Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/a-63-X2zF5grNfsteWgtIqnPg3Q.roa
File: a-63-X2zF5grNfsteWgtIqnPg3Q.roa (raw, json)
Hash identifier: cQPnwYVdBBDRI6FTO7vps4WXlUGq1wvKzZ5V4xgxNHM=
Subject key identifier: 6B:EE:B7:F9:7D:B3:17:98:2B:35:FB:2D:79:68:2D:22:A9:CF:83:74
Certificate issuer: /CN=e86fc9f927947aa48983b027cf3de38475b053d3
Certificate serial: 01856F2FDBDE5EF50F65459568FBC83AB738
Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/a-63-X2zF5grNfsteWgtIqnPg3Q.roa
Signing time: Sun 01 Jan 2023 21:14:45 +0000
ROA not before: Sun 01 Jan 2023 21:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28795
IP address blocks: 194.247.180.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:db:de:5e:f5:0f:65:45:95:68:fb:c8:3a:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3
Validity
Not Before: Jan 1 21:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6beeb7f97db317982b35fb2d79682d22a9cf8374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:09:96:dc:58:d7:db:60:a2:e0:3d:98:3f:
a8:68:bc:12:79:64:32:67:9e:57:20:7a:30:73:cb:
c1:dd:d7:6a:fd:9c:e3:2f:d9:ef:c1:12:f2:84:79:
42:98:22:33:6f:90:70:0a:eb:01:bb:e7:c8:fe:16:
74:c5:69:81:76:5d:59:11:12:4f:1b:ba:5f:dc:16:
e7:ea:0d:b5:56:a8:e7:af:b5:04:3c:b7:6e:a9:50:
00:d2:4a:ce:2f:73:21:a7:9e:19:12:2a:d0:5f:d9:
55:dc:7a:46:2a:d0:3c:94:27:ed:dc:d2:a1:0f:a9:
c0:ca:de:c4:e1:58:45:e4:0c:02:90:1a:17:c4:02:
7c:03:95:1d:cd:5c:ee:31:10:80:27:68:ad:a4:4d:
8d:08:a1:f6:b5:7f:4e:04:b4:65:08:9e:c5:e8:83:
35:cb:07:1b:d4:92:db:17:20:8a:20:d0:9d:86:f6:
0e:09:d2:f6:a4:9f:8b:02:0b:46:9d:27:87:56:6d:
b7:d3:4f:da:e3:f5:94:c3:45:63:c9:8b:a1:60:13:
1e:da:8c:06:38:69:c7:c0:45:31:87:80:fe:18:a9:
bd:3d:51:22:a1:78:22:fd:f4:02:5e:05:b7:10:64:
9d:f1:28:15:8a:e1:ad:65:4d:c9:4c:48:30:f1:2b:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EE:B7:F9:7D:B3:17:98:2B:35:FB:2D:79:68:2D:22:A9:CF:83:74
X509v3 Authority Key Identifier:
keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/a-63-X2zF5grNfsteWgtIqnPg3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:4c:ac:e1:4d:46:01:81:6c:60:e0:a8:61:9a:c9:7a:6b:af:
b2:e9:23:c3:89:20:59:65:83:21:de:23:1c:40:9e:4e:7e:c6:
db:b0:7b:4c:5a:72:06:3d:b3:2a:5d:ca:38:53:f0:d0:13:6e:
f7:53:e0:4d:b5:15:56:19:91:0c:c3:8f:f7:cf:2a:17:b7:f8:
57:bb:01:8b:35:39:7d:6c:d4:94:f1:cb:c2:93:e8:9e:95:59:
35:43:a7:0f:66:14:1f:6b:9f:c7:46:fd:f6:70:10:69:3b:f8:
9d:dd:5e:e0:10:20:af:c2:f8:9c:50:53:9e:42:1c:87:a6:6e:
97:fb:38:cf:a8:75:70:38:98:50:92:b6:e7:7b:6f:3b:06:22:
f9:ef:06:11:9d:52:18:ed:34:25:4d:22:93:07:65:c6:fd:59:
b6:3e:b0:16:18:19:82:08:e3:1c:9f:4a:99:2f:09:88:dc:74:
ea:7f:e9:f3:6a:ac:4f:a6:aa:cd:f7:79:12:09:a0:ff:a4:88:
83:0e:fb:7f:11:35:56:db:b8:dd:a8:8e:d7:70:04:9d:7b:28:
47:f4:a6:df:fa:d1:0a:10:d2:a4:1e:15:e9:f9:fb:8a:a3:64:
4e:28:2c:54:5b:2f:bc:d7:17:7e:4d:01:1e:69:9c:ab:d5:a4:
d9:26:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:29 2024 by rpki-client on console-fra.rpki-client.org