Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vKuEdNsmU4VatuoS-mE7SUWazh0.roa
File: vKuEdNsmU4VatuoS-mE7SUWazh0.roa (raw, json)
Hash identifier: ibPq96Na+eWwMAmxFUPT25cO5RqjhT8WGar3et2pae8=
Subject key identifier: BC:AB:84:74:DB:26:53:85:5A:B6:EA:12:FA:61:3B:49:45:9A:CE:1D
Certificate issuer: /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial: 018779E37288FFD3A76476EE74BB9518A83C
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vKuEdNsmU4VatuoS-mE7SUWazh0.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.150.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:72:88:ff:d3:a7:64:76:ee:74:bb:95:18:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcab8474db2653855ab6ea12fa613b49459ace1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:57:80:4e:f2:98:11:59:76:a7:82:94:1f:
8b:34:89:3b:a8:b5:7a:29:32:c4:48:c3:b4:3f:d2:
e2:99:b5:71:3d:a9:5e:d5:89:bc:d1:ae:0b:e5:ae:
b7:a9:3b:19:14:73:a0:a7:b4:c7:50:4f:92:b1:ab:
de:71:4c:14:10:e4:e5:43:a2:2c:60:6b:4e:ee:44:
3f:ac:bc:f0:a3:73:9e:88:bd:26:e2:b6:d8:74:0f:
98:d5:ef:6f:ad:c2:3c:7b:e7:91:69:b8:9d:8f:31:
88:2b:bf:81:08:fe:8f:85:9d:64:55:1d:30:90:f4:
91:bc:25:23:25:82:c1:95:46:fa:5a:0e:d8:1c:a8:
cf:d0:37:a5:d7:55:41:07:1a:a8:68:0a:ce:68:11:
26:5f:9f:ae:69:f1:ac:8b:10:72:bb:45:a7:fc:0d:
1f:f9:42:a9:41:af:ab:e8:d6:49:d9:48:ae:91:c1:
a4:2f:6f:95:89:12:be:cb:01:53:e1:98:61:16:cf:
f4:4f:d2:1a:c3:ff:d0:e4:10:e9:fc:22:fd:58:6e:
9c:97:67:bc:08:1a:e9:fc:ef:f9:09:47:6f:1c:74:
6e:2e:f6:7f:b9:53:df:42:c3:71:0a:d1:8d:12:5c:
3c:d5:bf:5d:70:3a:56:34:2b:5b:a0:50:3b:d7:b3:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:84:74:DB:26:53:85:5A:B6:EA:12:FA:61:3B:49:45:9A:CE:1D
X509v3 Authority Key Identifier:
keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/vKuEdNsmU4VatuoS-mE7SUWazh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.79.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5d:ba:2d:ed:41:03:87:ec:4e:dc:7d:82:18:3d:b9:f5:e0:
bd:4d:97:a3:0e:ae:50:f4:56:5d:3d:1f:14:b7:05:7d:73:1e:
93:b0:03:9a:d5:0c:a6:c8:b1:41:75:0b:22:1b:38:df:ef:30:
88:2f:56:a9:cc:12:8e:4b:0b:47:a7:b3:0d:8a:28:05:cd:00:
a3:b0:64:05:fd:02:60:ba:17:fe:42:bb:2b:ec:6e:4a:40:35:
a6:25:12:0a:c6:7b:8c:d9:27:b8:a5:9c:05:7a:d4:32:21:10:
29:80:76:05:9c:9f:a5:4f:83:32:f9:cc:4d:7f:4e:f0:5c:13:
e5:93:ef:52:d2:5b:9a:63:8a:b6:5f:90:29:86:a2:c6:ef:72:
f2:64:65:0b:20:cf:60:a3:2c:49:81:fa:2a:18:f4:e9:b1:8b:
3a:16:24:a7:b6:39:df:4b:86:14:53:9f:0b:35:1f:08:f6:6e:
17:9d:22:34:e5:1e:06:df:e1:51:70:16:b4:a9:dc:2e:74:4e:
a1:d8:32:c3:02:59:6f:cb:66:13:46:05:f4:45:96:dc:30:e7:
73:7c:7f:99:c1:65:e3:72:41:53:80:c0:eb:b0:d2:0c:d3:9f:
11:0d:06:d8:63:a4:5e:7e:28:62:dc:76:0f:f0:a6:3e:3c:2a:
c3:eb:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org