Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h6qYfcVHltrxU-xP4i1KGsH3qio.roa
File: h6qYfcVHltrxU-xP4i1KGsH3qio.roa (raw, json)
Hash identifier: NjmGcJmmn2afH0KaS8GNTbidLLD7Ja16RI+wxJoUxm4=
Subject key identifier: 87:AA:98:7D:C5:47:96:DA:F1:53:EC:4F:E2:2D:4A:1A:C1:F7:AA:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188058964C876DD1864EA01E852FD93B7D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h6qYfcVHltrxU-xP4i1KGsH3qio.roa
Signing time: Wed 10 May 2023 12:01:10 +0000
ROA not before: Wed 10 May 2023 12:01:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 94.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:89:64:c8:76:dd:18:64:ea:01:e8:52:fd:93:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 12:01:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87aa987dc54796daf153ec4fe22d4a1ac1f7aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:fd:10:a4:5d:4d:2c:e0:bf:fc:fd:3a:c2:
b6:7e:ec:4f:2a:19:8c:07:e6:63:b9:8e:dd:59:c5:
5e:0b:af:e2:91:98:b3:e5:e1:92:20:e2:48:a8:d6:
fc:ad:4b:68:8a:0a:e3:e6:18:b1:52:fe:18:54:94:
35:af:74:55:b2:ea:ad:93:0a:ac:3e:f6:e8:f1:0c:
6b:98:44:ff:02:76:98:20:13:50:d1:4f:ba:4a:09:
e2:0e:a9:61:c8:bb:c1:46:10:03:e9:d1:7e:80:00:
cd:39:80:46:be:a6:ce:04:b3:92:b7:5e:62:63:85:
ad:3e:51:99:58:a0:aa:18:f6:12:0a:10:34:67:4b:
e6:cc:0a:a9:5f:33:6c:85:e7:0c:69:ca:ec:ec:fe:
38:ec:4e:bf:fa:38:57:a1:47:6f:02:d2:d6:59:8f:
6b:a0:b2:b3:65:27:85:e0:55:cf:c0:87:06:de:e5:
be:32:f5:1c:50:0b:bb:9e:87:68:f9:e4:bc:38:af:
21:46:1c:89:23:a3:7f:a4:fd:3a:81:51:b8:9a:6d:
c2:60:c9:c3:15:56:24:c9:09:bf:85:ce:c3:d2:41:
91:a7:9f:39:5c:31:5c:cc:3d:f5:f6:27:e0:bb:5c:
a1:d5:62:17:1c:e6:64:27:5f:2f:e1:7c:49:cc:f1:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:98:7D:C5:47:96:DA:F1:53:EC:4F:E2:2D:4A:1A:C1:F7:AA:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h6qYfcVHltrxU-xP4i1KGsH3qio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:6c:7f:19:0d:18:a0:19:a0:1a:b2:1a:04:77:24:d8:06:
11:83:e1:08:99:34:0b:4a:f3:65:4c:fc:be:74:78:e7:c7:ce:
83:4a:e9:df:91:11:f6:03:d3:21:13:2d:b4:ad:81:dd:48:40:
87:8b:5a:38:42:69:e6:44:40:2f:77:6c:a5:d5:36:49:f9:5c:
d2:3e:4b:be:a8:1e:a2:46:98:ac:a5:b4:02:47:20:ff:41:1f:
0f:e0:46:51:f0:23:c1:e5:f3:a3:d4:9d:b8:6e:c7:53:54:03:
c3:a4:28:99:bc:5c:5c:97:de:9b:bb:26:aa:6f:2d:ba:5d:82:
36:9c:0a:6b:98:42:5e:36:32:24:5e:be:10:50:76:98:e5:cc:
aa:ee:3d:ea:9c:5e:2e:97:af:98:74:c3:d7:aa:64:1c:84:e6:
07:23:e4:4a:b2:b0:8e:7d:e4:61:77:dc:e7:0e:e5:3a:43:46:
28:a7:d2:54:fc:a5:c1:5c:83:85:92:7e:41:66:6e:ca:9b:1e:
d7:3b:26:6c:36:db:41:c1:19:b1:41:9b:b3:a5:b4:c2:b7:06:
0c:74:59:43:82:da:5b:2a:e6:ba:be:ee:6a:13:52:ba:06:05:
55:81:c9:96:fe:1d:ca:6f:79:bd:e4:19:d0:c4:36:8d:c1:66:
33:af:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-fra.rpki-client.org