Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/usvqizOwm4a1sVg1qG1GnE02HPU.roa
File: usvqizOwm4a1sVg1qG1GnE02HPU.roa (raw, json)
Hash identifier: mfiIsbiebntPmmwW0iL60zns6Vx0T0PG+WWKEaNULvk=
Subject key identifier: BA:CB:EA:8B:33:B0:9B:86:B5:B1:58:35:A8:6D:46:9C:4D:36:1C:F5
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0188D3E9A4BCF561EAEE9747C526848BE169
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/usvqizOwm4a1sVg1qG1GnE02HPU.roa
Signing time: Mon 19 Jun 2023 13:48:04 +0000
ROA not before: Mon 19 Jun 2023 13:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198389
IP address blocks: 94.240.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:e9:a4:bc:f5:61:ea:ee:97:47:c5:26:84:8b:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jun 19 13:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bacbea8b33b09b86b5b15835a86d469c4d361cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:62:6e:b0:8e:da:e5:25:8f:24:eb:1d:5b:
49:6b:5c:17:24:a1:b1:de:61:7d:a7:62:6f:d2:d6:
b2:0b:de:be:b6:84:5e:b7:1b:73:aa:cc:27:97:51:
ad:b0:f7:9e:25:95:a6:5a:a3:14:5c:4e:43:4d:11:
42:38:ba:92:4c:9d:0f:5b:3f:49:3d:15:58:9c:2e:
65:b7:f3:a3:f6:65:c2:e0:ce:40:ef:67:2b:5e:53:
eb:da:17:c1:ec:9b:4e:07:63:da:f0:e6:04:18:f0:
34:bf:f9:b1:4b:7e:51:3a:13:29:b1:0a:bd:cc:c8:
a0:13:ab:75:72:44:50:e0:b7:e4:91:2d:cd:62:84:
40:ee:23:b8:a1:16:93:32:61:37:88:99:63:73:15:
54:b4:61:04:69:66:10:43:63:bb:ec:2c:00:ac:94:
d5:a5:5f:6d:fd:cf:0d:19:2c:f7:a1:30:b6:90:92:
a3:c2:ed:68:07:cb:fd:23:d4:8a:11:9a:c6:bb:ef:
26:7f:1e:8a:b5:07:d6:04:16:f5:1f:37:d5:58:fe:
8d:ae:33:08:08:3e:e7:5b:13:6c:7d:62:a3:6b:7d:
a2:6c:ca:1f:e5:c7:b4:d2:8f:e7:28:ce:f6:5e:73:
ad:66:e0:78:6c:13:11:43:13:fe:18:d0:32:c8:29:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:EA:8B:33:B0:9B:86:B5:B1:58:35:A8:6D:46:9C:4D:36:1C:F5
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/usvqizOwm4a1sVg1qG1GnE02HPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:15:ab:e4:a3:cf:92:77:a6:81:f6:0a:9d:5d:d8:db:90:
9d:3c:b6:ea:2f:7a:5e:60:58:0c:c1:c8:f3:f2:d0:69:32:3c:
01:49:b5:4b:91:7c:4f:71:55:47:45:bc:a9:94:8e:21:c4:a4:
53:2b:d5:32:d4:60:cd:02:ca:01:de:7e:02:81:e0:ea:ae:45:
87:07:55:0c:87:ea:20:f3:c6:f4:9e:bc:75:7f:c2:f4:98:e1:
e3:3b:af:6f:9b:2d:78:5a:5e:91:71:4f:5e:db:33:dc:f2:ec:
5f:f8:a0:1a:46:27:12:86:b8:d4:b8:dd:b2:04:47:92:2d:4f:
e3:17:54:47:bf:35:11:dc:c3:c7:fb:2a:8e:cc:2c:c7:27:ae:
c8:21:40:68:3b:c6:ed:0b:f5:36:94:06:db:e0:57:8f:b4:47:
2d:b4:6f:36:d3:7f:26:85:d7:59:8d:41:82:01:91:10:16:77:
e2:25:0e:13:b6:10:f9:6c:97:12:fd:62:54:27:a9:c6:1b:fb:
86:e1:bc:79:ee:da:44:4a:78:8f:5d:3c:70:c5:20:e4:16:50:
1a:ec:82:61:0a:ec:98:de:95:69:f5:c7:98:7d:14:da:bc:5d:
5c:61:21:25:b7:52:5e:89:42:32:f1:91:c0:97:09:87:38:d9:
83:e6:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org