Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa
File: oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa (raw, json)
Hash identifier: A3MLLlVLBEWotiepj9GN0Yuwo5gyP2t3uncatstwYME=
Subject key identifier: A1:9E:9E:E9:79:87:6C:03:2A:44:94:99:E2:E5:AA:9C:2F:B8:1F:6F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01888F7AE52CC822DCC8D4BCF416EF4791DA
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa
Signing time: Tue 06 Jun 2023 06:52:55 +0000
ROA not before: Tue 06 Jun 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 194.143.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 08:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:7a:e5:2c:c8:22:dc:c8:d4:bc:f4:16:ef:47:91:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 6 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19e9ee979876c032a449499e2e5aa9c2fb81f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:a2:7b:f1:e8:b5:06:fd:cc:a4:18:f6:92:
e5:8b:12:93:ac:da:a2:eb:f0:84:af:a1:23:ee:7c:
a9:55:49:6c:3a:fe:77:c7:c1:b0:52:03:e7:44:cd:
bc:79:d4:40:1a:98:b3:d8:d5:29:f5:c2:aa:42:be:
b2:d3:2e:f1:fe:83:04:18:0d:50:66:85:27:fb:ed:
72:dd:86:4d:a4:c4:c3:f2:2d:df:d3:10:cc:93:12:
f3:58:a9:9a:90:d4:5c:13:c5:8e:71:67:38:32:81:
cc:b4:16:3d:a2:e5:2f:7b:d8:2f:27:10:2a:f2:bf:
cc:fe:96:14:69:f8:62:13:a3:1c:5e:f4:8e:e9:71:
57:00:b7:10:79:27:0e:9d:c2:61:0c:77:09:b9:00:
d1:84:35:5e:fc:82:da:67:d2:cd:60:a2:b5:4a:ff:
5e:5c:d5:c5:bd:1e:59:80:a3:04:90:a4:70:41:78:
52:f6:6a:ba:70:18:a2:c6:50:e1:ef:90:ea:58:74:
00:78:56:5c:35:44:ac:1f:d4:4b:57:e7:0e:87:c3:
39:7f:37:91:75:f4:88:df:46:ce:83:f3:b6:10:c3:
fd:d4:4d:8b:20:48:cf:9f:62:aa:db:8c:3f:b2:94:
d5:1e:97:10:91:2f:f1:f4:54:41:e2:60:3f:8e:13:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:9E:E9:79:87:6C:03:2A:44:94:99:E2:E5:AA:9C:2F:B8:1F:6F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:6a:ba:94:8e:e8:51:8f:0e:9c:47:c3:11:a4:dd:f6:b7:
25:7d:43:9d:6e:2a:1b:02:8d:2c:3d:5d:16:b9:ef:ef:8a:00:
b9:25:c8:15:91:4b:b2:41:4b:e7:c3:3f:c5:46:9a:12:9b:a4:
1c:92:1a:15:49:e2:7c:51:ba:f9:91:0b:eb:ff:d1:e5:d3:12:
ac:3a:db:bb:90:bd:b2:2b:30:80:ac:1b:87:93:aa:3c:21:4a:
90:f1:bc:36:4c:e9:2b:eb:de:0f:3f:ba:56:a7:4b:18:ef:ca:
c0:1c:12:ef:96:3f:b5:98:d5:64:d7:ec:b2:8d:68:0d:7a:c6:
ca:22:77:d7:97:69:0a:a7:db:c7:45:f0:27:f2:6b:86:97:e3:
21:9b:58:7e:a1:e6:b1:77:2a:46:4f:0d:99:36:7e:99:96:a4:
bc:e0:e8:e7:7a:ce:c0:84:3b:30:5a:e3:bf:4d:5e:2b:9f:d2:
b0:56:35:8e:07:0b:75:bf:59:ed:19:d9:2a:67:4a:94:a9:0c:
25:7c:70:a3:71:91:f7:6a:ef:f7:12:bc:c9:00:53:1b:7c:2b:
dd:4a:ad:da:86:46:b0:d2:81:b3:e2:60:ea:4f:fc:e2:21:d4:
e0:b4:33:4a:73:0e:af:38:65:3f:53:31:73:3e:e9:f6:1d:9a:
ec:60:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org