Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AppKNRj1_dZZCvPfFbUdqwXOUs.roa
File: _AppKNRj1_dZZCvPfFbUdqwXOUs.roa (raw, json)
Hash identifier: 4YjXmIwUe1/76jlPRMVEatiMr9bJYoZhAy24cwFMfk8=
Subject key identifier: FC:0A:69:28:D4:63:D7:F7:59:64:2B:CF:7C:56:D4:76:AC:17:39:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189B8B72CFDB4DBE2B1F40D9D79A2A0FDF9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AppKNRj1_dZZCvPfFbUdqwXOUs.roa
Signing time: Thu 03 Aug 2023 00:05:59 +0000
ROA not before: Thu 03 Aug 2023 00:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:b7:2c:fd:b4:db:e2:b1:f4:0d:9d:79:a2:a0:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 00:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0a6928d463d7f759642bcf7c56d476ac17394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:c9:60:24:3b:d1:cb:84:c0:66:69:2e:f1:
32:63:9d:e9:47:44:fe:a5:39:9f:a2:67:94:c5:ee:
2d:fc:75:f5:9b:20:fb:db:85:b2:e6:db:bf:cf:2c:
ee:ce:79:1a:f7:b9:89:c4:6e:65:9e:bd:70:6b:a8:
c2:79:45:2e:9a:25:d5:a0:1c:0c:d2:6b:cb:ff:9d:
67:73:76:95:0c:2c:71:6b:51:71:97:70:05:3b:04:
b7:55:aa:db:5e:0b:19:98:c7:be:2f:54:46:eb:c1:
13:73:d7:62:90:bc:96:74:7a:0d:0b:76:c2:bf:68:
70:10:36:78:6e:54:90:f7:69:4c:22:0e:6b:ca:2c:
27:ab:a8:9c:1e:53:4a:56:41:17:21:b4:57:75:e9:
7e:e3:37:f8:c7:86:4e:1c:ee:e6:14:31:e8:8c:f9:
4f:50:ee:1c:16:74:bd:28:34:28:61:c9:26:1a:79:
64:74:af:b0:89:06:db:82:dd:21:34:41:67:21:a2:
1b:c6:94:93:fe:93:5d:63:3b:9f:36:a4:c7:27:4a:
85:23:bf:3b:fd:a9:3d:b8:9f:b6:0b:3e:8a:65:0d:
7a:61:5f:20:80:0f:62:08:84:b1:dc:dc:f9:c0:f9:
62:6b:66:88:05:7f:68:b4:bc:de:09:a5:a3:52:5e:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:69:28:D4:63:D7:F7:59:64:2B:CF:7C:56:D4:76:AC:17:39:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AppKNRj1_dZZCvPfFbUdqwXOUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
57:39:dd:bf:a2:a4:1f:f3:60:49:be:80:8f:68:c0:56:8d:99:
af:4b:54:a5:da:61:60:1b:79:a2:e8:5d:a8:01:1f:d8:fe:25:
fd:0c:92:ec:66:e4:b9:c8:a0:54:a2:de:81:0b:b5:30:00:bd:
43:2a:61:63:10:35:e0:ef:7c:9b:fa:71:11:53:d2:21:0f:c2:
64:ad:07:67:73:ec:28:fb:ab:30:0e:06:3f:c7:b0:23:d8:f0:
fb:5d:d8:32:1b:c7:70:df:b9:32:3c:d8:2f:03:34:b3:68:28:
2e:60:98:18:27:49:b8:21:06:9c:5d:aa:be:c3:cf:ef:6d:18:
dc:59:b9:55:2b:0b:fc:77:dc:55:78:ff:21:fa:d8:65:37:9f:
2b:18:63:43:8e:9a:a9:30:00:21:9c:1a:9c:61:2f:76:3c:a4:
a9:95:ea:35:d4:cf:0f:b5:8d:d0:df:37:e0:54:1e:d0:6e:07:
e0:21:e2:15:89:e7:9e:de:41:11:cf:cc:27:13:6b:0a:9d:fd:
ec:09:87:ae:85:3b:3e:8b:74:14:92:f8:af:4b:34:6e:2f:b7:
82:5a:ea:fb:ef:77:3b:bc:c4:87:58:16:6e:e3:ba:fa:cc:de:
ac:ed:a3:2a:89:7d:a8:a9:f2:99:f7:18:f5:dc:c4:29:c9:c7:
a2:03:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 06:56:11 2023 by rpki-client on console-ams.rpki-client.org