Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6OAwnX6RRZkRHQJ0cDpUrK3KlcE.roa
File: 6OAwnX6RRZkRHQJ0cDpUrK3KlcE.roa (raw, json)
Hash identifier: Ln9Rm5Ed/OjB9Jm5NdxqnBfviE9E/Qa2zVxfXJhtYCo=
Subject key identifier: E8:E0:30:9D:7E:91:45:99:11:1D:02:74:70:3A:54:AC:AD:CA:95:C1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FDF04FC44E46EA039E3A63E8E5320
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6OAwnX6RRZkRHQJ0cDpUrK3KlcE.roa
Signing time: Mon 02 Jan 2023 17:38:06 +0000
ROA not before: Mon 02 Jan 2023 17:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 89.190.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:df:04:fc:44:e4:6e:a0:39:e3:a6:3e:8e:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e0309d7e914599111d0274703a54acadca95c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:3b:fe:70:2f:5f:2d:b8:3d:79:1f:a9:f7:
d7:9b:2a:04:05:8d:c3:a5:c2:42:7e:e6:0e:7d:66:
f6:f2:7e:8c:fd:68:c7:ba:da:28:7e:de:0a:eb:5b:
34:64:7e:8c:9e:3a:8a:72:ad:62:82:ac:0e:e6:2c:
34:88:68:d1:75:21:f6:85:d9:45:f7:55:c8:61:05:
8f:50:9e:34:e6:47:e5:94:61:4a:23:21:f8:97:46:
8f:34:1f:e3:72:9f:ed:77:e2:ce:3c:8a:28:f6:ea:
0b:ba:d8:d1:8c:d4:0a:5b:8a:7a:19:70:cf:86:10:
16:f2:00:37:6d:ad:4d:fe:07:54:69:29:fb:dd:84:
57:0b:ae:70:8a:ed:70:a1:de:d4:8d:76:3d:60:03:
f2:5f:9f:b1:2f:f4:7e:c2:2f:36:d6:e3:89:aa:09:
bc:99:7b:3a:dc:fd:1a:11:ae:6f:33:60:0d:17:f4:
d2:cb:bb:02:cd:c5:79:c4:d8:93:a6:c6:e7:eb:fb:
20:03:03:74:10:1d:de:46:a7:1f:03:55:81:5f:be:
e7:13:f6:44:2f:5b:a4:e2:84:46:f4:bc:92:c1:56:
80:29:70:42:93:ee:14:86:62:23:d9:10:f0:22:e0:
32:7a:50:23:04:9a:7b:92:57:8b:9b:25:c4:6e:78:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:30:9D:7E:91:45:99:11:1D:02:74:70:3A:54:AC:AD:CA:95:C1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6OAwnX6RRZkRHQJ0cDpUrK3KlcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3a:9a:cb:59:ca:35:a8:18:74:32:ee:2d:d4:d2:3f:f0:6e:
04:a8:1f:bd:ca:d6:63:9f:b6:fd:0b:a8:9c:79:a4:4e:ec:51:
b1:bb:d7:17:cc:60:e5:98:94:5a:a0:fe:25:12:20:58:49:a1:
06:68:51:b3:dd:fa:47:a5:a7:78:fa:86:b3:63:ae:29:c6:e9:
83:b9:63:70:bd:a8:f9:d9:6b:79:75:db:51:0b:98:d8:35:3f:
a6:ec:27:6d:bd:63:18:40:33:aa:2f:37:5e:ab:bf:9d:a5:92:
58:04:98:81:0c:d0:dd:0e:c5:53:43:63:6e:a7:68:e5:6f:76:
76:ff:6c:9a:62:63:57:44:77:a0:b2:25:3b:74:1c:40:03:1a:
b8:4e:e0:36:d8:40:d2:6f:f2:c0:ed:0b:23:7b:92:c0:27:59:
c5:20:ba:cb:d1:76:a7:31:89:7f:86:43:f9:16:da:10:d1:3e:
28:cb:ce:9e:10:35:56:a2:72:79:48:29:ce:27:97:53:0e:8d:
d3:69:85:c7:31:5e:05:96:a6:53:fd:f3:d5:f1:22:28:96:4e:
6e:2b:62:89:53:2c:9d:da:f8:67:0a:c8:17:53:38:ef:75:12:
2c:73:ba:d9:7b:24:f4:9a:67:06:ee:06:db:81:9f:65:34:a0:
ff:b5:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org