Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uK3fYVY500n60GhP80F0gp7v0XM.roa
File: uK3fYVY500n60GhP80F0gp7v0XM.roa (raw, json)
Hash identifier: XIkgp1qRmBPc2CQudDCGHL99CxnjeWlNHLHx+lqitBo=
Subject key identifier: B8:AD:DF:61:56:39:D3:49:FA:D0:68:4F:F3:41:74:82:9E:EF:D1:73
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01889A061E30ECF0B229413B1F3FA97C5824
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uK3fYVY500n60GhP80F0gp7v0XM.roa
Signing time: Thu 08 Jun 2023 08:01:12 +0000
ROA not before: Thu 08 Jun 2023 08:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 194.15.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:06:1e:30:ec:f0:b2:29:41:3b:1f:3f:a9:7c:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 8 08:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8addf615639d349fad0684ff34174829eefd173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:d9:f2:0f:1f:21:ca:4a:f2:02:4d:54:b0:
ac:04:f9:39:46:a8:4e:2e:8d:15:0a:c8:a0:ce:00:
76:6d:13:81:3b:9e:2c:b0:f2:a0:80:e2:c6:f0:28:
13:ec:e5:12:b7:46:47:11:8c:b5:d7:46:0d:01:0b:
40:51:e4:d2:2b:07:e7:48:44:d5:01:82:6d:ac:a6:
c5:bb:dd:16:55:33:0d:1f:e3:66:ab:2e:ee:35:7c:
64:d8:22:5e:19:99:4a:58:3a:53:8a:aa:a5:ff:7a:
34:82:e1:f1:80:6d:d0:2e:77:5d:3e:a2:09:c4:e5:
25:d0:14:bf:e5:83:62:3a:f6:16:3e:7e:20:90:db:
70:e7:22:79:5d:14:a1:98:12:8d:0d:82:fe:58:9d:
a2:61:39:dd:9b:6a:c3:3d:cb:10:2b:d7:82:10:6e:
e6:eb:c2:84:9f:bc:4f:40:ff:f8:1d:1f:3e:85:38:
76:dc:22:f8:6c:e6:af:84:d4:74:98:9c:ab:55:0f:
63:f6:9e:44:0e:b0:8f:45:ee:2b:53:e6:0b:88:ee:
e1:68:24:fc:94:05:e1:21:40:84:17:f2:8e:47:65:
a2:4b:24:f6:68:ad:d2:89:cf:88:6e:b2:2e:2a:5a:
ef:89:58:4a:dc:1d:04:bf:04:4c:a6:23:0d:be:38:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:DF:61:56:39:D3:49:FA:D0:68:4F:F3:41:74:82:9E:EF:D1:73
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uK3fYVY500n60GhP80F0gp7v0XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.96.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e5:45:18:b6:c1:e4:ce:13:4a:50:cf:1d:06:84:fe:9f:7d:
60:63:b9:a1:66:fa:1c:a6:02:b7:c8:6b:49:bf:30:56:1c:77:
4f:06:02:be:86:cd:1c:30:ac:4f:ec:b5:6d:62:1c:4a:82:d5:
46:0e:55:ab:44:30:fd:66:6f:17:32:84:6f:55:19:9a:e1:d7:
22:29:ee:c1:a8:0c:a6:2a:e9:3d:51:3c:ef:5b:95:a6:c7:92:
e1:b9:20:b1:87:fe:51:54:00:3d:ad:a2:50:0c:4b:56:3e:04:
bf:78:f0:b5:0b:98:e1:50:be:8f:8e:5b:53:1f:6b:19:4a:93:
10:38:96:43:a6:5b:a4:53:30:3e:fb:75:bc:ce:24:01:b7:1b:
53:6b:e0:0d:87:33:cd:94:e4:1a:50:1c:70:1d:41:45:12:3d:
4d:1b:b3:f7:0a:e3:de:61:23:53:3f:81:93:a5:d5:ff:69:84:
df:f5:e9:e6:ff:92:09:46:16:d1:76:02:d4:ab:13:c6:57:7e:
a3:eb:e2:fd:86:e5:63:81:85:3a:83:e6:d1:83:f1:42:fc:ad:
14:48:a0:5a:d6:c4:e9:0f:79:ba:3a:2a:71:3b:5c:db:32:ca:
c3:e0:ff:64:41:b1:aa:2a:29:33:09:04:a6:21:de:dc:91:f6:
a0:e8:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org