Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/ID79dB2dJ2gnMwjsmAnDVx8JxKM.roa
File: ID79dB2dJ2gnMwjsmAnDVx8JxKM.roa (raw, json)
Hash identifier: TvooVUFPMD8m1pJB9bsRioZiHiPwKD2g9LfgBGASYlA=
Subject key identifier: 20:3E:FD:74:1D:9D:27:68:27:33:08:EC:98:09:C3:57:1F:09:C4:A3
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01856CAF171D95D26B2E23511E48CEB36E71
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/ID79dB2dJ2gnMwjsmAnDVx8JxKM.roa
Signing time: Sun 01 Jan 2023 09:34:52 +0000
ROA not before: Sun 01 Jan 2023 09:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51540
IP address blocks: 194.110.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:17:1d:95:d2:6b:2e:23:51:1e:48:ce:b3:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 1 09:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203efd741d9d2768273308ec9809c3571f09c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:a0:e0:1e:12:4d:66:8d:d4:ed:f0:64:66:
7d:7e:9e:5e:2a:e0:d2:06:ae:a5:a0:e9:bf:4a:27:
41:0b:64:a4:f1:31:6c:2d:e5:93:a6:6a:50:fe:30:
d5:db:65:50:57:5b:43:35:1a:8a:cb:0b:bb:7f:9f:
96:4d:f0:ea:b0:e9:d5:f4:d4:f9:5f:33:57:07:10:
3c:a1:21:f2:50:09:8e:12:41:33:79:c5:a1:41:3c:
17:d5:11:99:2a:19:b5:f2:a4:90:1d:93:f1:79:ae:
e9:92:fa:cd:4b:f0:2b:96:d2:87:33:38:d1:2f:7f:
90:7b:8f:d5:df:10:ed:15:b5:5b:9b:4b:e1:0b:e6:
e7:84:90:20:85:0a:25:3e:a5:0f:e3:f8:c7:91:b3:
3c:93:c6:6e:ad:6e:36:37:14:20:70:d4:ea:5c:85:
f8:c5:0b:e7:09:7b:16:46:26:5e:60:6d:b6:57:82:
e3:82:79:f3:9e:48:72:78:6a:bc:7e:f2:56:21:3c:
ed:6d:6e:bf:e6:4c:90:b3:0f:3b:91:f9:f9:3f:8c:
95:54:56:13:fb:6e:05:41:7e:15:35:08:00:f7:09:
c5:37:e5:91:26:86:32:ef:42:2a:96:e5:e3:b2:37:
4f:95:f3:e2:6c:01:0f:59:98:9f:60:3f:11:69:a9:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:FD:74:1D:9D:27:68:27:33:08:EC:98:09:C3:57:1F:09:C4:A3
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/ID79dB2dJ2gnMwjsmAnDVx8JxKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bd:8c:08:a5:48:72:15:18:c9:b9:1e:ca:a6:02:76:8f:27:
81:8b:b5:57:b9:a7:b6:d3:83:ae:26:12:c9:43:7c:5c:4a:e4:
44:82:c5:71:8d:b6:4a:ea:06:c1:d0:91:e7:0e:d5:85:fa:3c:
06:95:6d:fc:6c:3e:fc:90:27:34:a6:7d:fd:eb:75:e2:94:bf:
bd:67:cf:e9:e7:f1:11:ce:2e:63:5b:74:11:f1:2c:75:73:f0:
a5:61:6c:13:a1:b7:94:2b:26:0d:fa:3e:ea:0a:03:6a:b4:55:
a5:22:46:3e:23:b6:93:e1:fc:9d:1b:f9:6b:52:28:18:fc:36:
b3:d5:e2:7e:2c:50:05:cd:1e:8a:fe:d6:f3:86:67:04:a8:e3:
e6:c8:49:8b:5a:a2:fd:c7:cd:fa:02:56:24:4b:53:02:7a:51:
11:9c:d7:09:65:f3:c7:01:fa:63:88:7d:ad:e8:47:8d:23:ac:
c2:e4:cf:a9:59:f0:12:fd:96:ee:62:3c:5d:43:30:8e:ec:48:
28:99:2a:5d:e0:78:f2:5e:ed:08:d4:66:0b:66:f2:43:1f:f9:
e0:8b:65:96:cf:aa:e3:21:f7:83:df:23:03:74:8f:96:15:da:
d2:80:ee:70:b7:0c:72:38:1e:16:c5:72:f5:45:72:f5:34:2e:
dd:aa:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-fra.rpki-client.org