Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/c1sPOTndBxPjAx5nAHWok93O13E.roa
File: c1sPOTndBxPjAx5nAHWok93O13E.roa (raw, json)
Hash identifier: p/0Ji1/eQHPhbbR9I+HHCkCmNTTEl9ITEr/NfGtRRVI=
Subject key identifier: 73:5B:0F:39:39:DD:07:13:E3:03:1E:67:00:75:A8:93:DD:CE:D7:71
Certificate issuer: /CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Certificate serial: 01856DD3FB00340BA0686A542F4FE9298360
Authority key identifier: B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/c1sPOTndBxPjAx5nAHWok93O13E.roa
Signing time: Sun 01 Jan 2023 14:54:47 +0000
ROA not before: Sun 01 Jan 2023 14:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25193
IP address blocks: 194.150.233.0/24 maxlen: 24
194.150.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 21:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:fb:00:34:0b:a0:68:6a:54:2f:4f:e9:29:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Validity
Not Before: Jan 1 14:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735b0f3939dd0713e3031e670075a893ddced771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:56:40:04:c6:47:b6:55:7a:c9:45:df:09:
ea:1a:f9:d2:4e:e0:e9:31:99:58:8e:11:93:17:27:
d9:28:ca:10:77:b6:20:d2:1d:5a:9a:c0:fd:70:3e:
14:19:4c:d1:d1:52:c5:72:af:8d:0e:d8:52:4b:03:
a2:a8:96:15:2d:0c:40:25:25:a8:51:e0:5a:40:89:
1b:99:d0:4b:0b:84:44:87:14:a3:f8:d8:52:e4:43:
12:14:b8:38:65:1a:38:2e:f8:79:fa:7b:8b:d8:99:
ca:8d:d5:da:a9:0e:e3:04:67:9b:a6:fc:14:e1:5e:
7d:52:0e:db:57:1d:4f:54:c7:7c:c4:75:4b:a1:cd:
ca:c4:33:8b:f1:ac:14:82:3e:e9:1e:5e:b2:19:10:
cb:81:ab:da:13:d9:37:31:02:ef:fe:3f:3d:cf:db:
c6:d0:23:c1:a6:7a:ee:a0:38:4a:27:ed:59:97:52:
08:e8:63:36:d5:93:f6:4c:8c:87:75:f1:d1:d6:e8:
9b:bd:bc:f3:1a:11:ff:ba:d1:54:a5:a6:14:d9:3a:
07:e1:a0:4b:49:68:43:1f:52:c8:05:09:6d:fe:18:
10:2e:e0:9b:56:71:b6:e1:68:08:b4:00:6e:74:1d:
09:1b:40:48:d8:0a:4e:9c:bd:67:d1:57:22:9d:01:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:0F:39:39:DD:07:13:E3:03:1E:67:00:75:A8:93:DD:CE:D7:71
X509v3 Authority Key Identifier:
keyid:B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/c1sPOTndBxPjAx5nAHWok93O13E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.232.0/23
Signature Algorithm: sha256WithRSAEncryption
79:79:44:83:c3:76:46:64:40:b1:74:f1:2e:9d:a9:71:1e:90:
be:71:b8:af:32:a8:da:e9:2d:df:57:97:2b:41:b9:42:84:d5:
cb:e4:41:d4:62:96:fa:4f:d5:3d:2c:ed:61:f8:40:bf:dd:34:
67:ac:83:d0:8c:06:c5:1f:6a:28:c3:f8:ca:9c:c2:16:7e:51:
18:97:31:97:e6:74:43:a5:4b:b2:14:7a:0d:0d:94:1d:7d:7c:
bb:66:85:34:0e:a1:47:47:b2:da:4b:ba:87:08:3c:f2:5f:3e:
7f:c3:a3:c9:f3:f1:a2:cd:1f:be:af:05:09:a1:ae:02:fa:1e:
df:94:99:4b:7f:38:0b:8c:5e:e0:cf:70:80:04:b0:6b:fc:bd:
cf:be:f8:1d:ee:e7:45:c2:85:59:e9:43:be:e4:4e:58:01:22:
8b:86:e2:73:da:12:06:2a:f0:bf:8f:04:87:69:eb:3c:f3:28:
06:54:d2:fc:ab:b7:e9:d8:17:8d:82:8b:da:a9:89:1e:4a:41:
5e:33:d2:72:cd:98:df:06:c0:d6:af:be:6a:8a:4c:ac:be:d0:
ec:79:fa:d1:25:e7:c8:d6:e9:96:a0:52:21:91:04:fb:66:cc:
52:46:f3:2f:84:17:91:5e:66:25:93:87:b8:e0:ef:4e:27:48:
da:14:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:34 2024 by rpki-client on console-fra.rpki-client.org