Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/fSyN6LVa0kYXaIXOw6Fe4xQS448.roa
File: fSyN6LVa0kYXaIXOw6Fe4xQS448.roa (raw, json)
Hash identifier: vUc9FkMc6wyo8KgEFSeL1+hkuT6q2zBcM1e+B9Fx2cA=
Subject key identifier: 7D:2C:8D:E8:B5:5A:D2:46:17:68:85:CE:C3:A1:5E:E3:14:12:E3:8F
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 018790094CF0A4E605474919A81BE9903DE6
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/fSyN6LVa0kYXaIXOw6Fe4xQS448.roa
Signing time: Mon 17 Apr 2023 16:25:41 +0000
ROA not before: Mon 17 Apr 2023 16:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202709
IP address blocks: 194.147.24.0/22 maxlen: 24
2a0d:840::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:09:4c:f0:a4:e6:05:47:49:19:a8:1b:e9:90:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Apr 17 16:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d2c8de8b55ad246176885cec3a15ee31412e38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:23:03:c0:95:7a:7e:24:8d:a9:23:6b:1a:
ef:fd:d2:5c:12:bc:8c:ee:4a:1a:ce:54:8b:6f:c1:
07:55:5b:df:86:e5:a5:4f:8e:8b:13:65:f3:5c:b2:
0c:0c:ce:37:6b:cf:df:91:de:4b:63:fd:12:8a:8b:
49:17:11:7f:86:84:e5:13:00:fa:2a:ea:47:59:18:
08:1f:b6:f4:d3:6f:b1:f9:aa:e5:74:92:9e:bc:4d:
5c:44:39:c4:bf:13:ee:00:c5:a2:d5:ee:f1:4d:01:
da:96:72:10:b8:01:93:bf:e4:61:66:7c:1c:47:bc:
11:88:c1:0c:31:f9:11:50:f3:86:cd:1e:5b:ae:dc:
61:78:0b:da:7f:eb:8f:bf:ae:26:7c:4f:d2:19:c7:
11:3e:07:1c:35:fd:48:d1:0e:d0:24:28:ec:ac:c2:
21:cd:9c:f5:21:8b:bc:38:d8:3c:48:6d:7c:c2:dd:
17:8b:21:b5:ac:fc:26:6f:33:a3:8e:ff:e3:fd:de:
de:7b:38:c7:0f:96:b3:d8:4a:e7:30:fa:0c:98:ff:
ea:77:30:af:03:d2:46:7b:57:21:e4:67:ac:2b:74:
0d:76:59:86:3a:40:b9:c6:1d:7d:c3:99:77:c5:f3:
e4:ad:ff:55:a6:cf:0c:9b:78:f0:dc:e7:14:63:6d:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2C:8D:E8:B5:5A:D2:46:17:68:85:CE:C3:A1:5E:E3:14:12:E3:8F
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/fSyN6LVa0kYXaIXOw6Fe4xQS448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.24.0/22
IPv6:
2a0d:840::/29
Signature Algorithm: sha256WithRSAEncryption
37:38:e1:04:59:55:c4:7e:3b:e9:6c:24:3c:28:4c:9d:73:29:
07:28:69:cf:2d:28:64:71:a0:d1:b9:ac:46:23:45:95:21:08:
29:79:76:46:4e:93:7e:7d:65:48:78:24:9a:04:fa:04:8d:5a:
14:87:bb:8a:e1:57:10:b2:dc:b7:53:30:5b:99:e4:8a:58:66:
70:6b:45:83:44:5e:9f:4e:f6:a5:0f:d5:ba:20:0f:e1:04:f2:
2b:eb:c9:a9:8b:55:9e:9e:e0:0c:4a:2e:95:48:12:ed:2d:05:
19:37:f3:d5:c5:32:a6:de:98:34:d9:bb:3a:c0:c0:b0:b3:d5:
83:cf:f1:18:5d:c2:ab:31:ab:2c:f9:44:df:8c:77:93:c1:70:
71:03:e9:02:02:e6:7e:a9:7e:91:65:c3:26:17:32:b4:3c:e8:
35:a6:dc:55:2e:2a:cc:43:21:62:7c:9b:c6:46:16:a9:75:40:
9d:a4:65:a0:ec:65:ca:5b:b9:91:ca:d4:89:75:f3:eb:ea:4e:
d0:ac:a3:26:f6:08:31:c4:f1:d3:ac:57:c0:03:61:ce:17:f4:
33:a1:a2:b9:61:09:49:b8:25:c8:89:6f:1f:cf:69:3b:e1:27:
e6:a1:56:d0:1f:63:f1:44:f2:db:08:f4:ab:30:a0:29:ec:3b:
61:cf:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:04 2024 by rpki-client on console-fra.rpki-client.org