Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F748bvYOqKvEcqeYgqiDMDY1zDM.roa
File: F748bvYOqKvEcqeYgqiDMDY1zDM.roa (raw, json)
Hash identifier: m0R9BqU7l2ZmB+8IJgcnUc9sfb8JdMrRS/fu+wFNfSQ=
Subject key identifier: 17:BE:3C:6E:F6:0E:A8:AB:C4:72:A7:98:82:A8:83:30:36:35:CC:33
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BCEC0B71553FC9ABECD7034FE854CF724
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F748bvYOqKvEcqeYgqiDMDY1zDM.roa
Signing time: Tue 14 Nov 2023 16:53:38 +0000
ROA not before: Tue 14 Nov 2023 16:53:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:c0:b7:15:53:fc:9a:be:cd:70:34:fe:85:4c:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 14 16:53:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17be3c6ef60ea8abc472a79882a883303635cc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:fb:74:68:f7:a7:8f:56:d4:b0:70:f8:39:
46:b0:cd:30:55:be:f5:7d:8a:8b:99:77:30:55:5c:
7d:3b:e9:e0:e3:e7:ff:31:33:37:1d:56:75:e7:1b:
8d:89:fa:74:06:b9:a6:2a:af:60:6c:d8:76:0b:de:
51:36:ce:6b:75:56:42:9d:19:a9:08:4d:76:08:e3:
5f:ab:a3:1b:e8:28:80:f1:48:e6:f7:92:81:4f:d6:
9a:ba:1e:82:bf:0b:3b:37:4d:ae:53:74:ad:34:64:
45:82:05:38:ec:67:bb:f8:cd:eb:cb:64:0b:53:1b:
78:18:e8:95:53:dd:85:ee:cb:3d:fd:83:85:67:35:
9e:b7:84:b1:95:0d:3c:68:81:e7:20:f1:32:68:19:
1a:e8:d1:64:86:b6:bd:3d:ca:9b:bb:df:ab:4a:1f:
7b:c7:ac:7c:25:c0:72:c6:41:f9:38:d7:9b:16:1f:
12:7e:df:ac:48:72:84:4d:d0:4f:00:c3:af:4f:8f:
f3:bc:fb:e6:8d:0e:3e:09:90:30:74:03:a9:86:4c:
e2:1f:01:04:b1:4e:d2:27:50:68:e7:3b:65:fc:b0:
54:fd:8a:f3:5a:c4:80:12:83:bf:a3:f4:3f:8d:11:
b5:7b:08:f7:e2:67:92:af:8f:55:07:09:06:43:3e:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:3C:6E:F6:0E:A8:AB:C4:72:A7:98:82:A8:83:30:36:35:CC:33
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F748bvYOqKvEcqeYgqiDMDY1zDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
75:16:98:69:9b:ac:b2:af:b7:09:dc:7b:9e:50:71:a9:3e:19:
33:99:7c:ab:50:28:65:c5:fc:a6:d8:f1:43:f4:ab:78:c5:e3:
bd:62:47:f8:16:d6:70:ec:5c:7c:29:d4:6a:9d:ec:84:f7:9c:
e6:38:6c:da:53:40:2c:fb:9b:71:69:00:a8:6b:7c:a4:dd:64:
87:7b:e4:e8:2e:9c:e4:07:de:bd:02:a5:ea:fe:b6:02:13:88:
b1:99:f9:54:c8:65:4f:d8:c7:79:d7:c0:5b:ce:d5:8e:8d:f3:
04:af:87:c6:ed:ac:ec:9d:0d:3d:a8:d7:f5:58:52:7b:b7:7b:
f0:63:71:7d:72:e3:55:5b:34:3e:62:9b:86:a5:6f:09:4e:aa:
5c:98:fe:d0:8c:1d:8a:98:ff:0a:37:5b:11:f7:91:fa:08:26:
97:e5:47:ce:6d:5b:09:e5:15:e1:0b:b0:e9:82:c9:93:32:cf:
0c:e3:f3:ad:ec:30:49:15:89:1a:91:26:43:5a:62:d0:db:eb:
68:59:e2:ea:96:96:83:11:40:5c:af:4f:88:c3:5f:c5:64:2e:
d7:d8:37:90:6b:61:3d:25:0b:90:16:f6:b7:14:cc:1f:63:d1:
76:6d:6f:5f:2a:28:a3:2c:3f:9c:2d:ec:0c:da:c2:06:ac:d3:
51:fa:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org