Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/AHG8Ror_P5MxXFYDC8AXMRxZMJQ.roa
File: AHG8Ror_P5MxXFYDC8AXMRxZMJQ.roa (raw, json)
Hash identifier: xqui/9SoZPi1Fzu35NC2PzXhPM1t+auCGshtoNGbxfg=
Subject key identifier: 00:71:BC:46:8A:FF:3F:93:31:5C:56:03:0B:C0:17:31:1C:59:30:94
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01857169ABE9A6E183F5B5379FE71A568D11
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/AHG8Ror_P5MxXFYDC8AXMRxZMJQ.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201112
IP address blocks: 194.110.4.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ab:e9:a6:e1:83:f5:b5:37:9f:e7:1a:56:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0071bc468aff3f93315c56030bc017311c593094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:d9:20:83:ce:4c:bc:9e:c4:0d:0f:5c:d0:
62:7c:a8:3c:a3:84:ab:30:35:19:12:1c:5d:ed:38:
1c:76:8f:e8:b0:ec:bc:97:9c:89:93:76:b6:a9:f9:
89:6d:dd:ea:f1:43:2c:81:fe:f0:c4:14:b3:f0:86:
c6:3d:d0:1e:06:10:54:39:0f:55:4f:9a:ef:81:e4:
fb:db:4a:01:03:6b:5f:17:c5:53:76:70:99:5e:46:
8c:4f:93:ec:b5:27:e0:94:5f:3b:7a:a6:44:14:25:
b2:54:d9:4f:ce:15:bd:c8:d4:a9:2e:e4:9a:32:f2:
74:2b:63:fc:e4:80:ee:b6:4f:3a:5e:a5:3b:77:de:
e5:c4:5e:66:5e:e3:ab:b8:df:37:82:0c:0a:2d:5d:
1f:28:4f:bd:14:e2:e0:68:5d:71:ad:c6:d6:d4:21:
a3:9a:fc:4a:d7:30:06:f4:ca:27:48:73:32:5c:7f:
35:96:0e:10:3a:c1:6d:ef:45:22:31:dd:f2:99:77:
0f:f6:f4:b5:56:b1:52:3c:b0:fa:a7:45:0e:41:e5:
56:e1:b5:5d:e1:18:23:95:67:15:bb:ed:e5:3a:98:
f5:05:5e:b5:3b:52:c9:89:98:7f:63:69:3e:44:75:
6b:82:1c:12:c7:5d:bb:6c:50:68:fd:3c:4a:09:6f:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:BC:46:8A:FF:3F:93:31:5C:56:03:0B:C0:17:31:1C:59:30:94
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/AHG8Ror_P5MxXFYDC8AXMRxZMJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:20:a6:ca:b9:77:b4:f4:b3:eb:b1:df:be:bb:52:2b:93:2b:
21:d9:b7:47:88:2b:3e:6f:d1:01:ab:53:25:a5:cc:a7:b5:76:
12:c4:37:ba:04:b6:05:6e:1c:3f:55:85:19:ce:6b:2b:88:9a:
e0:cb:2c:a8:21:80:f8:a4:cb:6b:56:15:ec:30:db:87:ff:85:
ee:71:c9:82:f5:9e:c2:d6:3d:e6:13:f3:bf:46:ef:a1:a5:bb:
ba:1d:65:ba:a2:fe:8b:35:15:d9:1e:b4:11:9a:d7:9c:5f:68:
c2:16:06:f4:83:89:a0:33:3e:b4:9b:02:9f:fb:48:e2:f1:57:
93:e2:6a:50:13:1a:70:3d:cd:31:c3:fd:16:c6:ce:1c:f1:00:
c6:a3:74:8e:62:f1:27:58:76:9b:dd:c3:c2:31:e7:c6:d4:e4:
6e:4d:5b:ee:a6:92:8f:93:2c:62:c9:43:b2:a0:4b:4a:b1:a4:
d0:68:63:f9:f5:a1:ac:35:02:c5:06:bd:8b:56:9d:aa:87:61:
43:1a:df:71:70:8e:b2:06:94:27:aa:44:58:f8:ee:15:f5:19:
f8:76:bd:52:07:24:a6:39:ba:84:4c:07:12:8e:1c:87:46:8d:
b0:aa:1f:f1:34:5a:fd:df:13:20:29:68:eb:2c:3a:fa:00:35:
03:a3:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:27 2024 by rpki-client on console-ams.rpki-client.org