Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/G643-iavsX2ljDt6o2eamA_RIKo.roa
File: G643-iavsX2ljDt6o2eamA_RIKo.roa (raw, json)
Hash identifier: D0czcpiYbrkk97dixbHvxgdT+CIrohp1cUS6px9Io9E=
Subject key identifier: 1B:AE:37:FA:26:AF:B1:7D:A5:8C:3B:7A:A3:67:9A:98:0F:D1:20:AA
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 01856BD34C7A2EA8C153FA348A08E26F9EB0
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/G643-iavsX2ljDt6o2eamA_RIKo.roa
Signing time: Sun 01 Jan 2023 05:34:47 +0000
ROA not before: Sun 01 Jan 2023 05:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 194.32.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:4c:7a:2e:a8:c1:53:fa:34:8a:08:e2:6f:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Jan 1 05:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bae37fa26afb17da58c3b7aa3679a980fd120aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:72:76:03:14:c9:04:06:ff:0b:1b:39:7d:
7a:76:14:80:1b:e2:3b:48:d0:b4:cf:4d:31:2d:d1:
c4:36:09:e9:e6:c1:75:41:0b:44:2a:ff:23:10:15:
21:bc:d1:44:6c:12:f5:5f:36:fd:cb:14:d3:19:21:
e3:b0:92:36:1f:d7:77:e5:9d:de:af:69:07:82:51:
55:d9:5f:32:76:7a:13:b0:a3:4a:ce:73:b7:c3:74:
c1:9b:1a:0a:7b:af:0c:04:61:57:b8:0f:40:ab:69:
98:05:c1:3c:9c:96:9a:05:fb:7f:0a:86:45:d8:69:
33:f3:84:70:b3:56:9a:2f:eb:ce:f4:a8:0b:25:a9:
7f:8b:9f:ba:6d:9e:4f:1d:0f:2a:a2:30:b3:a7:e6:
19:48:8e:8b:31:07:8d:ae:52:47:05:21:c0:96:8b:
1b:1a:c2:f0:e9:7e:c7:da:f8:20:2f:d9:ac:b9:70:
4d:d5:43:8a:93:50:d1:b7:36:cc:ab:1b:91:30:d1:
ed:1a:9d:c4:22:ba:eb:03:50:f1:ff:97:59:f6:e3:
34:bf:e7:c3:d3:e2:57:9e:3f:b0:70:60:c1:46:19:
2b:ee:0a:86:9e:03:29:49:8f:5a:a5:76:e0:18:3a:
c7:56:7c:1e:e6:7a:db:9c:11:b2:12:10:d1:44:54:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:37:FA:26:AF:B1:7D:A5:8C:3B:7A:A3:67:9A:98:0F:D1:20:AA
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/G643-iavsX2ljDt6o2eamA_RIKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bc:b6:87:62:c1:a0:a3:09:ce:96:10:0a:3c:ed:7d:3e:83:
45:b2:65:34:d3:d3:75:98:0d:cb:d1:d1:27:49:0d:65:0b:c3:
63:4f:99:3f:6b:16:e5:92:1f:1f:fc:0e:86:8d:99:c7:3a:7c:
01:07:21:11:01:c7:55:e4:8d:29:ef:41:11:79:34:81:d8:9f:
54:65:ad:1d:31:c8:dd:f1:7a:d9:e0:76:a0:7a:5b:cc:21:a7:
fa:bb:6e:3d:04:7d:e3:8b:8f:bd:96:21:46:f5:18:e8:eb:67:
c1:d8:e0:03:d2:88:0c:e7:31:48:29:60:0a:42:c1:91:6e:1b:
cf:3d:0c:9d:b8:25:dc:c7:51:34:57:d6:57:ae:53:01:4c:cd:
c2:f9:56:f4:35:ea:03:b6:f6:73:99:d8:b4:21:b1:c3:2e:9d:
98:be:6a:40:d8:f2:4b:ee:b4:37:42:9d:16:a6:f6:65:6b:1a:
a8:0c:7c:98:46:b9:ba:09:5e:51:d8:f2:5b:ad:ae:43:10:01:
b2:73:89:bb:5f:5b:1f:d5:6d:1b:fb:bd:f1:84:49:fb:69:9f:
16:28:15:89:1a:49:f5:08:27:6e:74:8e:46:83:5c:ac:af:09:
bb:d5:fb:4b:42:ae:a3:2d:08:a1:db:7f:9e:b6:2b:9d:a1:c7:
bd:c3:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:05 2024 by rpki-client on console-ams.rpki-client.org