Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/0ep1oih9hfWwQ6HIqZMoZULNziM.roa
File: 0ep1oih9hfWwQ6HIqZMoZULNziM.roa (raw, json)
Hash identifier: OCcizAXRvPc06fscw6O0Q1m9oa2PKMVEPYe6zz3+nsI=
Subject key identifier: D1:EA:75:A2:28:7D:85:F5:B0:43:A1:C8:A9:93:28:65:42:CD:CE:23
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018FA09B97C58CA592A90E527C280BBC85DB
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/0ep1oih9hfWwQ6HIqZMoZULNziM.roa
Signing time: Wed 22 May 2024 14:01:42 +0000
ROA not before: Wed 22 May 2024 14:01:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 10:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:9b:97:c5:8c:a5:92:a9:0e:52:7c:28:0b:bc:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 22 14:01:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1ea75a2287d85f5b043a1c8a993286542cdce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:1a:06:5d:ec:25:2c:52:ae:48:9b:53:77:
9c:9c:95:b7:84:52:68:b8:31:69:b2:f1:ec:18:da:
37:1c:15:41:72:58:f7:61:23:fe:84:8b:4e:ac:b7:
2d:3b:d8:a8:b0:a0:99:27:83:58:bf:b4:4b:5f:1a:
8b:78:26:85:9c:b9:3b:9d:7f:3f:77:19:a0:ba:10:
c3:0c:11:dd:36:83:d5:7f:61:af:7d:95:85:ca:23:
7b:f8:01:f1:87:aa:41:57:eb:a1:26:ed:95:83:e2:
2e:2f:9c:25:a1:bf:71:56:de:f1:ef:7e:9c:14:be:
83:ac:65:89:07:9a:2a:37:78:d8:01:0a:8b:36:93:
b4:7b:4b:6e:b7:76:e3:d1:5b:fa:cf:93:ea:8a:02:
ee:1d:9d:ef:77:9a:5f:84:9e:a7:12:6c:df:59:5f:
83:d2:a3:7e:66:26:f3:0e:9a:60:e7:09:22:17:cc:
c1:df:d1:77:b9:0c:b9:7e:d1:d4:b5:5a:a3:30:ef:
e1:87:8f:f8:b0:63:46:2f:da:a1:7b:1f:23:d0:5e:
2f:c4:c2:b9:d6:d5:dd:8a:5a:d4:cc:87:d1:ff:be:
d5:40:f8:50:44:e4:3e:c0:61:b0:5b:a2:7b:05:82:
cf:72:bf:ca:5b:3b:c6:83:63:63:11:8f:90:4a:31:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:75:A2:28:7D:85:F5:B0:43:A1:C8:A9:93:28:65:42:CD:CE:23
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/0ep1oih9hfWwQ6HIqZMoZULNziM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9e:26:e3:a4:0d:b8:f3:82:91:6e:b4:47:b5:6b:f8:17:00:
d4:83:fe:36:f3:21:9c:7e:53:5a:f5:86:b8:c3:09:28:97:ea:
a4:6e:92:4e:b9:64:6b:31:8e:6e:95:c5:91:7d:7b:e4:5d:41:
d1:93:49:2d:3e:1d:d9:66:36:28:c9:1f:5e:42:ba:0d:74:2d:
10:c8:76:c1:15:cb:40:64:6e:b5:1b:1d:1d:cc:56:96:a0:ec:
55:78:16:2b:7c:99:bf:54:c8:12:99:13:25:19:65:df:f6:42:
c7:07:e1:91:68:e3:4b:6a:45:64:65:c0:61:20:02:9f:29:6b:
9f:95:56:70:cd:87:6e:86:9b:52:13:0d:90:a2:90:fc:3d:61:
bf:8e:8b:9c:ae:3a:de:19:29:f8:be:92:ec:89:df:64:11:26:
c4:06:f1:b5:0f:e2:f1:8c:71:bf:50:45:13:8e:ac:bd:7e:44:
64:7b:0c:76:85:fe:c6:a3:8d:a0:bb:be:df:90:18:e7:4f:b7:
f3:75:ec:3e:52:35:69:c8:ea:0a:cf:1f:02:fa:46:8e:68:0c:
35:5c:58:76:40:57:eb:c5:6e:92:f0:64:a3:66:98:53:5c:93:
60:ab:34:6f:4d:8c:0a:dc:c1:5b:39:9e:1b:07:c4:32:8a:8a:
89:4f:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org