Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/F0lUHnLpc8bcNZ1KC2iUpR7iFX0.roa
File: F0lUHnLpc8bcNZ1KC2iUpR7iFX0.roa (raw, json)
Hash identifier: VO4x+O+F8W2yObYD7VcRJspNnPUzXKhxrYgMO7ssAA0=
Subject key identifier: 17:49:54:1E:72:E9:73:C6:DC:35:9D:4A:0B:68:94:A5:1E:E2:15:7D
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 01856D53FFB4C8D2C758B99B2DA818997FFA
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/F0lUHnLpc8bcNZ1KC2iUpR7iFX0.roa
Signing time: Sun 01 Jan 2023 12:34:59 +0000
ROA not before: Sun 01 Jan 2023 12:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 194.62.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ff:b4:c8:d2:c7:58:b9:9b:2d:a8:18:99:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Jan 1 12:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1749541e72e973c6dc359d4a0b6894a51ee2157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:88:fb:6f:9a:2f:37:67:c7:0b:f1:ea:e6:
0e:0e:fc:47:26:83:54:90:52:97:df:e2:cd:69:cf:
a4:2c:9a:c4:de:02:36:b2:8b:c0:3f:86:51:ce:bb:
b3:dc:13:f9:17:d5:a8:21:01:29:3b:45:63:d2:d8:
68:18:9c:d4:89:78:c3:d1:e8:b1:96:09:16:74:f7:
03:f3:26:bf:5c:2b:99:e3:47:91:2e:43:29:3f:7e:
df:1b:fd:00:d5:49:4a:fd:d2:b4:5d:c5:bc:c8:39:
b2:b7:f4:37:7b:ee:e2:1f:da:86:d1:5a:9d:a1:29:
05:bb:e6:a6:27:f5:47:dd:5c:13:83:7e:35:54:79:
fd:f3:51:10:22:63:db:90:84:ca:41:fa:ee:c5:67:
ab:03:ab:f7:d6:a5:68:5c:62:2f:81:3a:02:10:1d:
d0:1c:a9:9b:04:29:54:ff:c0:88:8a:a4:de:dd:d8:
85:75:22:9a:bb:85:40:4a:c9:d1:5d:0b:ef:37:a0:
55:de:62:8e:1b:07:83:0c:e0:ba:d9:4f:ee:5b:eb:
4e:d2:da:9d:08:26:83:83:a3:43:28:ea:88:a0:d8:
ff:bb:11:ac:56:f7:25:a0:36:cb:1b:dc:4a:d5:e1:
70:d4:8c:4f:05:ff:28:4c:7e:9a:4e:24:b4:08:bd:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:54:1E:72:E9:73:C6:DC:35:9D:4A:0B:68:94:A5:1E:E2:15:7D
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/F0lUHnLpc8bcNZ1KC2iUpR7iFX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.43.0/24
Signature Algorithm: sha256WithRSAEncryption
08:63:b8:88:15:d3:19:7b:ee:4e:64:49:7f:a9:1f:a1:39:d5:
8c:84:9c:3d:44:6f:15:8e:5e:79:87:69:f5:97:0c:ed:5b:f9:
3d:f7:9a:d7:de:dc:26:b6:1d:f4:dd:7d:db:d0:6c:9f:ee:27:
70:ae:56:d3:08:89:1c:fc:c5:1c:08:54:a6:62:73:48:27:ee:
da:05:30:9f:a4:cd:cf:d5:29:4d:60:a7:37:6c:b5:90:47:ad:
e8:5d:6a:b3:c9:39:8d:68:49:44:5b:92:d5:fd:2a:07:e8:b2:
14:03:54:e3:a0:91:a9:f1:40:67:d5:f1:0d:8f:bb:77:61:16:
6e:1a:3d:04:bd:ec:f1:3f:16:8f:db:ac:e0:a3:96:89:cc:38:
eb:51:44:5b:c2:7d:78:60:c7:1c:23:29:41:1b:d0:f6:89:96:
87:2f:c7:32:0f:fd:dd:a3:a9:8c:2b:af:86:54:ea:ee:61:10:
02:2c:f4:db:4f:10:ae:2e:7f:64:68:c0:3a:63:11:7a:0c:ed:
7d:24:bd:88:6c:62:78:e6:fb:f0:ca:fb:bc:ba:9f:c7:a2:43:
15:b0:30:2d:f9:ec:c6:26:41:fe:20:52:39:84:a2:26:9c:c0:
21:59:41:f9:52:00:e3:68:35:e0:cc:94:89:20:0d:75:96:31:
16:87:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:02 2024 by rpki-client on console-ams.rpki-client.org