Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/oo0-dIY9-r-tcb7YXXbUujfY2No.roa
File: oo0-dIY9-r-tcb7YXXbUujfY2No.roa (raw, json)
Hash identifier: VwUshGnhG21D4X+G7z1Qy92zb0gCgZjXU6ntfGCoDjw=
Subject key identifier: A2:8D:3E:74:86:3D:FA:BF:AD:71:BE:D8:5D:76:D4:BA:37:D8:D8:DA
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018A6B22C101BED997363B2F3CDAE52DD67A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/oo0-dIY9-r-tcb7YXXbUujfY2No.roa
Signing time: Wed 06 Sep 2023 15:35:54 +0000
ROA not before: Wed 06 Sep 2023 15:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 194.110.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:22:c1:01:be:d9:97:36:3b:2f:3c:da:e5:2d:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 6 15:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a28d3e74863dfabfad71bed85d76d4ba37d8d8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:ff:39:23:c6:d5:f8:86:4d:65:d2:ef:82:
4f:24:2e:f8:6f:85:6d:e6:90:b2:fc:30:1a:35:96:
2f:1d:42:2f:18:81:25:67:41:45:6c:7e:f0:7a:66:
41:6a:6a:55:05:95:b3:a7:5a:a2:c1:68:f9:43:64:
be:77:58:8c:c7:1d:04:1c:08:e7:f4:3d:12:2c:ea:
f2:87:6e:31:19:38:77:f0:cc:23:3c:f0:34:d2:11:
d2:6d:dc:52:f8:c9:0d:2e:71:a2:33:b0:50:bc:6d:
8b:81:2f:73:4a:2f:94:fe:79:b5:08:48:e7:b0:21:
a7:60:2c:f0:5d:dc:68:35:b2:13:7f:86:77:87:d1:
b8:69:6c:70:9e:98:33:f1:87:cc:3f:ba:16:c6:b1:
81:7a:d8:66:ea:1b:8a:fa:cb:a5:bb:3f:23:57:83:
09:04:83:62:26:ee:54:46:8e:b7:a9:5e:a8:36:6b:
76:c5:78:5d:0a:06:60:b9:b9:73:e4:77:6f:e9:30:
40:be:01:91:61:82:7f:e7:2a:91:29:ae:f7:0d:a0:
51:8f:23:e2:6f:9d:bb:c4:8b:be:52:8b:27:dd:98:
69:3a:c1:50:c9:8c:b9:2d:18:a3:8e:ca:15:c2:e5:
e5:1a:38:28:d2:df:1f:89:b7:34:24:76:24:85:a9:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:3E:74:86:3D:FA:BF:AD:71:BE:D8:5D:76:D4:BA:37:D8:D8:DA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/oo0-dIY9-r-tcb7YXXbUujfY2No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.173.0/24
Signature Algorithm: sha256WithRSAEncryption
42:19:d4:e9:49:44:89:03:5e:9c:26:12:94:57:9c:8b:9f:bf:
c0:3c:02:3b:6e:c9:ed:67:25:26:36:d9:d1:f9:dc:67:75:e4:
ca:3a:5b:6c:27:b5:aa:49:25:0c:69:7d:3b:d9:7b:52:53:62:
4a:ef:02:d1:53:be:3c:0f:11:26:15:5a:35:f4:3f:32:04:a4:
cf:4b:f0:46:b2:8a:15:fb:17:3c:28:83:cb:13:b7:92:e8:94:
09:4a:6f:ad:17:54:35:2f:28:df:d9:6e:99:56:f6:e1:39:6d:
7a:88:1e:4f:d8:6b:d5:57:d4:10:93:e4:8b:b5:86:e0:4d:51:
60:2d:d6:6a:a3:3b:56:15:65:21:16:17:fa:fe:03:52:4d:a1:
f7:79:04:36:7a:2d:9e:0a:e1:69:b0:9e:91:79:63:ed:bd:82:
41:a7:a2:43:ba:b1:0e:4c:a2:8b:29:ac:1e:6c:0c:1f:0b:a5:
7b:e3:79:85:4f:8c:4b:19:3e:ea:be:a3:77:9e:19:ea:cb:fd:
6c:3d:72:e9:5c:33:58:e1:c6:75:db:87:b9:d9:6b:a9:d6:ca:
13:bb:7a:ac:e3:65:c4:59:3a:d0:90:ef:1c:43:98:60:4b:02:
87:20:ba:2c:60:63:4b:46:c5:03:9a:6c:87:dc:16:a1:ce:27:
65:0e:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 15:02:46 2023 by rpki-client on console-ams.rpki-client.org