Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/RQr9qFOfRkfUJEne41zbZYiw8Q4.roa
File: RQr9qFOfRkfUJEne41zbZYiw8Q4.roa (raw, json)
Hash identifier: 6eZrh9XGhjTm95LQZvVPEXMEGpKJaPtzWPIvzKqsoX0=
Subject key identifier: 45:0A:FD:A8:53:9F:46:47:D4:24:49:DE:E3:5C:DB:65:88:B0:F1:0E
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 01856D81BAD006CCA3427E396E598BFE0A16
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/RQr9qFOfRkfUJEne41zbZYiw8Q4.roa
Signing time: Sun 01 Jan 2023 13:24:56 +0000
ROA not before: Sun 01 Jan 2023 13:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197312
IP address blocks: 194.147.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ba:d0:06:cc:a3:42:7e:39:6e:59:8b:fe:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Jan 1 13:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450afda8539f4647d42449dee35cdb6588b0f10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:de:c6:37:67:98:15:d1:e1:ba:7d:45:5e:
92:6a:8c:b1:32:3b:dc:35:bc:38:5b:96:60:1a:2b:
06:3e:d6:4c:65:30:02:09:4a:40:e7:41:97:ab:15:
07:9c:cb:33:12:01:0b:79:5f:0c:8d:18:ea:15:db:
29:2b:0b:ae:c2:b1:47:7b:ab:9b:a4:30:9b:81:9c:
00:94:c2:df:5f:77:4a:2d:ee:05:f3:f2:11:cb:55:
fa:53:59:00:50:34:c6:eb:06:b3:ef:0b:c2:19:58:
80:0d:48:66:ab:d7:38:34:34:d8:f5:77:dc:c9:e6:
02:9e:68:44:2d:7d:e0:03:67:17:3c:d1:e4:26:ad:
ee:43:f2:56:fb:b5:90:05:9c:56:e6:79:09:6d:c7:
65:72:5e:b8:d9:bb:4a:3e:42:56:d5:a5:6b:34:66:
ce:66:29:4f:cb:32:e7:70:04:ef:2b:5f:6c:c3:fd:
c9:3d:4c:c6:22:a8:2a:34:6a:cb:c9:43:0e:2b:b7:
5a:0f:d8:a6:36:81:3d:f1:78:07:85:2e:0a:b2:77:
2a:45:ad:b3:0b:ba:7a:9c:99:7e:23:25:ab:7a:ed:
44:f3:5e:c3:59:75:cb:f2:af:d2:17:3d:0c:13:bc:
e6:7c:44:16:9b:fc:e0:db:6b:2f:f0:8f:7d:24:82:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:FD:A8:53:9F:46:47:D4:24:49:DE:E3:5C:DB:65:88:B0:F1:0E
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/RQr9qFOfRkfUJEne41zbZYiw8Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.254.0/24
Signature Algorithm: sha256WithRSAEncryption
28:da:e5:08:6c:38:1b:4e:1c:36:f1:f8:f3:8d:c5:28:df:f1:
03:c8:7f:f4:85:78:8c:14:81:82:14:7b:27:7d:a0:81:4e:34:
28:b8:33:dd:57:14:61:87:c6:56:cb:71:ba:11:d4:f9:60:32:
d7:83:f7:70:f0:a4:42:e7:88:f9:df:e4:bd:41:f0:63:1f:12:
19:74:85:3f:61:c1:6e:8c:b9:00:e0:c1:ec:f1:a7:ea:d0:ad:
ea:f8:5e:e1:ed:c3:3f:ae:80:3c:09:86:51:42:1c:f7:3b:21:
83:64:2c:a9:e8:d6:c8:36:bf:e4:27:c3:fe:3a:77:bf:a7:f4:
47:19:04:8f:fd:14:50:5a:4a:6f:69:36:d0:e1:62:b5:53:f7:
66:02:65:ff:c4:c5:b7:a1:72:16:eb:0f:7d:a9:a5:04:4b:7c:
fb:62:ab:88:bb:16:c3:81:59:08:00:13:02:33:96:70:0d:26:
b3:f2:bf:4a:90:5b:02:89:46:58:17:07:d6:3b:c9:ad:01:31:
95:7a:81:1f:47:72:d4:de:e7:73:b5:39:56:a3:28:56:46:90:
01:bf:4c:db:44:9b:4c:ac:ea:18:6a:c5:a8:db:8e:1d:fb:38:
e2:05:29:bd:42:2e:30:49:5b:46:96:8c:09:fe:8e:d3:62:c4:
a9:11:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org