Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RmeKjL0i6YNQGXt_IO-IjUxaPC8.roa
File: RmeKjL0i6YNQGXt_IO-IjUxaPC8.roa (raw, json)
Hash identifier: ThjIHNS9+lauLfZWsDR7eVThh8eknbg90/naTItKyO8=
Subject key identifier: 46:67:8A:8C:BD:22:E9:83:50:19:7B:7F:20:EF:88:8D:4C:5A:3C:2F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018D7D6482616E6EF6F431F45AB274D4C65E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RmeKjL0i6YNQGXt_IO-IjUxaPC8.roa
Signing time: Tue 06 Feb 2024 07:49:15 +0000
ROA not before: Tue 06 Feb 2024 07:49:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 07:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:64:82:61:6e:6e:f6:f4:31:f4:5a:b2:74:d4:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 6 07:49:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46678a8cbd22e98350197b7f20ef888d4c5a3c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:b0:3f:42:7d:c0:3c:4d:b8:ea:d2:72:8f:
c2:76:43:46:cd:9f:34:b4:40:96:f6:07:2e:64:94:
09:d2:2f:35:a5:41:92:fa:f0:d5:02:b9:e1:84:1d:
03:c5:25:55:50:57:f5:dd:c0:d5:19:bd:71:de:2e:
a4:01:6c:be:33:ae:4e:c3:f8:9d:d1:6e:b5:52:d0:
ce:6f:31:89:a4:0b:79:55:a7:b1:8a:54:a6:02:ad:
7e:ce:a9:bf:77:2b:50:f9:d4:2d:2e:67:3e:6e:75:
c3:58:9a:be:df:07:29:15:ed:c3:f4:eb:c3:3f:0b:
ef:f1:74:e8:05:d7:de:66:92:3c:66:c7:d8:1b:eb:
87:c7:f6:95:56:db:de:c4:8e:38:7e:42:c3:99:ea:
f6:8c:ff:ac:12:a0:6d:5a:39:d2:c0:45:57:ba:50:
ce:6a:9b:c2:c0:4c:a6:a1:d9:54:91:07:e7:7b:25:
62:42:a0:b0:17:4a:9a:c7:56:52:95:45:07:2c:8e:
4e:d0:a4:c3:f3:86:96:f8:1a:db:8a:31:33:d3:60:
fe:91:07:1c:70:dd:62:58:94:ea:77:e7:19:e0:10:
03:79:57:55:1b:11:9f:27:0e:ba:0a:e6:8b:58:84:
0b:1e:7d:1e:ea:ee:17:47:01:a8:23:33:b4:8a:93:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:8A:8C:BD:22:E9:83:50:19:7B:7F:20:EF:88:8D:4C:5A:3C:2F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RmeKjL0i6YNQGXt_IO-IjUxaPC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ea:08:d6:9d:c6:ab:fd:ae:3a:38:12:48:a7:4e:16:cf:b1:
ed:34:c5:b2:f2:72:ae:95:9f:56:2c:4a:b2:49:dd:61:94:21:
c4:a9:a1:f1:8d:ce:ff:51:24:3c:e1:08:04:43:f2:47:b9:0e:
4a:97:77:bf:e4:25:28:96:ec:db:c6:4a:99:f6:61:2b:2b:f3:
1c:52:bd:85:f2:c2:7b:18:fc:3f:9c:8c:01:21:c1:0c:16:7a:
fd:a6:da:75:11:1f:a7:0a:b1:18:38:b3:d5:17:4c:09:7f:42:
ee:eb:dd:f6:18:28:b3:ec:46:97:23:b2:9d:d5:70:f5:c2:55:
26:4c:a9:4d:ec:49:c4:55:0e:0a:3b:71:14:e2:85:41:06:40:
14:cc:58:33:ca:fa:ab:23:79:d7:5e:c1:2b:fa:89:b4:39:67:
3b:6d:8e:46:21:74:5f:5a:4f:7b:d5:f3:8c:fe:16:da:0c:54:
f5:c6:63:22:32:57:65:de:85:a7:3e:a4:68:48:85:2b:dd:29:
d4:a5:aa:4a:90:4a:42:99:1f:a8:91:d2:1a:8d:ad:69:2c:86:
15:f4:0b:3f:80:b7:46:af:33:8e:3d:ee:a9:ac:5d:d4:2c:27:
08:0a:3b:52:a8:ea:65:c0:d2:91:ce:0d:eb:da:64:1c:81:a7:
75:96:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 11:39:09 2024 by rpki-client on console-ams.rpki-client.org