Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/DO0idsBkjZsPYUNWHG9Rui7snDw.roa
File: DO0idsBkjZsPYUNWHG9Rui7snDw.roa (raw, json)
Hash identifier: V4OIH8RFJuKLLeBZ49M3GMMBUM4k28M1rjkBnLp17q8=
Subject key identifier: 0C:ED:22:76:C0:64:8D:9B:0F:61:43:56:1C:6F:51:BA:2E:EC:9C:3C
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 01856BA58B6E337AB43077DEA8E30AD35F8C
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/DO0idsBkjZsPYUNWHG9Rui7snDw.roa
Signing time: Sun 01 Jan 2023 04:44:49 +0000
ROA not before: Sun 01 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 194.9.172.0/23 maxlen: 23
194.9.172.0/24 maxlen: 24
194.9.173.0/24 maxlen: 24
194.11.21.0/24 maxlen: 24
194.11.20.0/24 maxlen: 24
194.11.20.0/23 maxlen: 23
2a04:ecc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:8b:6e:33:7a:b4:30:77:de:a8:e3:0a:d3:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Jan 1 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ced2276c0648d9b0f6143561c6f51ba2eec9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:3b:e9:67:da:35:4d:9e:23:43:2c:e1:dd:
ca:6b:99:26:63:56:3f:e2:04:30:76:8b:63:68:e4:
ce:75:4f:c4:42:32:6c:90:8d:5b:b0:7c:8c:b3:e4:
27:3e:70:35:64:01:e3:e1:81:02:e5:ae:36:16:e3:
69:e2:3f:32:2b:6d:78:74:7c:c5:73:34:8a:9c:9b:
14:32:9b:32:74:b1:c0:79:a6:18:d3:94:9d:5c:d9:
1e:24:82:71:01:29:b1:73:a1:52:43:8c:a1:2b:ab:
5c:b5:fd:7b:e8:e0:7c:d9:db:a7:5f:22:70:50:0d:
38:ff:63:0d:3b:ef:3e:9d:49:93:c3:74:d7:66:3f:
32:2d:4a:f1:b5:f6:f0:07:c8:10:27:4b:a8:40:9b:
ea:d3:fe:5d:51:e6:c8:85:5c:08:57:e1:74:d1:16:
ff:26:07:23:cd:9e:40:36:d9:4d:fc:5c:eb:f2:81:
7f:20:6d:c0:1b:7b:8a:00:28:45:ce:3c:9b:62:a1:
ca:ae:46:25:1d:4d:5c:96:c8:46:24:c3:fb:c8:f5:
26:74:80:d0:7a:5c:1a:05:09:02:e0:bd:c1:b2:13:
96:41:92:74:bf:3a:15:df:e2:fe:c7:62:45:67:22:
99:8d:7a:f3:9b:54:6d:dc:ff:70:6e:7c:df:55:78:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:22:76:C0:64:8D:9B:0F:61:43:56:1C:6F:51:BA:2E:EC:9C:3C
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/DO0idsBkjZsPYUNWHG9Rui7snDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.172.0/23
194.11.20.0/23
IPv6:
2a04:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:d7:fb:7c:2f:fb:ea:23:df:d8:e1:9b:98:12:07:43:66:5a:
78:93:8b:ea:50:57:3e:10:d9:d9:18:ad:99:d4:50:e2:45:b2:
f4:61:cd:2e:76:fc:82:ac:c5:8a:c7:99:6a:de:15:a9:3e:b7:
5d:43:87:96:78:e6:5b:6d:ff:ac:fb:23:ac:82:7f:0d:e7:bf:
b9:eb:92:39:74:b0:f2:d8:38:b3:28:7d:fb:52:62:fd:22:4f:
85:1c:b4:0e:11:eb:3d:e7:8d:ab:b9:a1:31:35:0d:b9:b3:9d:
63:92:ba:37:fb:fe:ba:a2:23:7b:b4:34:9b:2f:91:72:17:de:
f8:8c:99:15:f3:7f:a7:76:89:55:44:7a:94:78:2b:fe:fd:2d:
ab:be:4b:e2:49:b8:17:66:df:f4:0d:65:40:6a:6d:f8:5e:c8:
86:f0:ad:61:ee:fd:c2:b5:37:7a:21:79:c6:8e:26:2e:53:55:
fd:2e:63:1c:62:30:4a:b9:87:af:55:9e:56:d3:de:da:7a:3e:
38:20:58:36:a3:1c:8a:00:1f:8b:40:b0:24:4f:7c:38:42:b1:
3b:d1:61:c9:aa:f6:e8:76:cf:6b:a2:02:e3:37:d9:80:f0:21:
fc:88:9b:77:81:be:aa:6c:5a:9d:97:db:92:9b:6e:4e:f2:53:
b3:4e:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:11 2024 by rpki-client on console-ams.rpki-client.org