Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/xv6uYYzrf_FKqZbDiR5MZNk9i90.roa
File: xv6uYYzrf_FKqZbDiR5MZNk9i90.roa (raw, json)
Hash identifier: M946YvDPOVdI0n8z9jHScGl/7wdhFbPTXeZUn5tl95A=
Subject key identifier: C6:FE:AE:61:8C:EB:7F:F1:4A:A9:96:C3:89:1E:4C:64:D9:3D:8B:DD
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 018570B096DA6AF2D7FB7AC288935D3FE9D8
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/xv6uYYzrf_FKqZbDiR5MZNk9i90.roa
Signing time: Mon 02 Jan 2023 04:14:59 +0000
ROA not before: Mon 02 Jan 2023 04:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12329
IP address blocks: 194.24.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:96:da:6a:f2:d7:fb:7a:c2:88:93:5d:3f:e9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jan 2 04:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6feae618ceb7ff14aa996c3891e4c64d93d8bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:01:87:16:64:07:c5:98:f8:14:41:32:ea:
d7:01:a7:3e:c1:25:62:72:ba:ef:92:50:0a:27:c2:
93:d6:f0:a4:55:38:40:b7:7b:59:9f:e8:b9:70:9c:
75:51:59:b9:3c:51:33:b0:fd:f5:16:b6:14:be:cf:
70:5a:f9:a7:9a:68:72:7a:26:af:31:62:12:b4:9e:
aa:4c:5f:63:a1:87:a2:1b:1e:e4:c3:74:e1:b3:6d:
7b:b5:24:82:a6:f6:70:63:7c:be:7f:3e:76:bc:d6:
a3:39:f9:de:04:ae:ce:73:ac:ed:40:37:d4:d7:5e:
f2:08:12:a1:f5:d0:a3:84:25:0f:a3:52:90:05:03:
96:54:12:da:dc:66:41:7f:d5:08:6d:d6:b3:a4:65:
90:d7:a3:52:c5:14:6e:e0:cb:36:ec:25:29:c9:7d:
46:0f:02:c3:53:9a:c2:8d:51:e8:73:38:8c:fc:e7:
f3:52:a6:7b:d0:46:7d:59:42:3d:a1:94:9d:46:0b:
7f:36:57:02:6a:7a:e8:ab:27:db:1a:de:49:b4:d0:
e8:82:57:e4:5d:06:96:f3:d1:85:97:4f:6e:4e:c4:
9d:4f:af:af:d5:78:d1:ac:e3:5d:a3:0e:18:e3:e5:
04:ee:f2:ce:5f:4a:79:f1:f2:dc:a9:6d:9d:4f:b5:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:AE:61:8C:EB:7F:F1:4A:A9:96:C3:89:1E:4C:64:D9:3D:8B:DD
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/xv6uYYzrf_FKqZbDiR5MZNk9i90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:08:80:89:8e:69:15:81:08:1a:1d:f1:14:c3:cc:b4:d6:c5:
d6:e5:2a:e1:68:99:98:47:fa:30:b2:d8:42:14:0d:10:91:f2:
88:19:23:90:82:84:40:12:03:7f:fc:20:f8:6e:09:71:c8:18:
d3:63:82:b2:4f:06:07:f5:f2:33:5f:44:39:05:e8:e2:62:68:
f3:63:e6:af:9b:74:56:a1:fa:66:39:ac:34:e2:1a:e1:fa:57:
85:a7:03:c5:f5:62:86:03:0d:03:6c:a9:ef:b0:03:bb:2f:5e:
0d:e8:34:cc:6a:35:44:45:a0:f6:d1:f7:d9:ca:56:e0:6e:1a:
d6:22:26:21:eb:c1:a2:51:1a:73:00:0a:da:17:c9:26:a2:10:
5e:43:05:c3:1a:b7:7b:ca:81:c1:c3:99:39:10:c0:46:ab:a8:
49:69:75:d3:0e:05:e3:94:7c:b2:2d:ba:b0:b7:fc:0f:ee:2b:
b5:38:70:7c:53:c0:af:7d:a7:e1:83:2a:37:f6:00:08:b0:56:
b8:76:d0:41:6b:e9:f4:1d:e5:d3:50:c7:52:dc:1d:c9:1f:28:
e7:32:d1:27:37:71:75:19:5e:89:a3:d7:77:4f:8e:4c:69:b4:
69:7e:4a:b0:bc:51:d0:42:be:37:29:78:4a:ea:7a:d0:c2:c3:
bb:6a:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:13 2024 by rpki-client on console-ams.rpki-client.org