Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4pS6eJIvVIQ-UXcg7fjKOnPmoN8.roa
File: 4pS6eJIvVIQ-UXcg7fjKOnPmoN8.roa (raw, json)
Hash identifier: UXpplxdHbPPZ0fUFapB/N9jkz2+OpHhAHhdLaMLuEog=
Subject key identifier: E2:94:BA:78:92:2F:54:84:3E:51:77:20:ED:F8:CA:3A:73:E6:A0:DF
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0185720363110A2929883467FB7D8279DE6A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4pS6eJIvVIQ-UXcg7fjKOnPmoN8.roa
Signing time: Mon 02 Jan 2023 10:25:02 +0000
ROA not before: Mon 02 Jan 2023 10:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53363
IP address blocks: 194.4.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:63:11:0a:29:29:88:34:67:fb:7d:82:79:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 2 10:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e294ba78922f54843e517720edf8ca3a73e6a0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:30:95:a7:2b:c2:5c:6b:39:cc:8e:00:5b:
6c:df:34:cb:31:3a:73:16:df:88:65:8f:e4:6a:e3:
34:2e:0d:8e:90:cc:c1:67:10:62:f7:b6:8c:c8:7e:
66:e8:81:7b:2c:6a:95:a5:ea:ee:be:ce:a9:f3:7d:
81:f3:71:60:6c:1e:f8:3d:1b:3a:62:92:0d:d8:2f:
4e:78:d2:0f:7e:d2:69:94:88:bc:dc:fd:1d:30:d2:
73:4e:2d:4d:60:2d:4d:b1:b7:69:3b:39:5c:8c:b4:
0d:a9:8d:b1:10:c3:fd:50:ed:72:ef:a5:9a:45:c3:
f7:e5:46:61:91:b0:8d:ad:36:77:24:56:cb:dd:86:
e5:27:e1:22:61:15:1f:4c:4f:65:f4:78:2a:09:7d:
0d:06:05:70:67:06:cd:d3:a7:ee:af:49:4a:08:00:
b7:ed:20:e4:08:fd:1d:8a:4b:67:da:8a:9d:82:5b:
ec:4b:3f:74:93:82:ed:ab:53:37:cd:d2:dd:50:56:
0c:c3:c8:35:93:3a:5b:ed:4d:91:5c:da:47:f8:5e:
1d:09:be:71:56:75:a0:b9:40:e8:2f:49:91:47:f9:
62:f1:12:da:3c:c9:9f:b2:bd:f8:0a:ff:f4:ff:51:
5d:1c:4c:58:67:1a:9c:24:8e:b1:0b:19:f2:3e:30:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:BA:78:92:2F:54:84:3E:51:77:20:ED:F8:CA:3A:73:E6:A0:DF
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4pS6eJIvVIQ-UXcg7fjKOnPmoN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.50.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d2:14:fe:f1:f1:a8:2d:12:de:ab:66:a6:17:38:31:d6:c4:
40:8e:7c:62:7d:50:7d:8e:28:1e:8d:12:87:98:45:13:98:23:
32:93:d7:91:34:8a:6d:79:55:92:cd:79:e8:e0:e9:7f:f5:9e:
5e:aa:5e:20:f5:8b:2e:bd:6f:dd:ec:c0:06:10:84:9c:12:f8:
21:ae:6a:41:ce:85:e3:2b:e1:51:6f:be:af:d5:45:15:c4:64:
dc:f0:e1:e5:9f:c9:7d:ad:29:4b:b1:9e:67:a7:fa:ea:4c:2a:
6b:94:2f:12:6a:66:b1:4d:a5:f3:d4:ab:b7:67:33:95:8b:fd:
5a:b5:ac:7a:48:62:c7:0d:f2:c4:80:67:8b:db:23:e1:a7:d3:
de:c2:14:8d:90:d2:a1:c8:fa:5c:e1:8f:ae:86:64:78:2b:f7:
96:0f:7a:a5:5d:af:d6:ee:6b:f7:57:2c:3c:f9:3a:37:14:b9:
b4:b4:78:d6:f5:88:29:04:e8:bb:46:1e:3f:54:d3:91:f9:ac:
22:e9:fe:6f:80:07:b5:3a:d1:8d:dd:5d:73:51:94:2c:bc:ef:
68:b8:8a:4c:55:cb:fc:ae:99:ab:56:71:39:4e:01:85:2a:e4:
ea:9a:41:d8:e0:a0:56:85:f0:0a:e0:00:a1:02:13:09:7e:1e:
f8:67:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org