Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gWTrjFKZthvL8gDrKOLEz43GQb8.roa
File: gWTrjFKZthvL8gDrKOLEz43GQb8.roa (raw, json)
Hash identifier: Q1SJMAKl97+YgUpzUCzE8CWCiUswl+za61leLWHS8HQ=
Subject key identifier: 81:64:EB:8C:52:99:B6:1B:CB:F2:00:EB:28:E2:C4:CF:8D:C6:41:BF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018756A31C1B825B7A1CF6C7731F23B2A1AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gWTrjFKZthvL8gDrKOLEz43GQb8.roa
Signing time: Thu 06 Apr 2023 12:55:42 +0000
ROA not before: Thu 06 Apr 2023 12:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212816
IP address blocks: 194.102.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:a3:1c:1b:82:5b:7a:1c:f6:c7:73:1f:23:b2:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 6 12:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8164eb8c5299b61bcbf200eb28e2c4cf8dc641bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:c9:f8:ac:c4:ec:7d:ac:3a:93:c3:69:ef:
c4:61:bb:5d:cd:aa:53:da:06:47:42:8c:61:af:06:
eb:bd:dc:6d:fc:3c:90:b0:82:d6:b2:49:36:d6:10:
fe:75:19:b3:0d:e4:8f:c5:7b:d7:6a:03:30:97:2d:
26:0d:3e:f2:d2:19:37:09:5f:c0:57:c3:39:3c:5a:
39:cd:42:01:4f:eb:be:b7:e7:85:02:ca:a1:c5:2f:
10:8e:c2:08:a3:4d:5d:ef:2f:ce:30:33:1f:83:3e:
40:99:d9:87:42:cc:0b:12:95:fd:cd:34:ac:76:82:
87:c7:74:de:50:d1:d1:d5:63:76:cb:95:42:d3:47:
e2:1c:f7:12:ac:2d:ce:77:cc:d0:80:38:b8:ea:e2:
b7:57:31:7f:f0:04:3f:31:70:8b:d1:de:1e:2a:68:
fb:7b:28:7f:e5:3f:05:a0:52:93:b3:e5:1b:31:72:
45:35:24:01:c5:6c:cc:ea:45:0f:33:a7:1b:b3:33:
34:4f:a0:96:0d:f3:86:00:91:61:fa:58:7e:8a:86:
ca:7d:74:4b:a1:96:89:d1:4f:51:9e:b2:d2:5d:eb:
ff:a0:31:60:62:7d:0d:58:22:29:36:4a:b2:52:bc:
f2:60:05:3d:d0:d2:c6:2f:1d:4d:45:e9:6a:48:61:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:EB:8C:52:99:B6:1B:CB:F2:00:EB:28:E2:C4:CF:8D:C6:41:BF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gWTrjFKZthvL8gDrKOLEz43GQb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.184.0/22
Signature Algorithm: sha256WithRSAEncryption
85:e8:a1:33:ae:70:16:10:e4:81:3c:06:4c:85:ce:f8:45:7d:
fb:91:89:32:6e:c9:20:d6:37:20:d6:bb:0f:ea:f8:1c:31:ca:
27:39:b5:1d:d1:ab:0f:8f:c6:5f:8d:06:d1:99:0a:20:79:d7:
79:8b:5b:c1:f5:7a:75:ac:54:d0:96:c2:2a:9e:c9:df:0d:a6:
c5:52:b9:91:3b:df:ec:af:2d:29:03:42:c7:c5:2d:c3:ec:43:
f1:65:3e:06:60:dd:a7:78:12:11:16:b6:64:b7:05:87:4b:15:
86:1b:26:a2:28:6c:9c:c5:99:5c:09:f2:39:46:20:4e:1a:e7:
1b:3d:18:5f:9d:c0:35:c5:b1:3e:5a:4a:a9:d9:2d:c1:16:94:
aa:88:d8:07:93:64:a3:87:65:11:9b:a8:2d:73:98:49:2e:2a:
da:a4:7f:11:5f:c6:7b:69:de:39:c1:b8:77:b2:7b:d8:80:2b:
56:ca:5b:bc:8b:27:14:b9:79:11:6d:ac:8f:b8:e9:f2:a3:60:
04:50:23:23:70:be:ac:11:c8:d6:a5:74:19:c3:8f:fa:41:df:
f3:e5:82:01:8a:8e:88:9e:db:e2:1a:b6:41:8b:56:2a:eb:35:
c3:b4:87:2f:d2:17:d3:57:67:d5:20:72:0f:da:97:5c:2e:3b:
32:9e:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org