Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v5cjj8B0AwMatuyGe-pZuxqAYQE.roa
File: v5cjj8B0AwMatuyGe-pZuxqAYQE.roa (raw, json)
Hash identifier: C9s252QpzPjd00esz7bg0+AVJ6newbwhugxHVlcsTx8=
Subject key identifier: BF:97:23:8F:C0:74:03:03:1A:B6:EC:86:7B:EA:59:BB:1A:80:61:01
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018F3D0F30E0FA7F34716C56C1A202F657C5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v5cjj8B0AwMatuyGe-pZuxqAYQE.roa
Signing time: Fri 03 May 2024 06:05:56 +0000
ROA not before: Fri 03 May 2024 06:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.143.214.0/24 maxlen: 24
195.114.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:0f:30:e0:fa:7f:34:71:6c:56:c1:a2:02:f6:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 3 06:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf97238fc07403031ab6ec867bea59bb1a806101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:83:f5:35:a2:af:ed:d7:32:e6:2b:29:1a:
36:16:e5:4c:82:f8:11:b9:5b:30:85:32:35:79:31:
04:11:f5:5b:78:dd:4b:a0:23:bc:42:ee:99:fd:c1:
76:b0:22:fa:ec:14:40:55:58:01:21:74:7f:db:27:
6b:78:49:ae:0f:44:c8:cb:9d:b3:18:92:a7:8f:ce:
0c:fc:b1:94:18:c7:5b:b8:10:94:ef:d7:b5:b3:7e:
38:a0:d5:95:99:e4:08:09:6f:1e:41:72:8f:65:d6:
e9:10:24:c0:05:2b:60:f0:64:75:a6:de:a6:31:fd:
af:99:08:80:35:78:e7:5f:f4:f8:2e:ef:81:ea:6c:
86:6f:a7:bc:a8:7c:4b:fc:b8:aa:db:46:6a:db:e4:
40:58:8c:f6:1b:d4:fd:25:4d:d2:7d:0f:ac:eb:35:
e1:ce:e6:5c:d6:40:d2:17:53:87:ce:5f:15:c2:32:
35:7b:90:11:bb:d4:30:8d:4f:8b:a5:8f:5e:eb:fa:
58:32:e8:0b:81:75:57:fd:93:df:94:3d:f7:01:aa:
a3:ed:38:0b:fd:00:35:85:ec:58:42:36:4b:2e:31:
a9:db:f6:7e:42:41:ef:55:64:65:0d:86:e4:da:d4:
c0:7a:16:1a:91:8b:38:ae:8f:28:bc:e1:98:e9:5c:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:23:8F:C0:74:03:03:1A:B6:EC:86:7B:EA:59:BB:1A:80:61:01
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v5cjj8B0AwMatuyGe-pZuxqAYQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
195.114.193.0/24
Signature Algorithm: sha256WithRSAEncryption
62:42:9b:0f:30:a7:e0:0f:16:a7:14:62:d9:eb:e3:db:30:50:
3b:de:e2:be:f0:1f:c7:4b:b4:62:75:3f:3b:d7:fa:96:e9:3a:
48:95:02:5f:7a:91:48:8c:8f:88:90:ee:ff:56:fb:53:7a:d4:
82:48:22:83:d6:d4:f7:31:8c:25:e1:ea:da:aa:c4:2f:8b:90:
a5:ef:d0:de:11:a1:0b:58:20:34:5b:ce:20:3a:5e:99:41:e4:
a7:27:ad:be:31:1a:31:6c:93:9f:fb:b7:8e:be:0a:1f:73:ab:
4f:ad:74:5d:93:a4:1e:bf:dd:bd:f3:ed:d2:b2:6d:0a:de:1d:
f1:1b:b9:26:e5:a0:1e:85:2f:ba:09:ac:3e:8f:0f:70:21:1f:
08:ad:a8:34:e1:d3:2b:28:15:71:63:36:94:b1:39:04:1d:7d:
bf:5d:83:aa:c3:9b:be:d0:73:45:dd:c9:24:69:f3:37:9a:31:
b1:e7:ba:bd:35:7d:08:e4:9d:b5:3e:2e:de:eb:fc:1a:17:9e:
14:54:7b:77:5e:a6:98:01:c3:cd:cf:58:a2:13:57:ba:2b:b6:
91:c7:a1:8b:fe:c1:03:25:ca:68:2e:0c:18:82:ea:49:bd:11:
a5:d5:de:36:58:f5:c1:cc:b4:9b:2b:55:1a:e8:40:55:c2:ee:
5b:5f:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:27:46 2024 by rpki-client on console-fra.rpki-client.org