Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahQowImxBiTiEvKm38Lfx-w7Qk0.roa
File: ahQowImxBiTiEvKm38Lfx-w7Qk0.roa (raw, json)
Hash identifier: Uzo1YHVZ1QFlrJUmW+RSeZ2scv5S/Qy6mKSi2HlRY0Y=
Subject key identifier: 6A:14:28:C0:89:B1:06:24:E2:12:F2:A6:DF:C2:DF:C7:EC:3B:42:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A40535D0FF85B6784A1E7B09B75CA361C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahQowImxBiTiEvKm38Lfx-w7Qk0.roa
Signing time: Tue 29 Aug 2023 08:05:19 +0000
ROA not before: Tue 29 Aug 2023 08:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 195.178.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:53:5d:0f:f8:5b:67:84:a1:e7:b0:9b:75:ca:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 08:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a1428c089b10624e212f2a6dfc2dfc7ec3b424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:67:c1:2c:70:ab:36:01:b3:25:a5:61:90:
c2:53:86:34:38:ba:89:b7:c6:f6:67:ef:ef:a8:4c:
84:09:0f:16:01:6f:98:9b:68:ce:35:49:7f:75:22:
00:b5:7a:ac:95:47:fd:55:4d:6e:73:ed:ca:0f:83:
35:f6:44:32:cb:3e:64:da:71:c5:cc:6a:86:e4:8b:
be:16:7e:2e:19:72:93:fd:7d:fb:6e:2f:63:46:38:
69:2f:13:2b:5b:3f:be:6c:86:0d:58:1e:18:f7:84:
6b:f3:5d:9e:07:72:58:c9:ba:c1:f6:6d:dc:ef:26:
38:18:1e:14:4e:28:6d:39:af:1f:ec:80:e8:12:c0:
f1:e8:38:db:37:13:31:54:cc:19:75:bf:b0:93:92:
f6:64:1c:1e:f9:01:54:e6:6c:f5:90:21:df:43:97:
f4:ff:bf:b1:15:9e:17:27:15:9d:4a:d7:a4:9a:29:
d6:9e:26:59:e7:04:c5:7b:99:27:8e:06:3e:4a:b8:
80:15:e9:d6:06:31:a5:07:6c:3b:57:b5:08:5a:3e:
8e:89:9d:6b:c8:68:97:30:24:d0:d8:52:ef:69:21:
e8:ad:e0:33:91:0e:7c:91:41:3b:52:04:1f:4b:04:
ad:91:a8:18:c2:f7:96:76:b4:99:12:47:aa:54:eb:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:28:C0:89:B1:06:24:E2:12:F2:A6:DF:C2:DF:C7:EC:3B:42:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahQowImxBiTiEvKm38Lfx-w7Qk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:57:fd:e4:11:68:4b:0c:d9:71:0e:cd:14:49:f1:4b:bd:
28:02:74:fe:38:16:73:9f:97:b6:00:ba:73:b5:4a:2e:58:46:
3f:fe:94:04:11:d1:8e:b0:54:c7:f1:87:f4:4d:61:13:15:55:
92:39:e0:22:39:30:45:08:43:8d:ff:9a:93:73:f4:75:79:2a:
0b:40:db:ce:72:e8:7f:60:9f:b5:8e:b0:28:03:9e:f8:97:c0:
7a:80:d0:29:d9:a5:b9:1d:28:46:c6:59:9a:7e:3d:c2:95:e1:
09:a2:0c:a9:5d:d9:9e:fd:17:b2:e6:7e:b3:6a:f2:18:ff:2d:
85:72:51:0b:0d:42:2a:ae:f6:45:22:5e:60:93:4f:89:6c:2d:
67:93:db:60:6b:18:b2:68:76:77:d4:27:9e:2e:84:3f:7c:96:
1f:c8:f1:96:15:d5:1b:62:37:44:dc:46:33:2d:25:56:b8:05:
72:70:93:e2:47:6b:ab:a8:0a:1b:77:11:43:5d:86:85:f7:6c:
bf:88:3c:cb:9e:58:32:98:00:77:f2:13:e8:39:81:dc:db:a3:
cd:7a:62:46:3d:e3:de:1c:20:f7:a4:46:c9:27:e6:ff:06:07:
cd:57:3d:22:c2:d2:9c:8a:2a:1a:4b:d1:4f:56:d0:ff:63:bd:
0d:3a:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org