Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a770E_qxChZM3m6W_WWQEmZrazk.roa
File: a770E_qxChZM3m6W_WWQEmZrazk.roa (raw, json)
Hash identifier: Cx8jHrM4J+HEfxmlt1nt2SN33if62TUrIG5tcy7xO9w=
Subject key identifier: 6B:BE:F4:13:FA:B1:0A:16:4C:DE:6E:96:FD:65:90:12:66:6B:6B:39
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018CC86F2CAC4241EAAF441B1D7E4F546E7E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a770E_qxChZM3m6W_WWQEmZrazk.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31863
IP address blocks: 194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2c:ac:42:41:ea:af:44:1b:1d:7e:4f:54:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bbef413fab10a164cde6e96fd659012666b6b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:3f:48:f9:5d:51:1d:58:6b:f9:ac:eb:f0:
8b:a4:bb:66:ed:24:4f:90:f0:97:8b:27:04:fb:54:
51:8f:e9:f1:78:f4:fa:89:0a:fe:3a:fb:e1:66:73:
c7:4a:1e:f8:54:d5:fb:a7:d2:d9:d9:8b:03:0a:d6:
89:3e:f1:98:31:2c:2a:a9:37:36:84:97:17:33:a7:
b7:44:a3:47:2b:35:ba:fc:05:1d:69:54:f8:54:79:
d9:a5:1a:f6:43:5d:15:92:3d:c9:03:50:4e:e6:f7:
f5:fb:c6:2d:46:95:a2:15:eb:69:05:f7:12:32:40:
b4:c8:4f:e7:c5:9a:ef:7b:ff:0a:0d:85:96:18:f1:
ca:17:d4:ab:33:d2:71:10:3d:d5:a9:1f:51:82:93:
79:20:5b:7b:e8:df:d9:d7:68:38:18:47:35:80:7a:
ce:6a:03:87:6b:96:68:1a:ec:82:29:3d:bd:fc:e0:
89:1a:40:96:56:af:f2:76:8d:8a:b6:08:24:52:ad:
11:6c:11:c8:06:98:26:83:92:81:79:ff:07:56:91:
f3:6e:0f:89:bb:9e:5c:df:fb:3a:8c:38:60:82:c7:
3c:47:05:b3:ae:86:df:90:6e:24:aa:bd:69:d5:92:
50:86:7f:22:07:81:75:5b:c8:d3:0e:84:c7:ee:c9:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:F4:13:FA:B1:0A:16:4C:DE:6E:96:FD:65:90:12:66:6B:6B:39
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a770E_qxChZM3m6W_WWQEmZrazk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fa:34:0f:dd:8d:46:05:8a:7f:3d:29:8a:df:ea:f3:36:7b:
74:dc:ef:ec:19:ef:a2:05:7d:79:7c:4d:ad:9d:f7:2f:ec:79:
7b:53:0d:a6:67:d1:e0:a8:f8:76:d3:85:fd:7c:19:ee:cc:ec:
38:ec:9d:2f:25:88:e1:8b:78:70:75:dd:e1:7a:fa:f9:0e:99:
b8:4d:de:2c:b7:ee:af:fe:b9:a3:9a:8f:5c:09:a7:56:09:d6:
af:04:5c:df:8f:32:a5:52:88:7f:08:4a:6b:d5:f1:65:62:92:
6e:e1:c6:f0:07:98:b6:b9:c3:50:89:48:b7:71:48:21:36:f4:
37:73:1e:fe:63:c0:07:e5:1c:b0:19:86:e0:b3:39:a2:fe:72:
8e:f1:69:6a:ac:d3:7f:8a:65:a0:91:10:5c:50:8d:15:5d:ba:
be:cb:fa:7e:59:91:10:30:f6:21:4e:14:ca:37:21:cd:a5:d1:
02:b7:ec:f2:a9:93:29:39:58:58:9f:65:5e:ed:40:c7:dc:30:
25:b0:18:e7:31:4f:00:81:b4:02:13:39:77:e3:cf:2d:04:41:
9a:c4:a2:d5:eb:da:5a:16:8d:a0:a9:f4:d2:a6:49:4e:92:92:
90:90:1c:c3:5f:a1:df:10:7d:c2:01:8d:1c:12:56:39:62:66:
92:c9:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 12:22:12 2024 by rpki-client on console-fra.rpki-client.org