Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/agZ2d3S-16rhqHp_7vdtC1-To-4.roa
File: agZ2d3S-16rhqHp_7vdtC1-To-4.roa (raw, json)
Hash identifier: GTJrCb5AGVEtYZScZtozQUXtPyVxYXRpKR+Cxo4Df2Y=
Subject key identifier: 6A:06:76:77:74:BE:D7:AA:E1:A8:7A:7F:EE:F7:6D:0B:5F:93:A3:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 018972667D051591066951D917C94D105A6D
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/agZ2d3S-16rhqHp_7vdtC1-To-4.roa
Signing time: Thu 20 Jul 2023 08:24:26 +0000
ROA not before: Thu 20 Jul 2023 08:24:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207646
IP address blocks: 194.31.224.0/24 maxlen: 24
194.31.226.0/24 maxlen: 24
2a0f:aa40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:66:7d:05:15:91:06:69:51:d9:17:c9:4d:10:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Jul 20 08:24:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a06767774bed7aae1a87a7feef76d0b5f93a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:55:7b:16:07:50:3a:70:84:01:03:16:34:
04:9f:30:04:05:05:dc:eb:df:fc:af:4d:0a:c9:e2:
1c:fe:1a:e4:3b:8b:06:38:71:d2:61:a7:1f:c3:de:
b0:c3:d0:66:c2:10:3b:49:0f:6a:6f:8d:66:fa:b6:
9e:40:7c:68:3a:23:9a:23:e3:c6:96:9d:c4:31:68:
e2:83:7e:ec:da:6c:9f:77:56:0a:2a:4a:1f:ab:f6:
bf:ab:8d:80:a4:3f:f0:f3:39:f3:03:4b:0b:93:0e:
f9:4d:70:78:e4:fc:89:ea:2e:e5:79:73:ed:c0:23:
22:5b:fb:6d:fa:65:62:e4:b8:04:97:e3:5d:26:fe:
36:c1:74:75:57:69:35:74:8e:a0:50:b9:cf:fb:b0:
e5:3a:c7:e4:62:ea:a9:9c:09:a6:c3:63:fd:ae:e8:
3e:56:c1:a8:69:27:f3:69:9e:50:94:27:d5:3b:51:
3a:08:da:24:99:1f:76:14:2b:e4:7a:8b:bc:dc:2e:
da:8d:28:ff:2b:b5:f3:91:eb:5a:d5:c0:e7:df:af:
47:42:e6:d8:78:b7:34:6d:d7:5a:7b:57:83:d3:66:
cb:b2:26:3c:13:b8:b9:26:04:a2:9a:8a:68:0a:4c:
9b:fa:14:9e:ff:19:61:dc:e3:95:78:da:21:19:75:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:76:77:74:BE:D7:AA:E1:A8:7A:7F:EE:F7:6D:0B:5F:93:A3:EE
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/agZ2d3S-16rhqHp_7vdtC1-To-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.224.0/24
194.31.226.0/24
IPv6:
2a0f:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
53:9c:db:3d:aa:0a:33:22:3e:a5:c4:a2:1a:19:ab:44:49:16:
56:43:d0:89:52:7c:ac:2a:bb:c0:fa:38:b8:4a:4a:fa:08:6c:
06:79:2b:11:43:77:8a:4e:f5:e3:e9:bb:d9:70:cc:aa:b6:54:
ff:81:c1:28:40:b8:cc:42:b2:a2:76:a9:e3:d2:42:02:b6:d5:
17:95:1f:ea:08:a6:ff:68:1c:0d:b4:cf:48:ab:16:96:26:09:
cc:f0:24:db:c8:fa:fb:ef:42:bb:4d:ae:8f:2a:53:7c:1f:fc:
6b:39:fc:91:05:b4:08:e4:b2:2a:3c:3d:00:e9:fd:5c:5a:c4:
2a:ab:d3:8d:e0:80:8c:7a:e8:24:3e:19:c4:bc:1f:69:f6:fd:
8a:87:fb:49:1d:2f:5d:95:c3:4b:1d:e1:8b:21:42:eb:bc:ab:
58:2c:b2:13:d8:4b:06:71:79:e9:13:cc:f3:be:a9:0c:28:17:
6f:0e:eb:6d:4c:21:d1:12:aa:a0:12:6c:ea:90:74:0b:3c:e6:
70:13:be:76:78:ba:da:e6:2b:49:ba:17:ba:39:6a:e1:5c:4f:
41:eb:f1:70:e6:43:7e:a5:14:6c:62:a6:a4:b3:c2:12:29:9e:
67:da:9d:ea:6d:aa:69:74:23:b8:93:9b:50:72:f6:15:55:79:
63:e9:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:39 2024 by rpki-client on console-fra.rpki-client.org