Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/xzXrrFw24_08qz7AsA8Lixs5bls.roa
File: xzXrrFw24_08qz7AsA8Lixs5bls.roa (raw, json)
Hash identifier: EwfEI7ClSuvaR3/I+p4JPqbkIWWsave+8+hMvDGZ88k=
Subject key identifier: C7:35:EB:AC:5C:36:E3:FD:3C:AB:3E:C0:B0:0F:0B:8B:1B:39:6E:5B
Certificate issuer: /CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Certificate serial: 01856ECB7ED2ECD824D64CA56E4939F9BE1C
Authority key identifier: AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/xzXrrFw24_08qz7AsA8Lixs5bls.roa
Signing time: Sun 01 Jan 2023 19:25:07 +0000
ROA not before: Sun 01 Jan 2023 19:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 194.49.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7e:d2:ec:d8:24:d6:4c:a5:6e:49:39:f9:be:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Validity
Not Before: Jan 1 19:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c735ebac5c36e3fd3cab3ec0b00f0b8b1b396e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:62:7f:5d:04:ab:ed:ff:f0:0f:4e:9a:aa:
58:b3:f6:69:d9:47:14:0d:15:91:c2:d1:23:8a:0a:
03:3b:74:58:e6:99:cf:77:2d:9a:7d:e8:3f:ab:a8:
a3:2d:28:4c:d5:fb:7f:68:55:bc:26:38:ee:92:d6:
ea:09:40:31:25:96:66:80:4a:04:cc:e0:d0:4d:e5:
7b:66:99:2a:93:80:d4:9a:36:10:10:b8:4e:33:f7:
de:1f:d7:26:da:39:af:e1:d0:96:b0:62:58:f7:db:
b9:d2:37:5c:56:55:8f:86:78:c7:48:78:9a:1f:bd:
94:8f:c3:3c:f3:55:d0:d5:03:46:41:57:32:88:55:
c4:74:04:8e:45:99:1a:1c:8f:df:65:e2:06:41:0e:
e0:20:b3:0e:d2:b2:e3:2a:5f:93:b8:b2:e3:94:d5:
83:2c:b1:69:12:91:97:6a:91:86:5a:8a:9a:12:6e:
92:69:93:05:6a:28:02:38:88:6f:f7:c9:21:0c:91:
ec:71:a8:02:82:21:90:7b:6b:ce:0c:c5:f6:fc:54:
9e:64:76:f3:4a:26:14:7a:43:7d:dc:53:45:1b:ae:
ef:0f:08:66:c5:81:42:14:a7:86:be:fa:2c:fa:68:
63:7e:b1:06:7f:1e:bc:c5:ec:a9:7b:54:c0:ad:f1:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:EB:AC:5C:36:E3:FD:3C:AB:3E:C0:B0:0F:0B:8B:1B:39:6E:5B
X509v3 Authority Key Identifier:
keyid:AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/xzXrrFw24_08qz7AsA8Lixs5bls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.68.0/24
Signature Algorithm: sha256WithRSAEncryption
72:56:7c:a6:a5:04:d4:fa:17:0e:e5:49:e5:6e:7a:70:be:96:
86:58:56:e1:70:85:57:91:b2:87:43:7e:26:39:e9:a2:6a:00:
d2:3a:a1:6a:39:f5:b9:07:f2:4d:8f:e3:48:80:18:37:88:b6:
b6:dd:ca:de:8c:9e:56:c5:86:99:bb:88:7d:75:d6:2c:08:04:
0f:77:24:aa:c3:1d:39:df:ea:08:6e:95:fb:0b:2c:4d:75:7d:
c4:44:55:cb:a9:a5:6d:70:4a:fb:dc:48:cf:be:f7:e5:75:97:
10:6e:0a:4a:28:7d:55:f9:24:40:0a:bb:48:a8:99:a7:ec:63:
52:27:b1:8c:ca:a2:30:19:b0:5a:ed:94:c4:76:b6:62:74:43:
26:f9:6f:b6:78:e9:46:59:d8:01:15:17:2e:c4:26:0f:f6:a9:
90:02:29:e9:bb:1e:7e:e0:45:57:b5:36:c7:b8:59:ea:9f:bc:
77:f8:39:96:0e:fb:8f:c5:b8:6a:33:c7:3b:5d:cc:16:d9:07:
39:41:02:46:7e:1e:74:d9:af:fc:1e:0b:18:1a:de:10:60:4c:
45:10:45:fa:9b:48:b4:8d:ca:83:aa:7b:1e:1c:d0:c5:4c:75:
e5:15:74:87:31:14:ea:17:30:66:76:80:a4:02:ef:98:a5:5e:
00:90:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:20 2024 by rpki-client on console-ams.rpki-client.org