Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A5u0whbWTagFKz9u99_6lqYnEzQ.roa
File: A5u0whbWTagFKz9u99_6lqYnEzQ.roa (raw, json)
Hash identifier: IKDr5UBJkYoOmfnKBG3jtRRr+hQ9UGRWLQOgsEVS9xI=
Subject key identifier: 03:9B:B4:C2:16:D6:4D:A8:05:2B:3F:6E:F7:DF:FA:96:A6:27:13:34
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C389D808A01D7BC8D1C0E46E70FBEE308
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A5u0whbWTagFKz9u99_6lqYnEzQ.roa
Signing time: Tue 05 Dec 2023 06:14:55 +0000
ROA not before: Tue 05 Dec 2023 06:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15440
IP address blocks: 194.180.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:9d:80:8a:01:d7:bc:8d:1c:0e:46:e7:0f:be:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 5 06:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=039bb4c216d64da8052b3f6ef7dffa96a6271334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:69:e3:4d:fe:f1:6b:df:52:c9:60:3d:aa:
b3:cc:fa:b3:d1:97:e0:79:bf:5b:48:d6:4c:0b:9e:
2a:bb:4c:00:1a:fd:18:f3:3b:32:23:a7:96:03:93:
52:f8:bd:0f:8d:77:73:eb:31:42:d6:04:e4:a0:56:
d9:1d:46:4a:f0:57:ee:fd:21:56:32:f5:69:da:e3:
ec:4e:9b:c9:dc:98:9a:c6:97:c7:0e:aa:49:f6:18:
3b:60:0a:e2:ac:2e:e3:ec:1b:c9:79:7f:57:60:9a:
40:20:95:d1:82:08:94:ea:11:31:9e:53:a5:c3:41:
ce:29:37:86:d0:f4:44:6b:25:cb:e6:b1:f4:07:10:
a5:1f:4b:2c:ae:c4:f0:20:ec:27:b6:d4:43:8c:99:
18:ca:b7:e4:6c:7c:98:ff:34:94:14:9d:ea:ba:1e:
6e:5b:51:e0:91:b8:c6:9d:40:f3:46:a0:64:80:2f:
a8:f7:e4:ef:7d:a4:fd:48:46:17:e7:b4:da:a4:b1:
71:e7:e2:ca:50:6b:88:24:1e:92:f2:02:bf:92:33:
ed:64:23:16:f3:ba:f2:67:84:89:b3:46:5a:3f:32:
a3:66:70:1a:69:43:2e:d7:27:44:bf:f8:29:7c:a7:
72:20:02:a4:bc:04:2e:57:4e:d3:e0:52:f7:17:73:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:B4:C2:16:D6:4D:A8:05:2B:3F:6E:F7:DF:FA:96:A6:27:13:34
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A5u0whbWTagFKz9u99_6lqYnEzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:59:16:5b:ff:0a:73:3f:38:e1:f5:ad:20:c6:3f:af:14:13:
ea:09:ec:f5:58:36:f1:00:49:dc:e4:48:d2:37:78:0c:a2:da:
94:30:eb:17:29:09:b7:30:10:69:d3:61:a6:91:39:e2:49:54:
f4:0e:8b:ac:a7:23:b4:d7:51:fa:fc:b1:81:93:28:66:a9:8b:
fd:5d:52:90:41:8e:ce:6e:fd:3a:c0:d3:ae:86:02:44:1d:6c:
cd:d0:7a:e6:80:d0:d7:63:d8:24:dc:1d:c9:b4:bc:c5:9c:59:
5a:78:1e:59:7d:55:95:34:8f:5e:3b:7e:7c:44:fb:42:48:eb:
39:e1:89:3a:9b:fb:7f:0e:05:86:4b:f3:6c:b7:8d:27:22:98:
ca:47:b8:21:ea:9e:9e:16:cf:7b:56:37:a1:cd:f4:01:ca:16:
6f:ce:93:81:28:e8:e1:94:11:6e:35:33:35:bb:c4:54:5c:8c:
9d:2c:00:d5:f6:bc:bc:bf:b8:d9:89:de:53:5d:0d:e5:01:07:
f7:80:97:9e:78:ab:1c:97:d6:7d:38:44:48:9e:57:05:01:b8:
6a:50:65:4c:77:9e:23:aa:48:1c:dc:44:30:f9:5d:ae:9a:9b:
e7:6f:00:97:9d:73:49:62:48:53:01:19:7f:8f:d4:7a:96:3d:
42:9f:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org