:dc:8c:de:6b:da:e8:e4:05:b3:58:74:a3:58:
0c:c7:03:7b:c9:f5:ed:7a:8a:b1:52:05:75:ea:9c:
13:56:57:f8:67:54:86:a3:08:22:fe:be:28:8a:79:
b9:cb:d0:1c:49:c7:84:6b:95:4c:29:70:24:4d:af:
08:c5:b0:49:90:03:81:54:d2:cd:1c:06:47:f3:a1:
89:70:72:fe:bd:c5:46:c7:a6:09:fd:33:4b:b6:14:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:37:ED:A9:D5:21:F3:02:DB:E3:F3:FF:B0:5E:14:72:5C:0F:A2
X509v3 Authority Key Identifier:
keyid:AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/E1I37anVIfMC2-Pz_7BeFHJcD6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.150.0/23
194.29.74.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:89:ee:b8:3c:ff:1b:59:7c:db:ac:8f:a4:b7:b6:ae:b2:cd:
20:1f:14:39:25:39:54:05:db:70:8a:90:06:94:aa:7c:0f:e6:
57:57:dc:a3:9e:7b:ad:02:f0:0c:78:a9:b5:62:75:7d:63:36:
c1:a7:9f:e8:fc:7b:20:89:21:f7:17:cb:54:e3:88:84:ef:f1:
8a:91:e5:9c:0b:de:53:34:7a:68:63:a0:71:82:cd:65:00:5f:
62:98:5e:e2:d5:44:77:8e:23:8e:2a:16:67:13:a5:fe:46:66:
b1:22:7b:eb:bd:1b:52:d3:26:34:13:bd:24:b9:c5:3e:9d:55:
44:23:6c:1b:e0:b0:dc:e0:44:6a:34:2c:db:1f:f0:50:f7:af:
e6:97:86:ca:73:d0:2d:df:e0:3d:1a:12:d3:27:38:a5:d7:6b:
35:8c:8d:0c:d6:53:d0:f2:ff:1a:ce:48:4a:d7:29:91:5b:95:
07:3e:a1:01:31:a4:2f:b4:a0:d6:a2:a8:ab:b5:73:17:37:62:
d6:94:9d:09:d1:da:de:1b:a1:a3:48:cf:18:b1:e1:23:0d:23:
a3:92:c5:46:bb:82:d2:5f:b8:e2:c9:45:5e:18:28:49:92:6b:
2e:c0:50:86:6d:0f:35:40:af:1a:a4:60:cc:93:fb:83:01:60:
75:11:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:10 2024 by rpki-client on console-ams.rpki-client.org