Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/AmyjA5JKssQewisMZgf3rKp7TMQ.roa
File: AmyjA5JKssQewisMZgf3rKp7TMQ.roa (raw, json)
Hash identifier: hjGPKnCSIaJn6vNbKZGUT8Wm0l1GVNtVHmZYLctup3Y=
Subject key identifier: 02:6C:A3:03:92:4A:B2:C4:1E:C2:2B:0C:66:07:F7:AC:AA:7B:4C:C4
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 01856F66C4E137A5F21DE5BDEB90A656370B
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/AmyjA5JKssQewisMZgf3rKp7TMQ.roa
Signing time: Sun 01 Jan 2023 22:14:44 +0000
ROA not before: Sun 01 Jan 2023 22:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 193.56.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c4:e1:37:a5:f2:1d:e5:bd:eb:90:a6:56:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 22:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026ca303924ab2c41ec22b0c6607f7acaa7b4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:96:af:11:c6:50:05:df:c7:f7:2f:42:b5:
27:3e:35:b5:71:1c:6d:4c:e7:c2:a1:96:6e:68:d5:
b1:a5:a7:d9:08:d7:0d:de:9c:69:5d:f9:e5:aa:96:
0c:fe:5f:67:be:ae:d2:66:50:bd:eb:17:94:e9:ea:
6c:56:5d:49:44:27:b6:d8:09:1a:83:c9:9f:9b:c5:
90:55:90:ab:f2:e2:4a:e0:54:ba:09:93:13:86:c5:
68:0c:86:6b:62:21:36:59:18:7c:fd:e2:72:4c:ec:
c4:ec:bc:ba:e7:2d:04:a4:57:f3:26:36:2f:f4:03:
8b:cb:f1:02:40:5a:78:33:f0:49:31:f2:cd:a4:e0:
d3:1c:b3:5c:94:a2:e9:25:16:af:1a:fe:54:bf:9e:
bf:60:71:83:af:a3:65:90:3c:00:f1:9f:c8:57:a5:
20:17:b7:0f:f3:d2:67:3b:26:b5:f5:6c:8c:3b:04:
4d:5c:3d:2b:13:b9:9a:79:6e:a2:e8:bf:93:73:c9:
aa:a8:e8:b0:91:93:fc:56:a5:0f:6e:b5:fa:74:36:
0f:30:b3:9c:a9:c1:9a:5e:c1:39:dc:ba:65:27:62:
5d:3f:dc:50:a6:f3:80:90:d6:1b:8d:81:b2:3b:89:
d6:07:5e:3f:88:29:00:2e:55:2a:ad:68:95:c1:26:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:A3:03:92:4A:B2:C4:1E:C2:2B:0C:66:07:F7:AC:AA:7B:4C:C4
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/AmyjA5JKssQewisMZgf3rKp7TMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fa:58:05:3b:db:1a:91:46:e0:49:50:09:4a:1c:1a:f2:0d:
73:9d:7b:80:ed:e5:e7:96:b8:b5:2e:bb:09:79:cc:b8:c2:13:
90:8c:57:7a:78:d6:fd:75:1f:83:c8:13:43:30:fb:1f:1f:04:
4f:2c:ba:88:50:97:1b:71:69:5f:1a:be:ba:a4:fa:ef:05:11:
fa:a6:db:7f:ba:41:f0:75:20:7c:b6:c7:92:f3:1a:03:50:0a:
0c:23:ae:3b:94:dd:b7:88:b3:2c:1e:4e:77:2a:74:67:0f:67:
21:02:d2:15:89:1d:89:81:90:ca:cb:c0:96:a1:a9:d6:f8:48:
eb:57:4f:e6:77:05:40:cf:5f:55:df:9b:85:d0:01:02:8f:56:
b6:89:ba:18:62:b4:74:67:d1:82:b5:8d:76:da:93:e4:c3:18:
3b:4b:15:ee:eb:f1:ae:2a:8d:15:7d:8f:a3:23:df:1a:e4:73:
9c:bd:9e:51:58:42:60:57:2f:e6:6f:fb:14:31:13:71:bd:ab:
0b:8e:91:ad:fa:90:67:a2:11:71:8d:bc:70:b6:3e:ef:b3:53:
1d:27:a5:9f:7f:a6:78:07:19:da:b4:7c:cf:b3:31:2c:dc:0c:
1b:10:e9:95:3f:f6:0e:ac:25:74:e9:02:c0:3e:d0:87:74:89:
ce:34:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:46 2024 by rpki-client on console-fra.rpki-client.org