Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/7vY-yDsQs1oeSjbrEbTFsmf-ES4.roa
File: 7vY-yDsQs1oeSjbrEbTFsmf-ES4.roa (raw, json)
Hash identifier: ckk62pIkqqbgKBguSS8qzpq5gpYy0kpbWlV/kN/kDk0=
Subject key identifier: EE:F6:3E:C8:3B:10:B3:5A:1E:4A:36:EB:11:B4:C5:B2:67:FE:11:2E
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 01856E01B48EA440936F676B970BE71A75A1
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/7vY-yDsQs1oeSjbrEbTFsmf-ES4.roa
Signing time: Sun 01 Jan 2023 15:44:43 +0000
ROA not before: Sun 01 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198423
IP address blocks: 192.41.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b4:8e:a4:40:93:6f:67:6b:97:0b:e7:1a:75:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Jan 1 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef63ec83b10b35a1e4a36eb11b4c5b267fe112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:b6:72:ce:1b:d5:bc:60:74:91:b5:31:80:
b5:6e:89:f6:8f:e1:88:fe:d4:9a:23:ad:7e:5a:40:
36:98:14:06:a5:c5:53:9b:56:b3:36:27:a5:63:e9:
13:77:2b:a7:5e:e6:77:ae:90:2f:fa:0e:3b:c7:3e:
c5:ac:5a:05:bf:77:2a:89:70:87:89:a9:09:ac:a3:
71:b2:12:5c:de:34:dd:23:57:40:d8:df:7a:6e:aa:
c9:6f:a3:18:58:f5:32:ee:30:e4:5f:25:cd:df:fc:
fb:3a:22:7a:67:e4:b9:9f:b1:78:90:8d:aa:76:0e:
a7:0e:be:ca:cf:79:48:40:2f:bf:89:21:52:ce:d1:
93:b8:c0:d2:c1:b3:69:05:22:f7:3a:44:2a:12:c9:
2e:b6:4f:9e:4f:75:3c:b1:71:18:f4:c1:cd:b0:bd:
7e:87:97:39:57:b8:15:6c:17:a1:80:ea:ed:8c:0b:
16:79:1e:a8:3b:ee:e2:eb:81:26:ac:33:86:80:6b:
95:6e:b7:c0:a2:fb:94:d0:0c:ab:17:0d:66:c5:05:
d5:d0:4c:f0:4d:2a:bb:62:02:72:c1:b0:3e:3b:1c:
70:06:f0:67:d2:d2:cc:df:f9:f0:1b:59:38:f7:67:
cc:fd:cb:8d:a4:c3:b0:1a:4c:d5:06:05:6b:c6:4c:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:3E:C8:3B:10:B3:5A:1E:4A:36:EB:11:B4:C5:B2:67:FE:11:2E
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/7vY-yDsQs1oeSjbrEbTFsmf-ES4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.41.216.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:08:92:68:11:c3:fd:49:bc:06:ba:72:eb:5d:61:52:7f:
8c:3f:5f:c1:ed:ee:dd:59:7a:87:29:cc:68:d2:83:0f:1f:f0:
90:e6:28:93:51:14:55:6b:ed:bd:59:02:dc:05:fa:a4:61:e6:
49:b2:85:bf:7c:75:c5:b6:74:4a:e8:d3:1b:de:aa:ad:17:0a:
33:c2:05:eb:3d:42:0a:22:52:d3:d8:4e:0b:c9:a1:f9:e9:45:
94:59:8a:6a:36:81:27:72:0f:77:f7:d6:2e:c2:84:38:f1:90:
9b:d6:4f:32:45:44:22:e5:b5:09:d3:3e:83:b8:1c:56:95:6d:
09:cd:46:63:4e:b5:3a:41:c8:ef:39:a7:79:87:5e:65:a9:e5:
ed:ac:2f:b2:2a:2d:aa:07:af:d4:e5:91:c6:b9:13:d8:c4:7d:
b7:f2:c0:d7:ee:ca:54:e0:58:5c:89:dd:78:44:29:67:05:5d:
a4:69:92:39:c3:75:05:d8:74:6e:7e:c1:eb:ce:ce:e8:f5:e3:
cd:67:a1:40:ac:13:8c:9a:07:12:61:e6:93:3d:ed:db:eb:2b:
ff:0d:5c:85:78:73:98:0b:c8:24:59:b6:3b:76:2f:0f:7b:52:
39:d0:ff:90:5d:45:0a:47:56:fc:ca:c5:50:02:78:95:18:01:
16:03:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:00 2024 by rpki-client on console-fra.rpki-client.org