Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/lSSS086E8QZMPsGs2v0w2vd0TEo.roa
File: lSSS086E8QZMPsGs2v0w2vd0TEo.roa (raw, json)
Hash identifier: 0vgUADzjtjRmIStb+gMUb/JQZeUjmWvpb7t5qFnZam8=
Subject key identifier: 95:24:92:D3:CE:84:F1:06:4C:3E:C1:AC:DA:FD:30:DA:F7:74:4C:4A
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: 01857127773A1FA9BA57C6CAC4B5EAD24B55
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/lSSS086E8QZMPsGs2v0w2vd0TEo.roa
Signing time: Mon 02 Jan 2023 06:24:49 +0000
ROA not before: Mon 02 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:77:3a:1f:a9:ba:57:c6:ca:c4:b5:ea:d2:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Jan 2 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=952492d3ce84f1064c3ec1acdafd30daf7744c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:0e:18:5b:02:25:74:d8:23:74:43:33:6a:
29:ed:07:5c:8a:f1:55:84:da:73:0e:76:21:55:e0:
82:33:0a:95:a9:ac:4f:d7:26:4c:f2:9f:97:26:20:
61:c2:d8:20:41:78:92:86:b1:ae:41:fd:75:e5:ee:
9c:17:9a:00:e2:14:cc:f0:c6:78:5c:c5:84:ee:fc:
4e:21:ab:d5:11:fa:e9:06:81:4c:07:79:83:15:32:
ed:77:99:0d:b2:6f:7a:2d:a1:38:88:54:73:5e:2a:
de:0e:40:5c:a7:8e:91:09:bd:0b:dc:e5:8f:c0:d2:
83:a1:23:b5:c2:51:41:fa:3b:2e:16:ce:41:a1:60:
d6:47:24:da:b1:5f:91:9e:3d:16:fc:0b:a5:8e:33:
74:cb:8e:fc:54:2c:b9:0b:34:e1:69:0f:1b:17:b2:
d6:18:1e:49:08:fb:06:18:66:17:cc:88:29:19:02:
71:9e:57:92:16:7e:6a:a1:34:9f:c0:fb:74:8f:7b:
95:35:36:b3:7f:d4:2e:2f:71:3c:7b:b1:d7:44:87:
21:cd:68:45:63:5f:67:c2:ca:ee:c0:c3:96:6e:c0:
0f:69:0d:94:df:e4:4b:56:66:c0:9c:94:1a:40:53:
a9:8e:8b:7a:3a:e2:d2:df:7e:02:d7:f8:53:56:8c:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:24:92:D3:CE:84:F1:06:4C:3E:C1:AC:DA:FD:30:DA:F7:74:4C:4A
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/lSSS086E8QZMPsGs2v0w2vd0TEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:34:2c:14:08:23:4b:d0:82:27:fc:7a:59:2c:c9:60:a2:00:
1d:8b:89:b0:ce:c4:be:a1:17:1e:3f:59:4a:1e:4c:de:5c:32:
5a:5e:e8:2e:9b:fc:dc:cd:97:19:22:50:77:0b:46:a8:b7:7c:
51:39:2d:7e:6e:54:86:aa:a2:6f:30:29:07:a2:9d:24:76:30:
48:a8:8a:91:ee:ec:6d:ce:5c:e5:29:7b:bc:d5:75:17:20:04:
e0:2d:37:77:55:59:ef:eb:fc:d3:5a:86:6c:3c:d3:0c:d2:b7:
5d:df:c8:d8:e4:ef:e2:c8:ca:6e:ae:37:90:12:a6:4b:8f:99:
84:ea:38:7d:ff:97:e1:08:9e:3e:f4:6d:ee:9e:45:c5:f5:c4:
65:c1:76:95:43:0c:30:eb:a9:55:a4:02:6c:c3:da:d0:fa:d5:
61:a1:69:0b:32:c8:9b:2f:29:9b:18:2d:cc:5e:26:22:e4:db:
ef:e3:a9:bf:ce:c8:96:61:6a:a0:37:f0:0d:44:d2:63:1f:24:
fd:34:8a:82:3a:cf:f8:87:1a:3d:4a:58:c5:63:3d:84:08:89:
b0:a6:37:66:2c:e8:ca:be:4c:1e:f9:83:03:8b:72:31:5f:55:
00:97:50:ec:dc:07:65:86:09:2e:1f:b3:d2:83:3c:c2:67:0d:
cd:6f:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:13 2023 by rpki-client on console-ams.rpki-client.org