Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PyQzB7FrlftUY9HsiyajTnR-n3o.roa
File: PyQzB7FrlftUY9HsiyajTnR-n3o.roa (raw, json)
Hash identifier: wlc0lEm1FhT8zmVS6rx7qecCGm5KUmKLFmg1SCLM+ZA=
Subject key identifier: 3F:24:33:07:B1:6B:95:FB:54:63:D1:EC:8B:26:A3:4E:74:7E:9F:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01892117BC29E282AC66A18DB008CAE85E60
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PyQzB7FrlftUY9HsiyajTnR-n3o.roa
Signing time: Tue 04 Jul 2023 13:29:10 +0000
ROA not before: Tue 04 Jul 2023 13:29:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211905
IP address blocks: 194.180.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:17:bc:29:e2:82:ac:66:a1:8d:b0:08:ca:e8:5e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 13:29:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f243307b16b95fb5463d1ec8b26a34e747e9f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:4b:98:06:a9:e5:d2:c1:be:7d:26:34:bc:
fe:7f:da:fe:f1:07:86:bf:f3:2e:ed:dd:11:d5:f0:
07:8f:26:f9:bf:24:60:44:76:6f:85:75:73:19:7d:
7f:52:b6:a8:ab:40:a8:03:08:42:23:4c:41:65:05:
f0:17:26:01:0c:21:2e:1c:34:aa:1d:60:8b:e4:2e:
fc:30:75:b1:87:9d:66:e9:ef:a0:bc:df:0d:db:e2:
b9:c8:41:b6:cd:89:c3:fa:61:5a:ba:d7:3a:19:a6:
1b:4a:9b:3a:70:45:a4:1e:32:c0:31:32:57:d6:90:
19:73:63:76:14:b0:35:a8:be:ff:1d:7a:d2:bc:1a:
9d:ed:71:e2:76:8b:94:c0:a6:b2:18:7b:fa:c4:39:
a9:c1:c9:d3:23:b4:ae:59:fb:c8:e2:6d:6c:c1:ab:
b3:27:ba:f3:fb:87:67:ca:4f:dc:83:35:26:73:63:
b7:76:ad:34:0f:f4:7e:db:f2:40:3f:e6:69:d7:f3:
a9:3c:88:22:ce:1d:31:4d:14:5f:9f:2a:a3:db:f7:
6c:b0:aa:50:64:3b:cb:81:d3:25:64:11:74:fb:f2:
20:9d:df:94:0c:67:dd:6e:db:a1:11:53:52:c1:7a:
c3:f2:3f:0c:d0:71:0c:dc:56:b1:d6:44:05:8c:79:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:33:07:B1:6B:95:FB:54:63:D1:EC:8B:26:A3:4E:74:7E:9F:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PyQzB7FrlftUY9HsiyajTnR-n3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b1:2f:15:04:ce:7a:c1:bd:8c:db:b9:e5:e7:13:47:bf:6a:
7b:40:d2:22:6d:22:e2:7b:3f:fd:7e:e8:f1:3e:c1:3e:d9:29:
15:67:c0:5b:08:4a:4b:22:5c:b8:0a:c0:de:7a:35:c1:b4:3a:
07:53:fb:74:63:55:ab:a3:21:8c:e3:20:64:ee:fc:01:c0:aa:
7c:f9:dd:59:ba:24:e7:86:d1:b3:0b:5b:cb:e2:da:79:47:64:
4d:57:43:66:8c:bc:26:f7:f5:72:b2:5b:34:bb:2d:29:27:53:
b4:7a:db:da:1b:c7:f0:59:b1:76:26:43:95:9d:67:60:27:b1:
7a:64:f2:d9:77:b2:34:36:0b:80:90:5e:9d:8c:0f:a5:e4:c0:
b0:9b:c0:1d:c1:9c:4f:83:1c:98:ce:5f:ec:ca:fc:3d:4c:6e:
d4:f8:da:64:f7:1a:6c:2a:45:2b:f8:a4:ff:7a:93:63:56:4d:
2f:24:88:ab:f5:19:d4:a1:e3:cb:a3:84:f5:4e:75:74:39:98:
dd:20:ae:fc:d3:c2:a3:7d:e6:61:be:27:70:18:53:f1:bd:50:
59:77:f9:df:0f:c0:d8:1a:85:fb:68:60:7a:51:80:3b:55:34:
c8:51:19:d8:17:99:8a:42:48:05:73:16:32:52:95:2d:5d:b2:
ec:03:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:01:27 2023 by rpki-client on console-fra.rpki-client.org