Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I50gJWf4RiBsiP3yPriqCmUSZdM.roa
File: I50gJWf4RiBsiP3yPriqCmUSZdM.roa (raw, json)
Hash identifier: DLCir3UDzW18a2RThpz7ncYxteH16bVp9tV95LlWQdo=
Subject key identifier: 23:9D:20:25:67:F8:46:20:6C:88:FD:F2:3E:B8:AA:0A:65:12:65:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01869CC520386B1B5EB2C5BAE99BCA5A3F35
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I50gJWf4RiBsiP3yPriqCmUSZdM.roa
Signing time: Wed 01 Mar 2023 10:43:29 +0000
ROA not before: Wed 01 Mar 2023 10:43:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23884
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:c5:20:38:6b:1b:5e:b2:c5:ba:e9:9b:ca:5a:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 1 10:43:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=239d202567f846206c88fdf23eb8aa0a651265d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:16:32:10:c8:84:47:24:a2:4f:c0:ba:6d:
f0:f3:c6:84:62:49:22:64:a2:0c:5c:25:60:26:30:
3a:69:37:e8:05:d6:ca:b7:07:f9:fc:3a:a1:8d:c0:
6c:79:4b:94:56:9b:58:6d:87:a7:dd:a6:62:d4:fc:
6b:c7:fa:33:ac:32:cc:8c:61:87:71:00:9d:5b:6b:
f9:5f:3a:f1:3d:c8:18:67:51:e4:e1:3e:78:85:60:
7c:34:3e:68:6c:a3:7e:2d:fc:74:02:d3:92:4e:45:
74:6d:e9:50:ce:fc:d1:8f:a6:25:c5:5d:1f:cd:3c:
b6:29:83:f2:eb:5b:90:e5:d1:d0:b8:e5:60:35:50:
21:be:99:c6:d8:9f:95:55:e5:c4:e0:51:6d:4a:3e:
90:01:65:7c:99:4f:89:1d:83:fe:09:14:66:51:5f:
fe:3c:e8:db:e2:94:90:a9:0f:8f:f9:be:73:69:64:
6e:47:e5:75:19:bf:b9:08:9b:1f:28:06:92:54:4a:
7e:81:e2:d5:92:3a:a5:eb:ce:77:47:11:79:05:2b:
8e:5b:f1:70:28:69:87:36:63:9e:1b:56:c2:2e:4e:
ad:19:6e:f0:89:4d:9e:d0:54:96:c5:24:64:0b:c9:
22:d2:de:66:e7:30:4f:86:bc:24:ba:12:05:ec:2c:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:20:25:67:F8:46:20:6C:88:FD:F2:3E:B8:AA:0A:65:12:65:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I50gJWf4RiBsiP3yPriqCmUSZdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
15:51:87:d9:dd:9a:9c:c3:16:fb:14:c3:8e:6f:26:9c:fd:71:
dc:d3:a0:14:2d:2e:65:52:84:3d:5e:e5:ea:c3:8a:c6:88:ba:
30:bd:4f:33:a6:53:60:b4:cf:b1:f1:53:99:09:67:72:ed:6e:
1b:97:29:1c:18:01:f7:21:fa:c9:a3:b0:6b:84:dc:3d:6b:cb:
db:99:a3:5b:ba:a1:06:26:b0:31:a6:d4:19:84:55:04:59:23:
90:87:3d:c8:c3:65:75:e1:44:2c:cc:ec:5c:e2:42:94:82:a6:
e1:e0:cf:b6:f5:46:58:cb:89:0f:ac:37:62:2c:de:88:62:4d:
c1:3d:41:f3:db:bb:3a:99:73:44:ae:d8:02:7d:86:5d:d9:53:
f9:fa:1a:da:c7:9f:30:21:31:29:96:00:e1:9f:87:0e:1e:ff:
96:fe:11:82:3b:b0:f0:64:dd:fa:63:11:bd:8b:ec:cf:06:9b:
50:e5:3d:7c:44:f1:63:2e:2e:d8:f1:4a:7b:fa:b0:10:1f:1b:
53:2f:9e:3d:37:2d:ae:74:c0:6c:1b:77:06:90:15:8c:4a:6c:
80:61:b4:76:b2:66:4f:d4:f2:80:c1:0f:9c:f9:8a:ea:ce:7a:
f9:7c:9e:34:07:95:a5:96:92:2c:72:4e:58:62:1d:90:36:a0:
6d:de:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-fra.rpki-client.org