Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/QlAUSGCuZnhgzaLc7CEfI39jogo.roa
File: QlAUSGCuZnhgzaLc7CEfI39jogo.roa (raw, json)
Hash identifier: yCCO2e4xTlzsfo+ojryA8XogRHe4IcbTJvi1+UEnQoc=
Subject key identifier: 42:50:14:48:60:AE:66:78:60:CD:A2:DC:EC:21:1F:23:7F:63:A2:0A
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 0185714C1BFCDC9BD48DB08345AE3817E00E
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/QlAUSGCuZnhgzaLc7CEfI39jogo.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1b:fc:dc:9b:d4:8d:b0:83:45:ae:38:17:e0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4250144860ae667860cda2dcec211f237f63a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:0d:16:0a:b2:c0:e1:49:13:bd:ac:c9:dd:
69:4f:5e:4e:e3:29:51:86:99:41:3e:a9:3c:fd:4f:
48:97:71:a7:06:18:d8:2b:c1:32:28:54:82:e7:3f:
cb:c4:ea:82:56:0e:ce:ae:04:d8:ac:19:4d:27:7c:
59:a8:7f:f9:7e:f8:01:b2:89:6e:4d:47:6e:ac:b3:
f0:9b:8e:19:33:6b:42:34:41:0e:7e:4c:a4:4e:51:
41:e5:a1:59:a0:3f:56:6a:6a:1d:0b:0b:48:53:63:
2a:cd:49:e3:61:03:86:b9:da:ac:74:5e:37:e6:ba:
6f:94:3f:f6:90:d7:bb:30:07:f7:b3:0d:82:f2:9b:
0b:37:4b:6f:72:cf:14:23:92:c4:99:0c:d0:e5:68:
b4:4f:27:1a:33:3e:4f:6c:68:d2:fe:1a:2a:44:7b:
86:3a:90:a1:df:75:53:17:56:a7:ba:9e:27:c3:0d:
c4:d8:69:47:b5:ea:23:bf:00:f2:a3:e4:f6:3b:13:
a5:60:a0:24:cf:dd:9d:92:ed:83:39:50:01:fb:5c:
1d:bc:1d:69:48:e7:d3:1a:26:ad:c4:b2:9a:1f:d5:
19:1e:e0:b5:ff:65:ed:bc:38:ac:cf:47:ee:46:9a:
f4:24:30:4d:d6:0b:2f:f9:de:36:2e:8d:0f:2f:97:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:14:48:60:AE:66:78:60:CD:A2:DC:EC:21:1F:23:7F:63:A2:0A
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/QlAUSGCuZnhgzaLc7CEfI39jogo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8a:be:8b:32:cc:d6:e3:b3:6c:cd:0d:98:a6:f5:d1:bd:10:
d6:5f:cf:4d:7e:5b:85:51:5b:7f:70:f3:b4:aa:77:1e:de:16:
e4:3c:bd:f5:69:c9:71:ba:ad:05:f0:45:e7:85:b7:6e:72:ba:
ab:ca:f0:85:a0:c9:c6:d2:1f:ed:9c:a0:76:6e:6a:41:1b:87:
a0:1b:27:39:12:08:2c:d5:08:cb:37:bd:be:30:ed:54:bf:7e:
32:34:ea:74:48:cd:af:e1:ee:db:f0:ff:72:fd:cc:56:ff:a9:
55:c7:90:2e:39:25:37:f1:8a:47:8f:20:4b:e0:48:b7:67:d1:
3d:83:29:e7:04:3f:9b:06:e1:c3:f0:eb:04:1c:ac:04:7a:eb:
e9:66:6f:bf:8e:87:cc:d7:56:a0:9d:dd:41:87:be:83:31:9e:
0e:ac:1c:f1:5e:e1:e5:65:26:bd:3f:44:07:3d:31:e0:95:a7:
2e:5c:bf:40:4b:cb:59:77:6f:9c:b5:4b:e7:2f:fd:20:da:28:
e7:f0:5d:fc:9a:2b:30:f7:07:4f:18:3c:01:79:c5:41:de:ee:
8a:32:7e:ce:48:d0:5a:3d:91:2b:02:62:a3:3e:e2:03:4e:a7:
11:60:d0:a1:9a:2c:5c:1e:f4:11:5b:ec:e0:67:d4:4a:dc:d1:
60:f6:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:39 2024 by rpki-client on console-fra.rpki-client.org