Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M3D6rOu49gQSZHHwNiBIkfd712o.roa
File: M3D6rOu49gQSZHHwNiBIkfd712o.roa (raw, json)
Hash identifier: P3S0cf81r9czdKtGfOlU/FLMvYrV7ieg38IOdxhpod0=
Subject key identifier: 33:70:FA:AC:EB:B8:F6:04:12:64:71:F0:36:20:48:91:F7:7B:D7:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187A258CF174B89AEDD91F2ABA290B5CEE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M3D6rOu49gQSZHHwNiBIkfd712o.roa
Signing time: Fri 21 Apr 2023 05:45:41 +0000
ROA not before: Fri 21 Apr 2023 05:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211167
IP address blocks: 194.180.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:58:cf:17:4b:89:ae:dd:91:f2:ab:a2:90:b5:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 05:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3370faacebb8f604126471f036204891f77bd76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:64:1f:2d:d5:da:d3:09:db:8c:e1:ff:18:
30:8e:80:fa:e6:e9:b2:73:5b:03:1f:01:3c:35:6d:
07:1b:4d:e8:24:63:be:06:f9:77:2d:12:15:2a:6f:
58:d2:7a:fe:3e:23:fb:9c:85:40:fb:1c:0b:85:9a:
16:ca:ad:98:5b:12:40:3f:4c:95:43:7a:98:2b:02:
67:4c:25:9f:c7:61:b3:8d:c9:42:2c:16:74:67:8b:
85:fb:6d:95:c0:92:e8:35:9b:2e:85:74:7a:34:30:
1d:25:67:18:30:72:f8:08:d0:b2:47:f1:db:55:b3:
80:6c:1f:a9:4d:07:59:b3:20:2b:74:2b:5e:d7:a2:
1f:73:8b:17:78:04:64:fd:e2:e3:5c:51:e4:2b:f4:
3d:5b:60:09:5c:21:05:5d:b2:69:3b:7e:77:5f:51:
63:46:8a:84:f6:6a:46:68:56:5e:97:8d:ba:46:c4:
08:91:d8:7c:ec:8a:08:bd:d6:12:2b:be:46:90:9d:
38:2a:14:14:49:0b:e7:8d:6d:22:1c:76:1c:94:40:
16:c7:30:06:31:7c:8f:86:45:99:d8:ba:0a:54:a5:
ab:ab:cc:e3:8c:5b:95:46:a4:91:69:08:50:60:1a:
d1:41:ef:c4:74:71:fb:a7:99:85:d6:5d:f7:9c:e0:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:70:FA:AC:EB:B8:F6:04:12:64:71:F0:36:20:48:91:F7:7B:D7:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M3D6rOu49gQSZHHwNiBIkfd712o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:36:75:4e:34:b1:4f:ce:2b:96:b4:7c:84:66:3e:a6:0b:9d:
e4:ba:0e:b9:94:f5:7a:58:4b:14:65:b5:d4:df:5d:e9:37:f3:
6d:d5:13:14:1c:a6:96:23:06:b7:1f:fa:4a:fb:94:b7:5b:3f:
8b:8d:26:0f:b6:60:58:17:17:66:77:b9:b0:2b:03:30:54:85:
e4:62:5e:2f:49:a6:84:dc:69:17:a3:b7:b5:90:19:3d:c0:af:
9d:c7:e1:39:b3:27:45:fe:e8:9c:46:fd:a3:98:69:70:44:a2:
7f:dc:bc:40:5d:23:a6:30:d7:e3:0c:e4:f5:89:70:8f:d1:2e:
d8:0d:3d:13:02:74:be:8e:5e:44:a9:50:b3:7a:53:ad:a1:f0:
58:e0:23:5b:7d:30:f7:ea:79:20:fb:bf:5e:9f:2b:ac:da:c6:
dd:c9:b9:87:e1:75:f7:d2:cb:76:d5:2d:a3:7e:a3:0b:a6:c1:
11:44:ca:5c:0b:c3:7c:ad:5a:67:58:32:ea:57:a7:38:ca:04:
86:28:b1:fe:b7:4e:c6:33:04:c5:77:a3:f3:59:18:ec:d1:eb:
fb:7f:32:c0:a9:56:bc:44:21:11:65:f4:78:17:e5:c2:af:84:
8f:f1:88:88:c8:38:e4:ed:b7:c5:cd:34:90:47:18:ce:b0:f5:
03:46:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org