Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/TROdGQrzE0r2ViNH4uOiuLEOmDU.roa
File: TROdGQrzE0r2ViNH4uOiuLEOmDU.roa (raw, json)
Hash identifier: 3IlZFGkXXWE4OtGVDFblgotuEhNeXRINh7hkfdVYnZY=
Subject key identifier: 4D:13:9D:19:0A:F3:13:4A:F6:56:23:47:E2:E3:A2:B8:B1:0E:98:35
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01864EBD3FA4E6DCD646B9577FD173333C1A
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/TROdGQrzE0r2ViNH4uOiuLEOmDU.roa
Signing time: Tue 14 Feb 2023 07:04:30 +0000
ROA not before: Tue 14 Feb 2023 07:04:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49570
IP address blocks: 195.64.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:bd:3f:a4:e6:dc:d6:46:b9:57:7f:d1:73:33:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Feb 14 07:04:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d139d190af3134af6562347e2e3a2b8b10e9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:72:60:18:76:4a:0d:24:6d:be:ba:16:3c:
36:93:f7:6e:93:0d:a7:10:b3:ce:b6:b0:25:de:72:
b8:cb:16:7a:f0:53:b1:f5:99:f0:14:c1:d1:3c:2c:
6d:bb:64:f4:8e:f4:07:08:d7:2a:89:15:62:0a:a9:
1e:5c:45:fd:6c:ad:b3:9e:b3:c9:23:c8:43:61:06:
7c:f1:6f:5c:b7:9c:e7:fd:50:ba:0b:92:dd:06:75:
0f:37:0e:5a:c2:e9:8f:bc:3d:2d:27:13:c5:74:10:
80:be:fc:ce:f5:9a:83:e2:d8:b4:fe:ac:25:1d:31:
94:88:7e:62:c5:ae:44:52:a2:18:ab:35:97:38:c4:
a4:b2:a7:d3:47:14:8f:ef:0a:63:58:ca:76:c4:95:
ed:b1:b9:a0:7e:aa:d4:88:e7:d0:96:92:2e:0f:a8:
e5:45:92:2b:67:6e:f5:aa:56:a4:d6:f1:bb:98:8c:
ca:a1:98:fb:24:f9:dd:94:b2:f8:40:90:dc:74:f3:
db:d9:77:03:0f:d4:c7:af:64:57:44:87:f9:78:d6:
6a:96:18:3b:66:99:90:8f:7d:17:3c:0f:4d:a1:ea:
b8:55:45:84:ef:86:20:c2:d4:5f:63:97:de:04:b3:
7b:96:9d:48:43:d7:26:0d:2a:29:cb:ab:de:82:e3:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:9D:19:0A:F3:13:4A:F6:56:23:47:E2:E3:A2:B8:B1:0E:98:35
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/TROdGQrzE0r2ViNH4uOiuLEOmDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.184.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fa:d4:d6:1e:f8:d9:25:54:5b:87:7c:ee:05:1d:a9:83:d7:
ff:6b:f4:ae:e7:86:95:9c:68:50:b6:aa:6e:18:e0:9f:7a:ee:
e5:3b:28:46:b4:cc:c3:26:4e:d5:6e:3d:92:96:0b:4b:4e:fc:
26:38:d0:f4:cc:1d:5a:ab:c2:27:72:bc:3c:75:e9:f5:f7:bc:
d4:33:f0:09:70:89:7b:50:c1:79:6b:4a:2e:7f:f5:e2:fe:21:
0e:c2:b8:28:a4:0a:86:38:0c:fd:7c:80:08:44:4d:c8:7b:bd:
e1:55:93:b5:9f:c6:16:78:60:26:35:8a:d5:bd:1c:40:ec:db:
59:07:aa:cb:bb:ed:55:0b:2f:11:2a:84:9e:03:50:d1:9e:59:
1c:c4:c8:fe:3e:61:8c:ce:2c:cd:2c:b1:2f:c2:a8:1c:2f:75:
bd:15:83:c7:0f:db:c4:ca:5d:38:de:82:4f:63:69:37:61:64:
97:e4:f9:fe:cf:90:f4:d7:34:0f:63:5f:80:f3:b9:e7:c6:c7:
d7:20:98:1c:f3:e6:b9:39:c7:3e:e0:da:85:01:65:c9:ec:9f:
33:65:0c:3a:a2:d2:d7:df:b9:74:d8:5d:14:14:c6:10:06:69:
cf:fd:61:09:6f:1c:bd:43:d4:66:10:2f:1f:ec:ab:56:95:d2:
13:06:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:28 2024 by rpki-client on console-fra.rpki-client.org