Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/pXdbKX1yT8q-ppGIkFLwBoZEXD0.roa
File: pXdbKX1yT8q-ppGIkFLwBoZEXD0.roa (raw, json)
Hash identifier: OzJL1somNPgJtkdi1EoFs2whKk2Ps+ekXyZhpDq9rHA=
Subject key identifier: A5:77:5B:29:7D:72:4F:CA:BE:A6:91:88:90:52:F0:06:86:44:5C:3D
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 01856F14D09D13A71DE84FE50738EB4CD70C
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/pXdbKX1yT8q-ppGIkFLwBoZEXD0.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28725
IP address blocks: 194.50.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d0:9d:13:a7:1d:e8:4f:e5:07:38:eb:4c:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5775b297d724fcabea691889052f00686445c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:43:6e:43:8c:f1:be:e7:41:ae:9e:5c:f9:cb:
fb:95:6f:07:03:b2:67:eb:ed:d6:9e:bd:3a:c6:a9:
55:58:83:c2:82:89:75:f6:58:83:2c:a4:5c:93:93:
11:78:8e:da:6d:56:35:67:d5:10:fd:65:d4:45:21:
11:38:ba:57:27:37:84:d7:9e:27:da:07:d8:30:2e:
23:d1:21:8e:8e:3f:48:8e:b2:a9:fa:6f:5c:af:45:
d3:48:8c:e7:2d:07:ec:5d:db:7c:f3:c9:95:93:88:
a8:cb:f9:b8:2f:d0:ec:14:5a:d1:54:8b:ca:14:7b:
c3:5c:59:a1:d0:56:e0:33:f5:85:93:0e:cc:4c:42:
5c:14:36:90:e3:e2:5a:ff:6a:34:08:5c:d4:a9:de:
3c:65:d5:0f:fa:0b:bf:6e:25:d5:98:1e:10:e2:38:
08:5c:87:b5:27:81:41:8e:7b:8c:fb:e3:de:3a:34:
bf:28:93:f4:5f:40:eb:31:dd:0c:31:cf:43:1e:64:
f1:c4:81:f1:bc:9b:5c:ae:1c:6f:22:e9:69:01:5e:
bc:6b:5e:c9:6b:49:cb:e6:69:8c:23:ca:b8:6e:93:
83:e7:89:c2:5a:93:b5:5d:ea:76:d8:c8:a0:34:2c:
2f:6c:86:72:3a:6b:60:b7:40:0f:2f:07:01:a3:c7:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:77:5B:29:7D:72:4F:CA:BE:A6:91:88:90:52:F0:06:86:44:5C:3D
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/pXdbKX1yT8q-ppGIkFLwBoZEXD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:88:9e:99:30:f7:e2:d1:d7:62:f4:88:62:b7:74:70:24:c6:
3e:7b:4f:4a:c4:09:c1:ce:28:7d:0d:89:18:f2:50:cc:8f:c6:
34:6c:14:a1:04:7a:a3:bb:81:21:9a:36:67:1b:f6:65:16:5e:
16:35:47:91:cf:4d:5a:66:d6:aa:a0:cd:65:61:57:08:65:77:
49:e7:86:ee:7b:8d:63:8b:0c:53:f3:13:0b:cd:f8:52:6f:44:
50:24:5d:d3:ac:89:b9:d9:cc:29:e3:99:08:75:2f:e9:8f:37:
a5:c9:4f:cb:79:03:8f:d7:df:20:b7:fb:7b:26:a4:4d:7c:21:
c0:8e:7a:d3:1c:21:ad:d3:00:e9:6b:96:4e:ea:90:b0:5a:cb:
b4:23:f4:1d:6f:89:48:7b:3a:d7:9c:7f:ea:4c:3e:f2:82:1b:
ee:70:dd:71:18:c0:53:41:bb:40:ae:b0:d0:e8:d6:86:f1:61:
cf:96:6c:3b:2f:29:0c:aa:cf:fb:92:0d:d4:23:dd:00:7d:b0:
4b:1b:71:06:58:4a:8f:d8:40:9b:41:26:56:04:44:22:63:8a:
82:1b:e2:c9:e8:38:e6:23:69:a7:10:ba:88:87:42:50:6a:85:
67:4a:c4:df:c7:5b:4e:68:08:b3:9a:a0:46:86:d4:98:3a:e4:
5b:6c:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:05 2024 by rpki-client on console-fra.rpki-client.org