Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y-ngKfE6ejGhODoAl1VtxO-kgVo.roa
File: y-ngKfE6ejGhODoAl1VtxO-kgVo.roa (raw, json)
Hash identifier: V7VWaaOmr11dKOrXEv3Vf+NKn7ARg7wvx6nNdKYCLBo=
Subject key identifier: CB:E9:E0:29:F1:3A:7A:31:A1:38:3A:00:97:55:6D:C4:EF:A4:81:5A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99A24328878268079011B4034366616
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y-ngKfE6ejGhODoAl1VtxO-kgVo.roa
Signing time: Mon 13 Nov 2023 16:53:23 +0000
ROA not before: Mon 13 Nov 2023 16:53:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9a:24:32:88:78:26:80:79:01:1b:40:34:36:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:53:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe9e029f13a7a31a1383a0097556dc4efa4815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:71:dd:e7:fd:6d:ee:46:3c:16:34:0f:64:
c9:a3:06:3e:ab:47:4b:bc:51:d4:02:3a:d3:1e:28:
98:b9:0d:4b:dc:9b:43:df:c1:74:10:e5:bc:6d:ec:
ac:75:ed:2e:dd:e4:e1:e5:1f:49:db:f8:d4:27:c0:
0c:8e:43:9d:c7:a2:36:4d:f4:47:ae:8d:b5:b6:b6:
92:0e:1c:64:64:8c:f4:c6:fa:05:cc:d1:62:d3:72:
f5:d0:f9:44:35:b6:d5:b6:3b:c3:df:01:19:01:f7:
24:7c:f4:d6:02:83:2b:4f:71:20:8e:ee:f7:94:3e:
88:10:7e:a2:b4:7d:57:25:03:a4:00:3f:b4:21:f8:
ff:b2:6e:36:79:9e:02:73:bb:e1:f6:56:43:88:65:
6c:a7:31:b4:e7:ef:d9:bf:7d:2f:54:7c:12:c4:24:
cf:d4:8f:12:7e:4e:32:fe:4d:45:23:4d:c0:e5:5a:
4d:90:ec:80:9b:aa:3e:8e:ea:f9:69:69:76:af:c9:
15:52:3f:39:6b:7c:06:26:07:40:55:de:99:5e:65:
9b:5a:cf:3b:a8:25:27:9f:5f:c1:ef:41:f4:c9:72:
ae:95:87:c0:ca:87:22:82:65:99:68:83:cd:cc:30:
43:75:b9:d6:25:ac:85:2d:cf:21:97:1f:d1:5d:26:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:E0:29:F1:3A:7A:31:A1:38:3A:00:97:55:6D:C4:EF:A4:81:5A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/y-ngKfE6ejGhODoAl1VtxO-kgVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:12:34:a8:ee:bf:c4:f9:e6:13:3f:60:0b:93:27:1e:0e:d8:
ae:86:f4:67:de:23:42:8b:fe:1b:e5:fc:ba:42:eb:37:fc:86:
c2:64:92:dc:fb:ec:7f:86:7c:08:b4:5c:9c:8c:a1:40:74:22:
ba:ee:2a:87:a9:42:64:de:26:9b:7f:2d:43:51:f7:86:36:d8:
db:d7:ec:14:c8:36:e1:9b:93:36:5c:7e:d1:fd:9e:ce:fc:f1:
70:2c:21:1d:68:8a:c7:4b:cd:63:25:7b:68:20:95:49:48:6f:
c9:6e:22:ee:fd:92:5e:6b:5a:51:b0:93:3e:d4:10:91:f3:49:
1b:69:d1:a7:88:de:6c:42:cb:54:4f:95:d6:c4:f6:cf:e8:e8:
92:26:2a:4c:1c:ab:d3:7d:cb:69:85:cc:2c:8a:25:2f:b0:20:
71:96:98:e2:39:1a:bf:bb:f3:3f:2c:28:ed:88:87:2b:59:9a:
68:ad:27:f8:c9:e8:26:71:0f:c6:3b:37:58:02:9e:70:51:36:
a2:dc:0e:80:a8:1c:d9:1f:db:6d:6e:4f:0f:6c:fa:6a:28:3a:
d0:1f:26:11:55:21:cf:16:ef:b6:3a:08:81:67:20:a4:7f:2c:
5d:a5:bf:95:90:6c:8d:97:71:8a:0b:a9:01:6e:d7:b4:d6:6d:
27:5a:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org