Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/M53_liJkPJ3EwKXG9uceRwyJ6fU.roa
File: M53_liJkPJ3EwKXG9uceRwyJ6fU.roa (raw, json)
Hash identifier: BwydCgK9BMcDJkYNInwUZRa4EaONsAnGQaIRT34XKU0=
Subject key identifier: 33:9D:FF:96:22:64:3C:9D:C4:C0:A5:C6:F6:E7:1E:47:0C:89:E9:F5
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 01856C53ED94E1FCFA7C779D669B31102490
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/M53_liJkPJ3EwKXG9uceRwyJ6fU.roa
Signing time: Sun 01 Jan 2023 07:55:17 +0000
ROA not before: Sun 01 Jan 2023 07:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39381
IP address blocks: 194.147.245.0/24 maxlen: 24
2001:67c:2fe0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ed:94:e1:fc:fa:7c:77:9d:66:9b:31:10:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Jan 1 07:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339dff9622643c9dc4c0a5c6f6e71e470c89e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:05:c4:d9:eb:29:01:88:06:d8:8a:0a:79:
b1:1a:68:23:99:b1:f4:1b:25:66:ee:5b:77:83:7e:
91:ac:4a:4c:71:77:10:23:e7:96:3a:04:ed:cd:6b:
01:9a:7b:a7:e4:9b:f7:eb:a1:2e:70:74:de:7f:0f:
8f:c8:eb:62:ea:ae:54:80:5d:db:04:b2:de:39:16:
1b:fd:25:2f:16:1d:d9:a2:27:8c:90:4c:94:2e:f8:
49:dc:8d:f0:9c:7a:bb:ef:73:aa:da:04:91:7b:30:
52:4c:05:1c:83:60:89:06:9f:cd:a1:fd:23:d3:08:
d0:0c:eb:d1:14:35:ce:13:04:47:5e:8e:be:22:bc:
f9:00:ae:48:f8:85:3a:1e:84:98:c3:49:4e:ba:a1:
5a:e9:b9:b5:3c:8e:94:4a:07:ee:57:20:25:a9:58:
45:f9:e4:0f:5d:8b:af:50:14:f6:01:8c:32:ce:cd:
35:6e:bc:d7:87:5a:48:f1:20:9b:d2:26:f6:27:31:
fe:1e:1f:dc:62:ed:c7:be:d8:3e:5b:b2:ef:08:11:
f8:0f:0c:b0:32:69:08:6c:5e:a9:82:66:fc:8c:cb:
bf:85:05:bc:7b:6b:2a:22:28:e2:37:6e:14:56:ac:
f1:5e:c1:3a:c9:3c:13:93:7b:9b:21:bd:14:0c:aa:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:FF:96:22:64:3C:9D:C4:C0:A5:C6:F6:E7:1E:47:0C:89:E9:F5
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/M53_liJkPJ3EwKXG9uceRwyJ6fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.245.0/24
IPv6:
2001:67c:2fe0::/48
Signature Algorithm: sha256WithRSAEncryption
08:47:9b:00:1e:01:44:3f:9b:60:f3:ad:e4:10:aa:f9:48:3d:
3a:9f:e1:fe:68:ca:b7:30:e0:a7:4a:3f:23:ce:06:e4:08:31:
58:f4:2c:04:8f:14:b7:06:b8:d8:6b:28:15:8f:fd:20:64:6e:
e8:8c:08:99:de:84:a9:e5:16:cb:43:48:e6:7c:d5:c2:86:ef:
2f:e2:13:da:7f:3b:57:8b:ce:09:93:b2:16:b3:f9:66:e2:a0:
5b:68:ff:98:75:c5:5b:a1:dd:1d:47:21:86:d2:09:39:51:ef:
f9:e6:f8:78:ef:d0:26:af:c8:7d:1a:54:bc:b8:45:31:7f:14:
89:c0:5f:5e:7c:ce:3f:91:71:c7:9e:da:bc:af:35:6a:bb:a1:
1e:7f:cd:fa:54:df:b0:cb:cd:7a:5a:68:c8:bf:f6:0a:68:97:
7b:76:4e:5c:f1:d1:eb:57:80:57:89:f8:31:0a:71:10:de:a2:
01:44:b5:6c:b3:b8:7d:0c:3e:81:01:0e:d8:41:1a:06:d0:9e:
27:eb:61:9f:fe:7f:91:4d:39:c8:23:62:c7:39:0b:35:15:a9:
57:89:98:9b:71:04:b1:31:7b:b8:ff:01:1e:58:87:c2:be:6b:
5c:d6:37:52:14:aa:99:4d:fb:4c:3d:ff:64:fb:43:ff:37:c6:
14:af:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org