Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/XOg5fB2DzdxDPyVTqDtwdUmjnYk.roa
File: XOg5fB2DzdxDPyVTqDtwdUmjnYk.roa (raw, json)
Hash identifier: 6gH8MhQ6FrUOv9bgSTEiggk8hEpzKHmBUuIunDM6YB4=
Subject key identifier: 5C:E8:39:7C:1D:83:CD:DC:43:3F:25:53:A8:3B:70:75:49:A3:9D:89
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 01856F4B65A89C2F644C5A3CE5942BBCE641
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/XOg5fB2DzdxDPyVTqDtwdUmjnYk.roa
Signing time: Sun 01 Jan 2023 21:44:50 +0000
ROA not before: Sun 01 Jan 2023 21:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.56.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:65:a8:9c:2f:64:4c:5a:3c:e5:94:2b:bc:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Jan 1 21:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce8397c1d83cddc433f2553a83b707549a39d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:51:0e:c9:54:ee:6f:e7:e8:92:b6:c0:94:
ed:92:b1:b6:17:69:53:79:49:32:02:9a:fe:5d:60:
6d:0c:75:77:72:f9:30:7a:87:4d:4c:6f:72:5e:3a:
17:e0:f4:56:51:b8:21:ce:43:3a:c9:2c:a9:54:71:
fe:23:a5:aa:2c:ca:fa:4a:9a:4f:79:b5:ba:70:3e:
d2:34:bc:a3:67:ae:eb:68:e2:e8:6f:50:a7:a0:f1:
65:f7:89:f0:b1:98:c7:72:b1:fd:d4:fe:53:42:75:
57:f1:6d:d7:40:2b:af:50:b5:2f:d0:3b:d5:97:5e:
98:ba:f9:8c:f9:8c:e6:41:ca:f0:98:aa:27:81:a2:
03:b9:16:64:67:a2:20:7b:e4:36:f4:f7:7c:3c:a5:
6d:fd:c7:87:ed:b2:05:96:e2:ac:7b:29:2f:25:56:
1f:c9:ad:91:c5:af:93:f6:b5:f4:d4:7c:5e:90:e5:
34:0b:1c:bd:c7:53:2d:f0:b2:16:8e:2c:ee:ab:5f:
a2:43:e3:15:33:c8:0c:c0:a5:f6:6b:73:10:eb:28:
a7:91:59:0a:38:22:c9:1a:5c:a9:5c:49:22:ca:5d:
23:b2:95:fc:a6:a4:1a:46:5d:95:60:40:0f:73:11:
81:42:c7:1b:77:71:8c:f1:f6:73:11:68:81:50:8a:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:39:7C:1D:83:CD:DC:43:3F:25:53:A8:3B:70:75:49:A3:9D:89
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/XOg5fB2DzdxDPyVTqDtwdUmjnYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
77:73:ae:89:b9:d6:ee:b4:95:b6:6d:5f:b0:c2:10:4b:d4:68:
56:1f:a6:bc:7a:59:4b:85:4a:7a:fe:4c:39:30:8d:b5:49:01:
df:be:29:31:97:ed:ba:dc:95:54:ce:f2:84:a1:5f:09:3b:65:
53:5b:06:03:d8:32:87:68:94:30:70:cf:7a:91:68:51:d8:f7:
d6:44:12:92:22:2f:0d:89:a6:e6:3d:7e:15:e6:81:c3:c8:e0:
d0:0e:e8:f6:4f:fa:97:3d:da:21:89:80:eb:74:9d:df:0c:62:
a3:4e:9d:a9:c1:ad:54:c0:ce:a9:0f:e9:a2:13:89:21:2d:b2:
23:60:93:4f:38:dd:18:23:98:e2:10:fc:aa:e7:35:f0:33:1c:
84:6c:9c:89:e7:16:56:a5:80:f5:f1:3c:ab:3a:10:21:3f:54:
12:2e:2e:34:1c:9f:63:49:50:e4:0b:bb:14:7c:58:ca:05:70:
aa:d7:4b:2d:ee:60:95:06:4b:32:95:32:c4:16:90:80:5b:e2:
da:17:c7:82:2c:b7:d7:93:b4:e8:3c:62:9b:e4:6f:02:08:a9:
0e:45:b0:64:ca:82:1a:59:54:0d:4d:4f:21:fc:38:cd:c8:10:
a3:48:87:db:97:52:44:8b:be:43:a3:7c:43:2a:a0:db:49:ff:
b3:8b:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:18 2024 by rpki-client on console-fra.rpki-client.org