Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCE0kalZFqDkFQMEIvzLvwbBwTo.roa
File: RCE0kalZFqDkFQMEIvzLvwbBwTo.roa (raw, json)
Hash identifier: tgM0EUsIELRTruH0YMAeT7SQTHhcwUbnMjelLkRoHJU=
Subject key identifier: 44:21:34:91:A9:59:16:A0:E4:15:03:04:22:FC:CB:BF:06:C1:C1:3A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B4EC8E66F3E9A75D6BA87156E45D70F5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCE0kalZFqDkFQMEIvzLvwbBwTo.roa
Signing time: Tue 13 Jun 2023 13:23:01 +0000
ROA not before: Tue 13 Jun 2023 13:23:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:ec:8e:66:f3:e9:a7:5d:6b:a8:71:56:e4:5d:70:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 13:23:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44213491a95916a0e415030422fccbbf06c1c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:37:03:0c:19:8f:61:f3:8b:0a:da:c8:b8:
3e:2d:e1:b2:7d:02:1d:71:ae:a7:e8:e9:1a:98:c5:
d9:99:ae:87:4c:50:cc:6a:4f:43:ff:c1:9e:86:51:
c8:44:37:e3:4a:6a:77:13:50:ea:1d:58:3e:3e:91:
31:89:53:65:b3:20:de:54:ed:f6:55:9b:4e:ec:27:
5a:10:59:7f:f5:08:ee:d3:f4:82:e8:0f:8c:6b:ec:
a1:bf:d0:7e:b6:2e:4d:58:46:56:58:df:fa:57:ba:
ea:0a:00:f9:66:9d:9b:b1:0e:67:9c:31:69:f0:61:
0d:01:0e:3c:13:1b:ff:ed:17:bd:54:57:d0:9d:d2:
60:2f:f5:9e:f5:c0:0c:97:41:27:c0:d9:01:38:09:
77:83:f5:f1:70:ef:2d:a2:1c:fc:be:23:8c:85:98:
50:7b:67:b6:57:1f:f0:d4:c8:ec:57:fa:2c:72:3f:
db:b7:b6:af:10:4d:3b:af:0f:88:ee:91:31:cb:9e:
e3:13:f2:3c:cd:b3:55:bf:1c:06:b3:22:57:c9:38:
fb:72:1e:c5:03:a3:30:1f:12:49:ed:3e:64:1b:a9:
f6:3b:7e:ae:63:0c:93:48:e8:d8:91:b2:9d:03:fa:
a7:5d:8e:41:55:bd:82:af:36:ac:e6:a7:b8:dd:ca:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:21:34:91:A9:59:16:A0:E4:15:03:04:22:FC:CB:BF:06:C1:C1:3A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RCE0kalZFqDkFQMEIvzLvwbBwTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
18:aa:cc:f0:20:be:09:46:d5:b4:e7:68:59:f6:80:41:88:b6:
d9:74:e6:5a:a6:31:38:d4:4f:bf:69:45:cd:9c:f3:02:e5:61:
ef:77:82:f6:bc:60:59:6a:6f:7f:30:0e:0c:4a:34:e1:b1:f4:
00:87:3d:88:eb:46:1c:b5:e2:6a:fa:46:3e:da:b7:5b:76:7d:
15:89:cb:fc:76:7a:ba:eb:6b:0d:c4:92:61:5a:df:26:9f:5a:
81:74:50:b2:82:da:83:7e:51:75:3c:b8:a4:c1:5b:99:c9:69:
44:7c:16:0d:f0:99:ff:08:e7:a6:31:a3:a4:14:79:51:8b:5c:
ac:2b:0b:43:d1:92:6f:1b:03:5e:9e:73:58:24:78:ae:ec:dc:
a6:63:49:23:c9:39:6b:34:1c:41:bf:38:56:c7:b8:52:66:02:
3f:fa:e9:05:cb:bf:15:3a:01:a4:be:22:02:87:4b:01:ae:d6:
83:af:33:fb:9a:7b:de:1b:32:1c:43:05:2d:0a:fe:a9:53:a0:
97:2d:4b:7d:28:da:d6:02:ad:45:fa:9e:fb:ca:d2:83:f7:2c:
75:13:4d:c2:5f:4b:1f:42:39:13:a8:84:ed:f1:a1:48:86:0b:
8e:82:2d:ef:f2:bc:44:cc:fd:40:91:91:0e:7b:4e:c3:e7:1c:
9a:c5:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 09:06:08 2023 by rpki-client on console-ams.rpki-client.org