Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/amKkvht4ZwKgeNsfqTDAsajVtaE.roa
File: amKkvht4ZwKgeNsfqTDAsajVtaE.roa (raw, json)
Hash identifier: sqh4ecGssSFR2/Pdda1pH0jq1FiHrC0H8qLaNm9Y/M8=
Subject key identifier: 6A:62:A4:BE:1B:78:67:02:A0:78:DB:1F:A9:30:C0:B1:A8:D5:B5:A1
Certificate issuer: /CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
Certificate serial: 01856EB90A94C0CC5482F2C960C73D914279
Authority key identifier: 7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/amKkvht4ZwKgeNsfqTDAsajVtaE.roa
Signing time: Sun 01 Jan 2023 19:04:58 +0000
ROA not before: Sun 01 Jan 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.54.157.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0a:94:c0:cc:54:82:f2:c9:60:c7:3d:91:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd6c0236ff4d6050906957ffd380b3879e6ed6e
Validity
Not Before: Jan 1 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a62a4be1b786702a078db1fa930c0b1a8d5b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:45:06:21:29:be:fa:f7:20:a0:31:68:4d:
2d:a2:7e:91:3f:88:64:7f:96:42:d6:15:53:1d:1c:
a2:dd:c7:f1:82:24:49:49:d2:7c:06:f5:8a:ac:5d:
8a:5d:28:a4:0f:38:a6:da:1e:4f:c7:84:a5:c2:96:
ee:59:d7:b6:0c:01:74:03:4a:3b:82:73:43:f3:94:
45:94:61:93:4b:bc:6a:7a:91:25:ee:32:c9:1a:36:
f4:ad:b4:e7:c2:61:40:70:e4:cf:6f:00:62:cc:01:
a3:e0:80:e7:9f:7a:f5:2e:cc:14:0b:e4:4a:a1:bc:
3f:58:39:e7:78:e6:29:3d:ab:e8:c3:08:92:39:2c:
8a:f5:12:c6:74:5e:92:6b:71:ee:f7:30:c6:df:e0:
15:03:a0:66:d2:35:a6:e4:a8:c1:40:86:d6:e5:df:
9f:7b:f9:5c:69:43:4f:d9:98:b2:d6:bc:88:0a:b7:
dd:99:68:ca:8e:7f:00:3a:a0:7a:24:f0:d5:9f:c9:
b6:d8:3f:b8:67:e5:5e:be:8a:5e:71:b0:f2:46:b1:
36:0a:01:c4:0d:79:4a:6d:61:3a:f3:d7:47:04:69:
80:83:1d:e5:0f:53:70:7f:c5:96:29:4d:14:a2:d2:
45:c8:06:60:fd:d0:f5:d4:6b:9e:cc:b9:1d:3c:aa:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:A4:BE:1B:78:67:02:A0:78:DB:1F:A9:30:C0:B1:A8:D5:B5:A1
X509v3 Authority Key Identifier:
keyid:7C:D6:C0:23:6F:F4:D6:05:09:06:95:7F:FD:38:0B:38:79:E6:ED:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNbAI2_01gUJBpV__TgLOHnm7W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/amKkvht4ZwKgeNsfqTDAsajVtaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ee78b-815c-4995-82e1-c80c288ebeea/1/fNbAI2_01gUJBpV__TgLOHnm7W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.156.0-194.54.158.255
Signature Algorithm: sha256WithRSAEncryption
85:55:8b:5a:14:76:0d:a1:2b:07:f0:8b:34:58:ec:c7:4f:34:
65:87:99:f5:7b:e2:21:04:8f:4e:c6:10:48:c2:7b:cd:a8:2a:
78:41:6d:bf:46:6d:1e:62:a5:21:63:cb:b0:d8:d3:1c:81:43:
67:11:22:c7:b3:1d:75:62:7e:86:35:24:b3:72:57:7d:79:55:
9f:e8:27:2c:91:af:76:eb:17:ee:47:b8:09:96:a9:31:f9:b3:
46:1d:0f:23:06:fe:20:91:8a:40:d5:c5:df:d3:82:4d:b7:67:
43:ab:f3:9a:63:e7:9d:f9:a8:c3:37:d6:f8:03:1c:2d:84:58:
e1:2e:ec:e2:80:db:44:82:5f:45:61:53:fd:4a:13:98:97:20:
5c:1c:28:d8:f8:ed:a7:99:13:30:7f:f1:36:ed:10:d7:53:e1:
cc:7e:1f:dd:c3:3d:5a:aa:ca:91:9b:de:08:22:3b:fc:75:41:
68:97:0f:97:b1:e0:83:24:b6:a2:bf:ec:94:f3:24:5f:57:e2:
4d:cb:47:70:74:f6:17:32:c3:e2:30:82:17:72:ea:7a:ee:4d:
69:e9:8d:20:06:0a:c7:5c:db:a0:64:69:2b:3a:dd:10:4f:31:
c6:4b:42:73:32:23:ee:de:b9:1e:75:a5:75:1d:6f:72:ce:6a:
19:25:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:56 2024 by rpki-client on console-ams.rpki-client.org