Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V4E7Ww-a65fK8a2GmLSThZx991k.roa
File: V4E7Ww-a65fK8a2GmLSThZx991k.roa (raw, json)
Hash identifier: cK2mcp9DMLvCff+mUyz+AnayJaG9VfBNNtcVyI8P/AA=
Subject key identifier: 57:81:3B:5B:0F:9A:EB:97:CA:F1:AD:86:98:B4:93:85:9C:7D:F7:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D8C70F8A8DF0CF2813F241BE0A08
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V4E7Ww-a65fK8a2GmLSThZx991k.roa
Signing time: Sun 01 Jan 2023 13:25:04 +0000
ROA not before: Sun 01 Jan 2023 13:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d8:c7:0f:8a:8d:f0:cf:28:13:f2:41:be:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57813b5b0f9aeb97caf1ad8698b493859c7df759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:80:20:9a:3a:45:bc:15:0a:e9:6a:17:ea:
00:10:79:45:21:5f:ed:8e:89:75:f1:36:77:d8:b3:
51:ea:1e:21:06:f0:08:08:4f:55:91:eb:11:12:00:
c1:62:40:b4:96:02:51:76:25:8a:16:89:8c:92:ac:
f9:40:8f:3c:cd:75:e8:59:10:9a:1d:f6:7d:c1:eb:
d8:10:c9:57:75:55:62:49:00:7e:74:b4:4a:bb:38:
55:98:57:71:e5:22:c3:48:35:f8:c7:47:11:0c:61:
4f:60:7b:ff:ad:2a:06:97:ae:ce:7c:f5:13:73:6e:
13:4e:94:6c:60:ea:fe:08:be:63:a5:14:e1:b6:48:
b5:43:cf:f0:0b:b9:52:ec:d5:bb:af:ec:39:ed:e0:
aa:f4:73:7b:f2:c4:fb:bb:78:46:41:12:3e:db:d0:
72:22:85:99:77:a3:a8:ea:91:69:e5:27:be:1b:aa:
62:34:18:9c:fe:a6:e0:d9:2a:48:53:01:56:5f:e9:
1b:e0:3d:25:0b:ba:c2:4e:95:4e:57:0d:12:c9:f6:
80:b7:bb:0b:0b:2c:c3:8b:13:fd:f5:ff:45:5c:f7:
de:19:61:bd:68:b3:cd:01:71:27:ee:a1:1f:b5:b0:
fe:0e:87:bb:5a:08:0a:ed:e6:ee:32:b3:7f:e5:50:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:81:3B:5B:0F:9A:EB:97:CA:F1:AD:86:98:B4:93:85:9C:7D:F7:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V4E7Ww-a65fK8a2GmLSThZx991k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9c:2e:79:c4:56:01:01:36:49:2e:a9:43:40:90:da:e8:42:
6d:82:24:c5:a9:29:2e:e7:65:f6:8d:79:04:d3:dd:75:19:c4:
fe:3b:bf:0e:6b:f8:21:71:e7:0c:aa:4b:5b:6b:54:69:35:57:
6b:7b:5e:98:33:f9:af:fc:22:d1:d3:90:18:cb:f1:dc:92:1f:
36:fb:4f:ac:dd:e1:9e:2c:10:8d:a1:df:1b:41:b9:f7:ed:30:
76:d8:8e:6d:4e:cf:a9:e9:9d:d0:f8:92:6e:50:de:76:95:00:
93:85:13:6c:d0:ac:33:0d:2f:d3:07:94:53:5e:72:46:46:4d:
2b:f6:d8:a6:2b:2b:51:2e:4f:2f:c4:22:5b:55:73:d4:ff:9b:
54:41:2a:bd:31:e5:89:85:43:28:fb:9e:cf:78:3a:f2:8f:70:
bc:a3:91:10:0c:fb:cb:f3:5f:a8:ac:a7:43:5e:d9:9b:df:0e:
eb:e8:0a:26:e8:27:6e:e2:a9:03:5a:8e:7a:89:9d:a2:8b:d2:
a6:0d:0a:64:ba:08:8c:6f:c5:85:b9:33:e1:5f:22:38:75:5b:
33:54:d7:34:69:e6:8a:b5:64:b1:6f:be:61:32:14:b2:68:f1:
22:8b:4d:7f:c3:2c:c5:f1:c6:63:58:2c:83:5d:64:09:ea:b1:
77:48:70:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org