Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D-FeWZdUR5_ldKtRTzIpJeubk7A.roa
File: D-FeWZdUR5_ldKtRTzIpJeubk7A.roa (raw, json)
Hash identifier: P7eOaM8AkE7Sbo/9KncllNRicJvGKZi3k/V/S/MFX+0=
Subject key identifier: 0F:E1:5E:59:97:54:47:9F:E5:74:AB:51:4F:32:29:25:EB:9B:93:B0
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018CC6B7A6D9F2F5258ABDEBB4D11474989B
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D-FeWZdUR5_ldKtRTzIpJeubk7A.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210907
IP address blocks: 147.189.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 07:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a6:d9:f2:f5:25:8a:bd:eb:b4:d1:14:74:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe15e599754479fe574ab514f322925eb9b93b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:52:a6:08:c4:77:3c:8f:64:96:d6:b6:16:
56:63:90:66:3e:b5:62:d8:10:54:90:4b:ed:2a:f1:
80:21:bb:f8:05:ff:80:5c:09:8b:c0:f9:5d:aa:f3:
1c:aa:89:a9:7a:40:87:3f:56:9f:f2:f4:2e:38:f5:
c2:2f:de:c6:00:d8:f7:cb:46:99:f7:fb:4f:fb:25:
d2:b4:53:4b:c2:04:1e:8a:60:54:5d:eb:43:1d:ee:
ed:b2:ea:7a:f4:53:46:90:ce:7e:ab:68:f5:23:f9:
09:9a:f3:5b:4c:07:e0:9f:59:63:30:a8:a6:f3:14:
ab:de:f9:ae:17:67:84:db:3c:5e:cc:32:24:83:81:
32:41:ec:9e:d9:f4:fe:55:3a:9d:47:23:1e:84:9c:
5f:0a:9f:b4:c7:84:6a:54:15:80:b9:54:ac:27:af:
c2:42:1b:0f:0d:bd:0e:9f:9d:a1:61:48:80:86:5f:
86:23:06:0e:45:32:71:d4:47:53:2a:d2:3e:5b:68:
1d:0a:af:70:6e:e4:6e:fb:60:55:3d:84:56:ee:4b:
49:b3:fb:21:51:8c:f2:18:a5:62:91:61:6d:c0:f6:
09:e7:02:49:cc:d4:65:33:dc:6d:84:36:82:a7:5b:
7d:1f:10:c1:ea:0c:84:6b:ce:64:03:d7:4f:c4:7d:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:5E:59:97:54:47:9F:E5:74:AB:51:4F:32:29:25:EB:9B:93:B0
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/D-FeWZdUR5_ldKtRTzIpJeubk7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.163.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:55:41:33:67:a7:c6:94:4d:c8:c0:af:22:ca:79:bb:ec:a8:
62:54:24:f8:d1:9e:e9:cf:4f:78:ce:d6:e7:f8:af:2e:ec:98:
68:9b:a1:fd:6e:41:18:28:2f:e7:70:cc:e6:ae:5d:5e:fb:02:
3d:68:04:cb:28:2c:d2:b4:c0:70:4f:e8:30:d4:d0:73:27:d7:
7a:b8:79:8b:4c:59:32:f1:9b:82:b5:59:1f:58:75:8b:5f:28:
e1:3d:1a:26:9c:c9:3d:05:7c:28:55:3a:53:18:3e:59:65:e7:
1a:06:bf:27:b4:64:fa:45:43:ea:e0:30:7a:9d:27:c1:00:e7:
a3:68:68:e2:e9:c3:b8:74:40:21:f1:53:e6:15:8f:74:61:d0:
be:a4:2f:88:9b:fd:21:27:84:c2:39:c0:74:3d:3c:ba:b3:48:
8b:14:b7:45:ea:e0:ef:e4:64:1c:d2:5e:27:d3:3e:7c:f8:22:
4b:a1:69:32:14:cf:a2:c6:99:a0:d1:21:6c:3f:8f:44:78:cc:
f5:07:0e:1e:7f:01:fa:d2:50:e0:14:a2:b4:aa:b3:5c:c7:52:
5a:83:87:52:9e:fd:50:95:4c:c0:7b:6a:20:0e:8f:e3:ba:ff:
14:d6:65:a3:82:c3:6e:9a:4a:97:c7:76:c9:e8:e4:24:ec:74:
b1:98:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org