Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/a6shyCZhxy6agCfn2RPZ5LvTvc4.roa
File: a6shyCZhxy6agCfn2RPZ5LvTvc4.roa (raw, json)
Hash identifier: wsXbdJ3deStgPjyncAFDfqehu0P4hblmE2XCk2Dn9s8=
Subject key identifier: 6B:AB:21:C8:26:61:C7:2E:9A:80:27:E7:D9:13:D9:E4:BB:D3:BD:CE
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 01857127954F5EB79D5E6B35FCAF9F0F7171
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/a6shyCZhxy6agCfn2RPZ5LvTvc4.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:95:4f:5e:b7:9d:5e:6b:35:fc:af:9f:0f:71:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bab21c82661c72e9a8027e7d913d9e4bbd3bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:cf:42:93:75:7f:fb:e3:cb:17:9a:31:d6:
1c:ea:90:fc:56:a4:11:bf:fa:72:c4:9f:b3:78:70:
27:d1:c7:b4:ed:93:57:59:e0:4a:14:70:63:2b:11:
9d:04:6b:0e:28:46:ac:44:92:c5:9d:21:d3:83:aa:
ed:d8:41:f1:c9:03:98:76:b9:5f:b7:67:fe:76:a4:
95:d0:e1:60:da:a1:ac:82:42:87:93:cc:9d:70:b8:
52:bd:4e:0d:4f:eb:45:bc:42:bf:41:49:10:aa:00:
99:d8:e8:f6:c1:a7:4a:a9:96:cc:88:68:3f:a6:79:
11:8b:2c:8c:e4:7c:e8:be:46:e9:63:bd:0d:ac:86:
02:f3:78:87:c7:3c:29:b0:77:a5:f4:b9:6a:ef:25:
ab:41:c6:07:b5:44:e0:e5:c9:bc:7f:c7:38:c9:e9:
f0:c1:22:19:99:00:4e:79:86:f1:44:ab:fa:e6:42:
b5:0e:46:65:3e:92:b6:45:18:d3:d7:86:75:b6:61:
18:97:b5:0c:aa:e8:03:f1:21:de:20:78:83:cb:c8:
82:62:b7:c3:80:4b:f2:3e:44:f0:eb:21:16:aa:bb:
fc:ea:28:16:38:08:f9:0c:c0:b5:61:35:df:cb:c9:
20:a3:53:a9:77:d8:0e:ad:76:d0:ff:fe:0b:ff:92:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:21:C8:26:61:C7:2E:9A:80:27:E7:D9:13:D9:E4:BB:D3:BD:CE
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/a6shyCZhxy6agCfn2RPZ5LvTvc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:8e:6c:5d:05:ee:06:62:77:64:6b:16:40:7c:dd:fc:cb:c9:
e7:c6:1c:71:12:d9:5c:f4:c6:ae:06:bd:75:bb:c0:68:32:d4:
c1:c3:60:2d:af:d2:0f:1a:83:f5:eb:e6:e0:4e:d6:56:83:f3:
46:5a:d9:37:5e:cc:f9:5f:45:c8:c9:e8:50:0a:3f:65:b7:96:
81:c1:39:ad:90:e9:89:76:92:3f:8e:5f:24:c2:ac:2c:7b:71:
ad:1a:2a:66:dd:9e:6e:ae:8c:fc:51:a4:9c:fa:dd:7c:73:7f:
bb:0d:b0:4e:bb:aa:00:88:65:e5:09:21:bc:38:96:5b:b6:7f:
40:44:ff:73:b6:ea:41:36:6b:57:75:e4:b6:4c:19:8d:0d:e7:
21:a7:a1:9e:a1:6b:7a:9e:e5:5e:15:35:f8:4c:11:b2:e9:34:
76:f3:af:08:33:08:fd:16:65:65:dd:30:77:64:31:61:54:5a:
38:4b:0f:ec:17:f8:1a:c3:d1:0f:4f:6c:87:6c:e1:3d:7f:74:
f5:ec:fe:31:0d:0a:6b:e7:de:f2:92:60:07:8a:58:ae:fe:39:
69:93:67:9d:0a:52:c6:16:f5:57:a9:37:57:87:5d:b0:6d:90:
81:22:93:88:dc:4b:92:8b:3f:79:cd:b2:c5:39:be:7d:75:22:
81:96:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:40 2023 by rpki-client on console-ams.rpki-client.org