Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tAFWeMq4CTFlao520js-99k-kw8.roa
File: tAFWeMq4CTFlao520js-99k-kw8.roa (raw, json)
Hash identifier: ae9oTcn9nPYNBMMHJWBAw0gedzvJe/AnT2vFrnyyHFw=
Subject key identifier: B4:01:56:78:CA:B8:09:31:65:6A:8E:76:D2:3B:3E:F7:D9:3E:93:0F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E889846A23BC2852DDCA298610CBC5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tAFWeMq4CTFlao520js-99k-kw8.roa
Signing time: Mon 02 Jan 2023 09:55:43 +0000
ROA not before: Mon 02 Jan 2023 09:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 194.15.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:89:84:6a:23:bc:28:52:dd:ca:29:86:10:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4015678cab80931656a8e76d23b3ef7d93e930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:28:d0:05:7e:58:5f:51:06:21:4c:90:c0:
b8:23:42:3e:30:c8:76:67:dc:53:47:47:3e:93:24:
51:b5:04:f6:da:8a:db:2e:a3:5c:d8:34:8e:ff:30:
ab:39:3a:20:aa:96:e7:50:2f:8c:18:a5:0f:f9:23:
09:ba:94:51:8d:9c:eb:d1:29:f4:0f:c1:06:5a:45:
a3:3e:2b:01:25:43:2f:12:e7:fa:a8:57:8d:7e:90:
f2:90:1b:dd:99:bb:d1:31:5b:9e:9c:eb:a0:71:7a:
e2:86:9d:68:37:1b:f1:31:62:b3:c4:0d:28:1b:7a:
9a:19:d1:ce:35:26:0d:5e:7b:88:ec:be:63:cd:49:
3d:08:53:c2:67:7e:79:ec:81:e1:b3:db:00:11:70:
49:d2:d4:ab:91:fd:44:93:25:ef:2b:b0:9b:92:8f:
18:86:eb:f0:cb:f5:0f:14:4d:89:e3:5f:b3:b1:5f:
51:94:ac:b9:5d:e8:73:7f:ec:e5:6b:9d:1a:69:26:
78:bb:c8:df:1f:22:4a:85:01:a9:ea:01:9f:58:4e:
f8:f6:53:2b:d4:09:3c:cb:c7:ae:0e:71:27:26:d7:
5d:fd:95:a9:af:a9:fe:86:43:84:74:50:68:e8:8a:
ea:c5:d4:f3:bb:9f:6f:1a:d2:0d:09:07:18:a1:61:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:01:56:78:CA:B8:09:31:65:6A:8E:76:D2:3B:3E:F7:D9:3E:93:0F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tAFWeMq4CTFlao520js-99k-kw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c0:a2:a5:b8:0b:b2:92:b5:4d:f0:8c:0e:70:70:78:2b:5e:
45:f7:8e:33:e2:fc:82:bd:90:80:c8:95:a7:86:17:a4:a5:14:
de:f3:61:d4:40:34:89:48:84:7a:2c:10:a1:33:bc:f4:67:c2:
0e:65:7e:f8:24:61:82:34:bc:3e:64:7c:0a:0e:41:be:a8:6e:
29:29:3d:61:03:d5:65:30:a1:c4:5e:41:6a:f3:38:57:f6:db:
05:21:e3:3a:a8:69:8c:0b:ce:14:e6:16:b6:45:e4:d9:63:e0:
fe:76:b8:70:8a:20:9c:4f:27:bf:a2:8d:1d:b0:6a:55:0d:60:
93:ff:4a:a2:17:d0:0b:87:b6:da:04:24:e8:6e:24:4b:e8:09:
61:1f:f5:c0:fd:c8:01:81:26:e8:9d:07:63:66:22:52:f6:d0:
5c:f4:59:d3:eb:9d:eb:47:f6:cf:09:b6:6b:ba:7e:09:08:40:
a0:53:5e:6f:94:3f:69:26:fd:2a:a1:95:5f:3e:1d:4c:08:07:
2a:5a:77:d4:2b:2b:03:a7:7e:59:f7:29:26:18:44:f1:f6:c3:
6b:34:82:16:f9:36:65:df:b3:6d:3d:ee:c6:8f:1f:fe:57:a7:
af:b8:54:0a:3d:79:40:62:ab:e5:0d:56:8b:15:e5:4c:fd:43:
1f:c7:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org