Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/AgRPjyGxc5-uTQYjkVV_oaw7vqg.roa
File: AgRPjyGxc5-uTQYjkVV_oaw7vqg.roa (raw, json)
Hash identifier: rzgJqxvaG8bB0tZ70gKG5fmrbWqYDoUnYahUVzV/NEA=
Subject key identifier: 02:04:4F:8F:21:B1:73:9F:AE:4D:06:23:91:55:7F:A1:AC:3B:BE:A8
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 01856BD35A9481EF2A7317628AD779C64C75
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/AgRPjyGxc5-uTQYjkVV_oaw7vqg.roa
Signing time: Sun 01 Jan 2023 05:34:51 +0000
ROA not before: Sun 01 Jan 2023 05:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:5a:94:81:ef:2a:73:17:62:8a:d7:79:c6:4c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jan 1 05:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02044f8f21b1739fae4d062391557fa1ac3bbea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:66:49:f7:8c:f9:81:3f:9c:e3:29:7d:06:
4a:cb:dd:48:e4:91:15:5d:bc:eb:14:2e:7d:a7:93:
09:d1:4b:53:a5:09:f4:ce:32:a6:5c:a7:fa:47:67:
12:e7:d4:86:b7:77:24:d2:10:2e:4e:de:95:57:a3:
5b:43:fc:b3:be:00:aa:4c:07:e0:59:15:32:f5:7f:
9e:40:5d:78:c4:5d:1a:df:20:c4:88:6e:e8:a8:72:
98:40:b2:24:e4:04:22:af:bc:23:da:18:43:44:a5:
67:14:cf:ef:48:1a:b9:0f:29:fa:a2:23:de:57:03:
72:a2:ef:46:ca:66:cd:77:fd:0e:41:a1:ad:52:69:
46:85:c9:94:b2:94:a4:9f:f9:1d:4c:c5:a9:53:e0:
76:cf:cf:53:41:31:d5:55:78:47:a8:0c:8d:48:b0:
4a:78:04:5f:2a:a5:ef:fa:2a:ec:c8:6b:f1:0e:31:
aa:28:42:4f:d2:89:4d:90:b8:70:fb:d9:5e:10:15:
af:9b:72:17:b9:4b:32:7d:e0:33:bc:48:4c:c7:fb:
5b:3e:02:db:04:7d:2d:47:4f:5e:d1:dd:54:d1:cd:
3c:82:f5:85:38:99:45:cb:d6:ba:b3:d6:37:7a:a9:
db:27:9c:3b:29:31:3b:92:31:48:dd:cc:52:b9:91:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:4F:8F:21:B1:73:9F:AE:4D:06:23:91:55:7F:A1:AC:3B:BE:A8
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/AgRPjyGxc5-uTQYjkVV_oaw7vqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.54.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ca:f3:f2:cf:ed:1b:f4:f2:c1:b7:63:6e:cf:53:2e:cf:00:
ad:e8:db:88:0b:9d:39:5c:66:f7:2d:dd:b8:70:21:1c:e8:e1:
11:ee:8a:cd:f4:6c:be:ae:8f:5c:ee:35:a8:48:3e:1b:50:c6:
53:74:7d:82:38:ad:56:fd:5e:21:f0:9e:71:15:8c:f9:67:81:
95:9c:9c:bc:4e:97:02:0c:b8:d4:13:25:35:a4:8f:02:7b:87:
50:19:ba:34:ab:a3:64:c3:46:80:b7:9a:fe:40:35:e0:12:03:
c0:61:ec:c0:08:7c:b2:f1:8b:b9:0e:f1:45:3f:66:5c:7c:fc:
22:a6:5a:47:18:7c:95:cc:c7:0c:11:b8:ec:6c:50:aa:cc:d2:
e1:68:2e:d0:0f:41:ce:26:25:58:09:b9:16:51:53:36:fc:cf:
68:c4:6e:07:dd:e2:37:32:76:16:56:99:ed:73:4b:d7:47:89:
07:7b:58:7e:32:c4:e8:5f:df:81:3a:df:f3:1b:7d:2f:63:9a:
f0:13:56:8b:96:87:76:7a:9d:76:ee:56:fc:a2:da:f0:4a:92:
af:95:79:4c:62:2d:bb:8b:e0:8f:b7:bb:fb:a7:34:ec:04:cf:
68:13:d0:90:1d:0e:60:3d:b5:66:34:55:2d:4c:d9:de:35:80:
63:3b:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:18 2024 by rpki-client on console-ams.rpki-client.org