Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dike2wsA_zfgdB3bve0WXiGuhXA.roa
File: dike2wsA_zfgdB3bve0WXiGuhXA.roa (raw, json)
Hash identifier: 5wjETx3/O2LkK9Cmtz19cSE2JpaS9wLVQGmlbJvUwtY=
Subject key identifier: 76:29:1E:DB:0B:00:FF:37:E0:74:1D:DB:BD:ED:16:5E:21:AE:85:70
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0186C048C83568C26560B8A5EC9350FC97D3
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dike2wsA_zfgdB3bve0WXiGuhXA.roa
Signing time: Wed 08 Mar 2023 08:14:00 +0000
ROA not before: Wed 08 Mar 2023 08:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.50.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:48:c8:35:68:c2:65:60:b8:a5:ec:93:50:fc:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 8 08:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76291edb0b00ff37e0741ddbbded165e21ae8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:dd:82:54:05:55:a3:52:07:9d:3f:95:23:
a0:be:96:12:3b:4a:12:2f:42:24:3b:62:ec:98:1a:
05:56:06:7a:35:9d:12:5d:8b:98:15:73:1a:e7:cc:
ee:3e:c2:53:8a:3d:9b:2e:ee:02:ff:c1:48:17:89:
9b:5d:7e:34:9e:ad:3f:01:f7:56:4a:fa:56:e6:61:
fa:22:cd:b4:cf:c4:5f:dc:c2:3a:00:14:97:d8:a8:
3c:dc:2a:2d:a9:f7:43:29:b9:ea:89:02:e4:bf:a2:
1d:ac:ce:34:06:d0:d7:18:53:1a:35:87:5b:10:73:
6b:3d:b2:24:9e:35:b7:59:de:26:14:a1:32:78:d6:
23:1e:9c:d1:f1:75:f3:52:dd:3b:8c:78:31:fb:9e:
50:fe:0b:a0:b7:66:a6:e5:72:bb:c1:2f:7d:ec:61:
2e:c1:fa:c7:64:d7:52:44:32:d8:84:96:b7:58:29:
e8:6d:cf:bb:aa:bb:8c:12:b9:67:c9:89:3f:87:13:
d1:c7:a6:c5:bf:b9:e9:12:9c:9e:5c:71:95:ea:b6:
05:0c:fc:6e:da:5b:41:e4:34:23:96:34:a6:79:da:
41:03:87:1e:c8:27:c2:62:bd:9e:32:96:39:1a:cb:
61:e4:88:96:f6:8b:c5:ad:34:4a:f0:1c:f7:87:fa:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:1E:DB:0B:00:FF:37:E0:74:1D:DB:BD:ED:16:5E:21:AE:85:70
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dike2wsA_zfgdB3bve0WXiGuhXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fc:ff:38:94:49:30:a9:58:02:29:e7:c5:e4:7a:68:24:9a:
33:cc:60:59:45:5e:9a:4c:f7:f9:5b:3a:b1:98:a0:83:d5:23:
2f:0a:85:51:7c:97:7c:9c:ec:02:d2:f8:a2:52:42:04:3c:af:
ae:71:1f:db:f5:cf:ad:7f:e3:ec:ae:8d:7d:2b:35:a5:d5:1b:
60:4e:76:4e:a3:ac:e5:27:35:6f:4e:4c:51:ad:76:7f:e4:5a:
d4:84:64:1b:b0:36:2a:3a:b4:15:88:5d:fe:2f:01:31:ee:14:
ee:e8:56:7e:9d:8d:62:fb:e8:d2:aa:5e:c2:cd:ca:0a:6e:c5:
be:22:fb:5f:cc:57:0f:24:5e:92:65:f5:7c:99:95:45:19:62:
1b:b9:9c:7a:22:0c:ae:9b:12:5b:88:e9:4c:54:67:78:b1:05:
12:96:aa:c1:1f:96:2a:30:81:df:94:63:c1:69:c1:76:6b:48:
3b:35:2f:9d:87:d6:22:35:10:10:53:8c:a5:79:de:aa:ba:63:
ab:72:58:63:0c:8b:48:54:82:7c:f9:dc:47:bf:77:bc:6b:fc:
28:65:8b:65:6b:40:ba:64:d7:8d:31:bf:f7:b7:6d:0c:c9:e5:
53:eb:72:89:44:3b:c6:12:16:26:ec:6e:02:c5:73:33:4c:aa:
9c:f7:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 17:32:24 2023 by rpki-client on console-ams.rpki-client.org