Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/CbEpBxVd516O5HdXb_PI6vuUCoo.roa
File: CbEpBxVd516O5HdXb_PI6vuUCoo.roa (raw, json)
Hash identifier: e4eRSrifR46GsWu9NUJ7dSQjqAXZDNHl/bu/IhZVses=
Subject key identifier: 09:B1:29:07:15:5D:E7:5E:8E:E4:77:57:6F:F3:C8:EA:FB:94:0A:8A
Certificate issuer: /CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
Certificate serial: 01857039769381BD927AB29AECA0025C9C43
Authority key identifier: 0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/CbEpBxVd516O5HdXb_PI6vuUCoo.roa
Signing time: Mon 02 Jan 2023 02:04:52 +0000
ROA not before: Mon 02 Jan 2023 02:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.126.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:76:93:81:bd:92:7a:b2:9a:ec:a0:02:5c:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
Validity
Not Before: Jan 2 02:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b12907155de75e8ee477576ff3c8eafb940a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:1b:f7:3f:b9:43:aa:ed:fb:85:58:16:58:
3c:04:00:f0:37:ec:06:b6:39:27:84:3b:46:2c:96:
d6:13:49:75:4a:b5:05:b2:36:c2:82:ec:62:db:65:
89:35:0b:ba:cd:af:6c:e1:10:b1:13:42:23:2a:a8:
4d:d9:e6:35:d3:09:88:6c:50:c2:da:57:7a:18:21:
81:eb:61:c7:81:5b:cb:9d:7d:42:6b:26:26:b5:96:
ad:cc:9c:fa:40:7d:8f:04:07:7f:f0:a2:e7:76:bb:
a2:51:75:44:c2:bc:9f:ec:5d:d5:c0:3a:26:71:a8:
9a:8b:fe:46:c5:05:b6:d1:4d:fe:b9:63:98:c8:b7:
1e:69:6e:9d:32:1a:86:1d:00:48:8e:da:b9:4a:1f:
ce:ad:d9:ef:09:85:8d:b4:3b:cc:82:35:73:c4:05:
1a:39:9f:e6:3a:cc:88:92:a2:7f:85:9e:d4:fe:9c:
e5:65:57:3f:34:97:11:d1:af:2e:6a:6c:52:dc:9d:
21:eb:17:f9:37:e7:ab:7f:51:29:91:26:57:6f:db:
68:6d:43:50:8d:08:b2:c9:b9:0e:4e:7e:4d:3c:6c:
58:34:13:00:46:db:f2:3f:69:63:7e:ee:88:b3:6d:
e2:13:46:00:43:16:a7:0f:4b:15:bb:f5:39:aa:5f:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:29:07:15:5D:E7:5E:8E:E4:77:57:6F:F3:C8:EA:FB:94:0A:8A
X509v3 Authority Key Identifier:
keyid:0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/CbEpBxVd516O5HdXb_PI6vuUCoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.176.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:41:50:5e:4e:d7:60:40:3a:78:68:37:e0:ee:29:05:50:
70:5e:ab:09:55:25:4c:74:a3:9b:24:c8:eb:c6:56:46:1a:a7:
8a:e5:5a:50:dd:f0:00:0c:3a:7c:fb:97:d8:90:1e:a9:7b:3b:
a0:63:73:a9:36:c8:4c:0e:85:b0:8a:2e:94:80:cf:19:ca:6c:
98:6d:8d:ff:c0:de:0f:96:db:61:dd:d8:ec:0f:2f:d5:41:6b:
17:a7:9a:fd:65:e3:90:63:fe:d4:da:a2:ff:9d:14:89:e2:a2:
89:66:85:cc:20:07:11:15:7f:88:5a:42:90:fd:06:ad:bf:04:
63:a0:b9:d6:1f:99:d9:f0:cc:c6:26:32:15:2d:e9:cb:b7:f8:
c2:37:f9:15:d1:65:84:02:58:fe:b8:c9:95:a8:b4:27:13:49:
d6:f2:2a:93:bc:3e:c4:31:30:f2:79:7a:31:c8:09:8e:6b:2e:
66:94:c4:80:b9:49:92:48:18:2e:43:76:08:11:fd:28:97:e9:
88:9b:f9:b0:8d:5b:ba:c4:ad:4e:f0:c3:13:65:0e:84:5f:3a:
33:49:45:fd:c5:f3:e6:0b:1d:30:05:c9:9b:54:3a:87:e9:0f:
98:20:c1:c1:58:d7:59:25:6b:2d:93:66:16:d4:ba:40:86:f6:
1f:9e:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:02 2023 by rpki-client on console-fra.rpki-client.org