Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/R_NjvJvoSubPTrRgGSnTLjygeWo.roa
File: R_NjvJvoSubPTrRgGSnTLjygeWo.roa (raw, json)
Hash identifier: 6WEYFjp3iEOZUwOJKqOpgVZHMkSZRt3wID8AA2j5z0c=
Subject key identifier: 47:F3:63:BC:9B:E8:4A:E6:CF:4E:B4:60:19:29:D3:2E:3C:A0:79:6A
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 01856FA6D94A3408FEFA9B04FABBA6B7B3B8
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/R_NjvJvoSubPTrRgGSnTLjygeWo.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57028
IP address blocks: 194.6.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d9:4a:34:08:fe:fa:9b:04:fa:bb:a6:b7:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f363bc9be84ae6cf4eb4601929d32e3ca0796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:07:d2:13:a3:87:a6:d9:21:bf:41:2c:31:
42:ab:b8:32:5d:97:13:a3:4d:7c:2b:62:af:8f:c8:
f6:c1:85:60:c1:b6:c6:a2:ef:60:81:bf:fa:e8:8e:
97:26:19:cd:f6:a9:da:ce:85:a3:49:b8:f1:c3:c7:
54:ba:37:c3:66:36:8c:98:e4:5a:a6:00:eb:e9:ff:
a0:b8:c9:dc:d0:88:ca:e7:01:0a:0e:11:11:7f:a6:
e8:1f:93:a6:91:42:53:a7:83:42:a7:54:ff:c4:e7:
7b:34:12:4a:9d:a0:16:cd:68:15:e2:dd:db:e6:32:
65:c0:a0:6d:d3:97:4d:28:d4:8a:5f:bc:d9:44:7f:
d4:26:7c:48:3c:08:98:50:af:68:34:b8:fd:cd:2b:
78:b6:3a:3f:24:40:10:ac:74:7b:c3:ae:78:77:96:
f7:28:44:42:20:3e:8e:16:a8:ee:90:2a:ec:e5:8f:
18:d3:d9:69:4f:64:38:1c:79:96:28:38:17:a5:f6:
d1:11:3d:f5:65:33:85:19:bf:28:33:e4:a3:27:ef:
eb:6b:1a:d6:0c:ec:4f:1d:4d:34:a6:d4:96:49:1c:
56:92:53:ae:4f:81:74:c7:1e:38:c3:99:b9:ab:ce:
ea:65:a6:84:00:c0:e9:f2:ad:28:d6:4e:80:06:89:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:63:BC:9B:E8:4A:E6:CF:4E:B4:60:19:29:D3:2E:3C:A0:79:6A
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/R_NjvJvoSubPTrRgGSnTLjygeWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.203.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7b:e2:c4:8b:9b:33:a2:8e:6c:9d:a3:7e:67:db:08:23:29:
18:03:78:d2:f6:6b:1d:92:89:8f:36:f8:04:27:e0:5e:13:9d:
e5:a4:0a:3b:3b:d1:53:f6:7c:4c:4d:35:d5:ef:ae:bd:79:de:
b9:3a:2f:0d:80:ac:05:8b:c9:26:9b:5b:7c:ac:9f:82:33:1d:
56:08:d2:a2:aa:40:38:8a:a9:40:6e:1f:1a:89:98:74:53:ba:
34:4a:70:3b:6f:88:ba:dc:bc:68:27:eb:97:79:59:02:de:3e:
f4:21:33:8f:72:11:36:ab:bf:a5:c5:5e:33:f3:bd:27:a6:30:
4e:e8:b7:7a:3b:b4:22:b6:79:dc:f3:47:5d:6a:71:00:f9:a6:
05:6e:af:05:42:1f:e4:85:5e:e2:05:d6:2c:a8:bc:91:7f:87:
46:17:bd:44:86:2c:2b:65:af:f3:b8:2a:a4:9b:f3:8c:36:f9:
b0:d6:0b:a7:14:e0:50:2f:58:d8:6d:a6:74:3e:7a:87:a9:54:
dc:e8:eb:c3:e4:9a:f4:23:e3:b9:93:94:2d:6d:56:26:06:b5:
9e:6e:41:d5:4f:6f:a4:d2:12:bd:a6:bd:fb:8c:8d:89:28:b9:
c9:40:3b:27:96:df:e3:7a:1d:8d:12:82:f0:97:b2:74:f7:05:
b4:bf:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:43 2024 by rpki-client on console-fra.rpki-client.org