Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/rHxC_POUfDFGw0Zg2tTSsNTYjis.roa
File: rHxC_POUfDFGw0Zg2tTSsNTYjis.roa (raw, json)
Hash identifier: 6WM0XqQOQWwE9sB8239dbZoRBOx9G3ARSHy7C48gmJY=
Subject key identifier: AC:7C:42:FC:F3:94:7C:31:46:C3:46:60:DA:D4:D2:B0:D4:D8:8E:2B
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 0185724C7F42731982CA094FCBEB610E3E65
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/rHxC_POUfDFGw0Zg2tTSsNTYjis.roa
Signing time: Mon 02 Jan 2023 11:44:53 +0000
ROA not before: Mon 02 Jan 2023 11:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39227
IP address blocks: 194.6.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:7f:42:73:19:82:ca:09:4f:cb:eb:61:0e:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jan 2 11:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac7c42fcf3947c3146c34660dad4d2b0d4d88e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:c9:fc:aa:25:89:e5:ca:6d:f0:e5:cd:03:
23:1c:61:be:3a:d7:07:2d:7f:74:28:17:88:ca:18:
a4:a2:43:2c:c9:e3:51:b0:78:3a:fd:f6:57:16:80:
c7:44:0e:2f:90:53:38:32:0a:5b:70:70:fb:e8:79:
47:df:4a:fe:47:ae:0e:b2:28:79:54:a7:2b:a7:e9:
d3:4a:d0:d3:3e:a0:d5:1f:a9:a6:aa:c8:92:d6:6f:
b4:72:bd:93:ec:7e:88:ab:c8:9c:4a:70:4b:55:ae:
2b:68:c9:33:9d:a4:0d:06:12:6e:f9:dc:0e:8b:37:
ad:da:2f:58:41:fb:e1:d6:dc:b5:00:06:7b:83:2c:
36:17:26:18:ce:0e:86:2d:9a:c2:e3:bf:93:2c:3f:
ff:8b:74:9a:36:ea:f2:26:2b:7c:09:6d:29:87:9d:
55:38:9a:ae:12:34:ed:e1:10:14:1a:3e:ac:44:94:
02:9d:05:3d:31:09:a9:ee:4b:08:13:a9:c9:ef:5d:
57:ce:b4:6c:b6:b2:86:0d:6f:6f:96:53:2e:ea:cc:
a2:95:04:06:57:18:f6:5a:c3:0b:55:81:91:1d:fe:
b8:dc:6e:aa:20:8e:8e:f7:30:f3:75:64:70:61:85:
92:85:09:8c:18:91:b9:94:df:76:06:e9:fb:39:19:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7C:42:FC:F3:94:7C:31:46:C3:46:60:DA:D4:D2:B0:D4:D8:8E:2B
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/rHxC_POUfDFGw0Zg2tTSsNTYjis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.192.0/22
Signature Algorithm: sha256WithRSAEncryption
11:5d:73:0e:a7:73:c5:e3:16:5e:d0:3b:92:d3:19:ee:28:c2:
e1:ed:72:02:d1:cd:87:44:5c:1a:9d:24:7f:41:11:ce:b9:19:
ba:72:5b:3e:63:25:30:2a:89:e7:dd:2e:49:09:bc:95:5b:e1:
66:d4:1b:b1:61:cb:6a:bd:b2:cc:00:d1:f3:65:ad:c8:84:5b:
2f:82:ba:f9:4f:0d:8b:f8:5f:e8:47:ee:e2:98:f3:3f:ba:41:
a3:ab:2a:b0:2d:4c:a2:4d:18:e0:52:49:b9:0d:60:a3:18:32:
16:b6:35:24:ad:3a:70:19:fb:5e:4b:e8:91:50:71:ca:fb:40:
df:db:bb:25:51:5a:19:dd:3b:3f:51:79:c4:f0:b5:f3:12:99:
12:7a:1b:8e:b5:ae:12:99:c8:0b:3a:dc:55:e6:ce:89:7b:42:
a5:6f:62:b3:c2:6b:5e:fe:5f:eb:ff:4f:5f:43:2a:3f:e8:18:
8e:ec:8e:64:7b:e7:4d:1a:79:ae:a6:a9:48:38:02:27:cb:41:
ac:86:32:ff:07:24:1d:b3:15:ef:65:f9:ab:c0:c0:af:0f:30:
f0:51:37:0e:94:bb:3d:60:a5:ba:30:73:fa:1e:ed:c2:94:36:
40:8b:84:3d:90:22:51:62:1b:92:f4:41:5b:69:9d:46:f0:52:
1a:6a:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:03 2024 by rpki-client on console-ams.rpki-client.org