Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/A-934mPbqfi_aFI4qkdOX49AdzA.roa
File: A-934mPbqfi_aFI4qkdOX49AdzA.roa (raw, json)
Hash identifier: HOv5EHuYxQnqUuSTJz7hsgTZzvN8EiRPpc+pw4j7+mU=
Subject key identifier: 03:EF:77:E2:63:DB:A9:F8:BF:68:52:38:AA:47:4E:5F:8F:40:77:30
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 01863655A28EF016B79829DA91C3704302DC
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/A-934mPbqfi_aFI4qkdOX49AdzA.roa
Signing time: Thu 09 Feb 2023 13:20:27 +0000
ROA not before: Thu 09 Feb 2023 13:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.126.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:55:a2:8e:f0:16:b7:98:29:da:91:c3:70:43:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Feb 9 13:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03ef77e263dba9f8bf685238aa474e5f8f407730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:77:b2:cc:fc:4d:32:88:3e:cb:db:37:fd:
49:eb:25:b7:ea:8e:6c:cd:1a:44:51:af:fb:2a:34:
b3:8a:14:7f:a2:10:89:e6:7a:15:68:14:46:63:cd:
da:a7:f5:4a:ea:c0:7e:9b:d1:f1:be:01:3e:fd:02:
de:56:1f:af:db:a2:e4:85:18:a2:77:35:fb:37:fe:
5d:d7:85:43:1b:2b:ca:d8:04:5b:22:1b:65:a9:4d:
26:23:f0:f1:6b:88:44:f8:05:30:23:fd:56:01:e2:
6b:88:a9:c9:41:3a:c7:e0:13:3b:86:c0:67:53:f0:
9d:51:f1:ee:db:e3:e2:5f:33:3b:5f:92:a6:64:27:
33:bb:aa:d9:1f:cb:13:14:a7:3d:ae:61:8c:9a:7e:
a2:41:16:53:36:55:32:5c:99:91:e9:98:a0:69:59:
62:dc:b8:01:53:3e:34:02:6b:22:e8:9d:48:86:b9:
45:61:3a:00:bd:96:0a:fc:cd:82:77:bf:41:08:7e:
16:f7:e2:e4:bc:74:06:9c:ad:6c:79:27:1b:8f:b7:
86:3e:08:c9:07:41:2a:97:bf:cd:51:28:cf:be:41:
04:2c:b7:f6:8b:51:63:61:25:3a:e9:45:5f:09:dd:
6e:23:20:26:e2:83:73:68:4a:21:c4:92:39:7a:30:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:77:E2:63:DB:A9:F8:BF:68:52:38:AA:47:4E:5F:8F:40:77:30
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/A-934mPbqfi_aFI4qkdOX49AdzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.242.0/24
Signature Algorithm: sha256WithRSAEncryption
22:01:39:1e:a5:8d:72:5c:fb:b6:97:de:4a:98:bc:08:bd:a1:
ee:f8:1e:05:ef:0f:f5:b1:c2:f0:b5:7a:a5:18:61:4d:e4:00:
2e:bb:19:18:b5:17:8a:0d:c0:a8:62:fd:4c:e3:a6:f4:08:ad:
37:30:b0:61:17:25:f3:77:91:4f:25:ad:22:fa:60:92:88:52:
0e:96:f1:c6:10:b9:83:9c:56:6b:0c:09:c2:20:fb:50:ce:00:
83:e4:d2:d8:49:5a:18:52:6a:51:35:36:74:76:9b:ec:5c:3e:
49:6d:eb:f4:73:58:69:f9:99:b9:d3:d4:6a:2e:0f:e0:ff:df:
1f:1e:9f:52:8a:42:68:6b:b4:1f:70:c0:8c:5f:43:e2:ff:19:
6f:0b:2f:e0:b5:e7:22:7a:8c:71:7c:c8:1e:04:75:d4:ad:d4:
f7:72:a7:8d:b8:35:da:50:be:69:62:d3:8c:3e:19:eb:3d:d9:
d6:df:47:40:85:05:a6:aa:7f:89:67:c9:af:a9:63:7d:90:20:
66:d9:f8:0a:2f:ee:28:93:5a:cf:9b:18:13:32:59:98:81:a7:
cc:dd:87:00:66:20:e4:e3:12:f4:1a:ad:8c:7a:7b:ca:60:f1:
a0:f7:53:10:01:5d:da:31:3a:0a:80:19:2b:66:9c:4d:41:75:
02:b7:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:36 2024 by rpki-client on console-fra.rpki-client.org