Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/xxBZQWEWUPbuO4nBe7JyF8i_weo.roa
File: xxBZQWEWUPbuO4nBe7JyF8i_weo.roa (raw, json)
Hash identifier: 29H6bkBO+qP5btAPQg7vMCDo6auusT+Z6ctcyEYkEgk=
Subject key identifier: C7:10:59:41:61:16:50:F6:EE:3B:89:C1:7B:B2:72:17:C8:BF:C1:EA
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 01856CEF1815FD855C945925C7438FB5FBCF
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/xxBZQWEWUPbuO4nBe7JyF8i_weo.roa
Signing time: Sun 01 Jan 2023 10:44:46 +0000
ROA not before: Sun 01 Jan 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.119.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:18:15:fd:85:5c:94:59:25:c7:43:8f:b5:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jan 1 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7105941611650f6ee3b89c17bb27217c8bfc1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:c2:7d:17:20:c7:9b:13:1d:4f:64:1a:fb:
04:f1:2e:b9:55:bf:c6:fa:b9:05:6b:74:bb:04:a5:
fc:58:b1:d8:2d:d3:bc:0f:06:9d:69:6a:ed:6a:87:
7d:44:00:4c:a6:54:ee:d2:f5:23:ca:72:a4:0e:18:
b9:f6:9e:7a:95:7a:c5:4c:54:e8:ae:fa:7e:74:8f:
a3:e7:3b:67:8d:0a:7c:26:8f:9b:e4:4b:6c:03:b6:
dd:ce:0f:47:ad:36:4b:ba:46:7b:b1:75:43:3e:24:
ab:a2:12:6b:84:e0:7c:f8:2a:fd:6f:bb:3a:be:2e:
d1:e2:61:c4:d4:ed:d3:56:4f:20:9b:27:55:fc:e8:
75:a3:f4:82:4b:3e:31:00:f4:a2:87:1c:65:bf:2a:
0d:3c:46:8c:44:cc:80:ae:24:91:76:46:ae:30:08:
8f:bd:67:fc:56:eb:27:eb:82:b4:2c:19:b3:0f:93:
2e:f5:30:9b:16:42:e1:ba:e0:90:69:59:73:2f:9d:
0b:7f:0d:b8:e2:e5:7a:03:a8:da:56:fd:45:7e:8e:
5d:cb:a5:82:4d:e1:91:9e:a0:88:14:89:39:e1:9d:
a4:ec:d5:d8:3f:56:c8:c4:f3:34:8a:11:08:7f:96:
3d:ee:65:94:19:db:81:6d:c8:88:88:e5:21:6a:bd:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:59:41:61:16:50:F6:EE:3B:89:C1:7B:B2:72:17:C8:BF:C1:EA
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/xxBZQWEWUPbuO4nBe7JyF8i_weo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:74:44:76:a8:e6:ec:d6:36:43:0c:9c:5a:3d:88:35:b5:67:
10:00:ee:0f:ca:89:74:28:38:6a:69:85:40:84:bb:03:4a:c5:
ea:71:c1:8e:21:99:6c:0c:77:35:7a:af:e0:31:68:d7:42:c4:
6b:bc:62:00:7f:82:2e:c5:09:5f:21:56:bf:d0:2b:01:2b:f0:
a2:c2:54:1c:3f:0e:94:d9:6f:89:30:21:8d:b7:52:75:3e:bc:
dc:65:85:62:a4:d8:a9:51:33:bc:68:74:cf:2d:c7:e8:85:7e:
52:45:a1:56:eb:26:8b:85:66:ec:c5:40:1b:73:f1:93:27:7b:
4a:b6:c6:c0:64:0a:c6:2a:24:10:52:aa:0e:ac:e8:d2:5b:1c:
cc:c3:85:7e:69:f7:5d:fd:c4:0a:06:31:3c:2c:4a:25:49:35:
81:ae:a7:fe:cb:c6:e9:1a:28:94:b6:4c:4c:24:6a:66:a0:38:
3f:0a:3d:64:32:1e:9c:d9:ea:07:fb:ac:c6:27:7b:0e:dc:d4:
58:c3:8c:7b:27:f8:99:5c:93:4e:94:02:44:d5:6c:84:7c:82:
2b:0d:4f:66:4e:f5:65:02:18:9c:af:36:f1:e0:5b:eb:19:bb:
cf:6a:43:14:0e:4e:ab:6c:d9:db:41:fc:6e:14:66:6d:cf:a3:
f1:af:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org