Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/PL5yVxKHKULe_DF3Z-K6pRvrrkI.roa
File: PL5yVxKHKULe_DF3Z-K6pRvrrkI.roa (raw, json)
Hash identifier: HQzg843ttqqPJXoL2IlV7/ERqZxJGlxLAFie/XD5swg=
Subject key identifier: 3C:BE:72:57:12:87:29:42:DE:FC:31:77:67:E2:BA:A5:1B:EB:AE:42
Certificate issuer: /CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Certificate serial: 01856BEEED60AB0ABEBC2D69EDDC87B3D6AE
Authority key identifier: D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/PL5yVxKHKULe_DF3Z-K6pRvrrkI.roa
Signing time: Sun 01 Jan 2023 06:04:58 +0000
ROA not before: Sun 01 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201094
IP address blocks: 194.9.70.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ed:60:ab:0a:be:bc:2d:69:ed:dc:87:b3:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Validity
Not Before: Jan 1 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cbe725712872942defc317767e2baa51bebae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:2b:68:09:49:8e:77:ad:1c:fc:2c:c2:43:
0a:50:c6:11:65:c5:6a:81:ae:4a:6f:9d:87:b3:89:
ce:87:7c:e3:d8:cf:94:d9:4a:59:97:f2:83:27:5f:
44:22:c9:9c:21:26:1d:14:67:85:a5:c9:a9:13:e8:
4c:0d:eb:89:66:02:8c:cc:aa:5b:ad:3e:ed:d6:8e:
56:38:b9:c7:04:28:32:a3:52:40:a7:8e:01:4f:a6:
60:a4:89:b1:59:94:21:b5:65:a9:4d:00:90:95:3a:
6a:30:7a:bb:f4:87:b6:7d:d3:fb:61:60:ba:6b:dd:
20:db:66:8b:dc:39:b4:7c:44:65:e3:5a:94:a0:43:
71:5b:fc:9a:76:fd:40:79:c2:22:cf:58:fb:e8:ca:
60:d5:91:87:4d:3b:27:65:48:08:1a:0f:20:e6:38:
31:4c:51:5e:5d:db:89:da:87:49:3b:42:de:2f:d8:
37:78:92:39:9e:1d:15:bb:f3:d7:78:2e:ee:dc:27:
ca:30:df:bb:ad:d5:06:2b:84:d9:e0:f7:be:a7:01:
1b:71:67:90:c5:b1:8d:83:ff:a9:60:68:1c:fc:59:
e7:d2:00:25:a5:4e:7d:cd:81:fc:e9:e3:e0:af:06:
fb:4a:e9:28:1b:a1:ab:f3:e0:2a:59:f0:6a:d2:c9:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:72:57:12:87:29:42:DE:FC:31:77:67:E2:BA:A5:1B:EB:AE:42
X509v3 Authority Key Identifier:
keyid:D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/PL5yVxKHKULe_DF3Z-K6pRvrrkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.70.0/23
Signature Algorithm: sha256WithRSAEncryption
26:ff:7e:b0:60:e6:a6:fa:8f:4d:0e:cc:0f:37:3d:f6:8d:68:
41:c4:bd:00:b6:6d:b3:0c:39:79:8e:2f:15:32:33:f7:4e:2c:
b5:19:c4:7d:ee:7c:44:03:55:e2:8b:df:c5:97:df:a2:e8:7d:
5e:14:dd:20:bd:5f:28:a0:4c:56:5a:96:29:89:b7:c9:16:54:
16:2d:7c:e0:31:67:d2:cf:07:44:8d:6f:b2:af:76:4b:da:7b:
6d:8a:aa:58:ee:3a:ca:df:99:17:c8:a0:03:fa:65:7c:ab:24:
e3:3f:a5:89:b2:dd:93:f6:3c:a2:e3:bf:e7:d8:cd:f2:b1:7e:
28:b2:70:56:99:56:2d:22:86:6c:c8:58:75:a6:d7:e7:7d:f9:
5e:24:1b:5e:eb:f1:d2:6c:a2:94:09:68:35:77:3d:d8:08:2d:
80:dd:d4:b0:b1:49:a2:52:7b:a2:a5:e4:5d:79:23:b7:4c:c6:
d1:b4:8c:b3:73:8c:9a:07:96:18:69:7e:b3:7f:c3:40:aa:91:
e0:12:38:90:64:fd:d0:45:bb:c4:d1:88:e1:60:b9:c2:65:27:
d4:c5:7c:9f:cd:cb:93:2a:89:38:da:db:91:8d:bb:a4:a8:56:
e0:71:85:a9:2a:53:4b:ab:4a:7f:86:c1:c5:cc:bd:43:77:1b:
76:f6:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:56 2024 by rpki-client on console-fra.rpki-client.org