Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwlOCiPG6pzxclu62iGkrtSsRZE.roa
File: CwlOCiPG6pzxclu62iGkrtSsRZE.roa (raw, json)
Hash identifier: QngBrRx7PUh7PKw2zHMWZ4hBN2JiFzs6GkGEmw7pMNA=
Subject key identifier: 0B:09:4E:0A:23:C6:EA:9C:F1:72:5B:BA:DA:21:A4:AE:D4:AC:45:91
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B381B798EE181636B7AC0FE27E6B8F527
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwlOCiPG6pzxclu62iGkrtSsRZE.roa
Signing time: Mon 16 Oct 2023 10:50:06 +0000
ROA not before: Mon 16 Oct 2023 10:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:1b:79:8e:e1:81:63:6b:7a:c0:fe:27:e6:b8:f5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 16 10:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b094e0a23c6ea9cf1725bbada21a4aed4ac4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:6a:cc:15:a4:36:bb:ce:12:e5:0d:a8:a1:
2d:0c:94:73:27:29:20:46:65:a1:ba:00:2e:a6:a5:
11:42:ee:ee:16:33:38:af:00:2c:f3:2c:4f:8b:22:
a7:86:f4:d6:03:ff:e3:9c:e3:5e:bf:1a:cb:aa:6a:
b6:5d:1c:b9:c3:65:fc:bd:96:a6:38:1f:00:f2:0e:
b8:99:41:a8:13:b5:85:67:92:b6:bf:3b:8d:24:8e:
5a:ec:ef:2c:7f:e4:b6:61:07:4c:39:9d:f7:51:31:
89:59:92:6c:c6:bd:38:43:bf:4d:6f:c1:6c:bc:16:
3e:10:90:47:63:33:0d:dc:b4:e2:80:2b:4f:a5:6d:
36:d8:26:4a:ef:61:1b:3b:9a:72:7a:58:6f:34:6b:
ea:1d:5d:20:ba:ea:ca:97:6b:98:a7:16:16:3d:c8:
18:90:61:18:b7:5e:40:11:28:2e:fe:88:00:c7:00:
09:f6:4f:a2:9f:55:b8:28:98:20:42:44:f2:62:7c:
4a:8e:75:2a:65:ea:16:93:03:55:cd:0f:1c:17:4a:
bb:5b:49:8d:5f:bd:7c:c5:f8:7e:f1:e1:37:22:4c:
de:89:6b:a1:6f:7e:53:ed:44:b9:6e:b4:f2:9a:85:
59:f3:c6:6d:07:a3:b0:38:9b:15:9f:ad:37:0b:fc:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:4E:0A:23:C6:EA:9C:F1:72:5B:BA:DA:21:A4:AE:D4:AC:45:91
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwlOCiPG6pzxclu62iGkrtSsRZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
47:23:d5:ae:97:32:42:b5:02:29:36:aa:8e:3c:2c:f5:f8:2f:
03:56:1e:57:c2:37:03:94:bc:b3:11:8e:20:19:3c:26:67:a8:
48:67:ca:64:b2:64:47:b4:2e:d7:bf:11:9e:ca:e0:86:27:a5:
82:d8:1a:3e:98:fa:25:3c:47:b4:1b:15:2c:c7:ac:44:ef:30:
4c:a9:17:65:3f:9a:b1:20:52:c1:a9:59:51:1e:a8:1f:56:21:
15:bf:eb:2c:f0:85:85:c7:87:73:5f:b2:2e:8d:e4:8a:79:38:
dc:74:72:5b:c1:d1:08:e3:a8:12:8d:e2:f9:44:1a:58:64:ad:
8d:39:88:30:02:07:13:02:27:b6:19:b5:1f:da:40:7d:c1:a5:
64:db:fd:36:b3:f3:bf:5a:42:fb:0b:ef:b3:c3:33:25:bb:ec:
f9:a1:9e:0c:c8:4b:fe:87:2e:82:d6:5d:04:f6:d9:67:2a:d6:
81:16:ec:15:c9:08:93:23:17:b8:c8:4f:cd:d2:7a:2f:c2:8b:
7f:0e:ed:07:af:ba:57:6d:f9:5a:a3:13:10:2a:f8:32:38:e5:
23:0c:50:35:ad:69:33:ca:39:b0:69:45:68:62:36:9c:58:9a:
3a:ed:a2:0d:b5:fa:f3:0c:9a:35:a1:7f:cb:fd:b3:22:1a:84:
92:e1:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 09:04:25 2023 by rpki-client on console-ams.rpki-client.org