Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uR_AjyY2xq4BKFpsKzhkl2JCLH0.roa
File: uR_AjyY2xq4BKFpsKzhkl2JCLH0.roa (raw, json)
Hash identifier: ZarUsxvrT9fQmVs3DGz3XgrzZy7g+33YcjyWEa6i/JU=
Subject key identifier: B9:1F:C0:8F:26:36:C6:AE:01:28:5A:6C:2B:38:64:97:62:42:2C:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189F29B6B6F72BE88106A9CCF0DA6473474
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uR_AjyY2xq4BKFpsKzhkl2JCLH0.roa
Signing time: Mon 14 Aug 2023 05:53:39 +0000
ROA not before: Mon 14 Aug 2023 05:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:9b:6b:6f:72:be:88:10:6a:9c:cf:0d:a6:47:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 14 05:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91fc08f2636c6ae01285a6c2b38649762422c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:a1:84:d4:ee:f0:59:d6:20:08:e6:81:86:
de:c1:df:61:29:38:63:23:0c:e0:49:96:a3:70:5d:
ea:2a:e3:92:e4:22:f8:3b:6d:56:3d:03:d4:d5:89:
65:48:b2:cc:79:40:1c:c5:33:e6:17:5c:ab:da:54:
af:dc:cd:fa:40:f7:c9:a1:90:d5:a4:52:d6:4e:24:
37:d4:d5:bc:2b:39:22:93:cd:f8:6a:97:4e:2d:a3:
2e:c5:7c:3d:15:4c:bc:3c:20:55:10:3d:58:2a:8c:
93:ca:38:01:74:27:e3:ab:08:2a:da:e5:a6:8b:d7:
44:2f:c7:f9:49:fc:db:10:26:db:f1:0b:6f:94:60:
3d:f0:61:63:32:c5:b5:a2:d5:71:89:e2:40:e6:82:
4b:f7:8c:04:11:74:6c:10:cc:e5:2c:b8:8f:73:9a:
10:03:c8:9a:4f:b3:94:0f:86:ff:fb:05:c7:6e:9b:
34:e2:14:b6:7f:74:dd:00:4d:d5:51:4d:9f:a8:94:
3e:6a:dd:9a:ad:d9:78:c4:93:27:1f:8b:a1:95:21:
ad:c1:64:4a:e4:41:94:b5:87:d7:52:50:e7:56:f9:
cc:df:d3:d9:f0:4e:90:86:5b:23:0f:d8:7d:94:41:
11:2e:66:2c:9f:6f:7f:75:68:df:e6:11:21:e6:41:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:C0:8F:26:36:C6:AE:01:28:5A:6C:2B:38:64:97:62:42:2C:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uR_AjyY2xq4BKFpsKzhkl2JCLH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:14:f8:2d:3c:e5:54:b9:29:ae:76:9f:11:15:91:40:80:05:
5b:0a:1a:a4:79:b6:b8:8d:5c:5e:d4:f0:0a:17:36:58:39:a6:
0a:b1:3a:db:1c:99:2d:a8:e0:44:79:ac:f3:13:1c:69:79:2b:
28:7e:3a:83:76:70:58:f4:a1:32:62:e2:57:9d:a6:cb:a8:24:
4f:9c:56:c6:1a:d0:6d:3e:c8:59:16:be:8d:d9:68:28:1a:84:
e1:83:9b:3c:f0:34:50:65:06:16:d5:dc:f6:83:8d:8f:0a:9b:
91:a4:24:2f:df:eb:99:a0:b2:ee:6e:72:b0:cd:85:c5:1c:21:
89:5a:a0:69:4e:37:cf:33:15:80:a0:61:d5:f2:e1:93:40:4f:
07:01:8f:bf:42:ee:5c:06:08:91:31:c6:a6:aa:6b:84:35:48:
d9:78:77:88:68:24:95:14:22:f3:d0:67:20:21:35:85:fe:f0:
ca:9a:00:f8:19:fc:71:19:26:ee:f9:39:f9:9e:43:80:99:58:
e0:07:f6:54:e6:87:32:bd:1e:9e:16:9d:98:e0:27:92:2f:a0:
7c:0b:1b:a4:6e:10:66:bb:d0:64:4b:82:81:dd:ae:88:0c:7e:
6b:2d:8c:91:c6:86:e8:cb:9b:f3:2d:aa:f7:1a:df:86:4e:ef:
e3:35:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 09:22:46 2023 by rpki-client on console-ams.rpki-client.org