Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa
File: Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa (raw, json)
Hash identifier: WV43Q0fMRrdmbJ/25doJcJX14bqSOW9jwak1pR905+s=
Subject key identifier: 0A:DD:55:0D:BD:1B:2A:B5:DF:95:74:35:A0:FF:D1:BE:1D:04:82:50
Certificate issuer: /CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Certificate serial: 018B86C679105A371CB50F6A96DEBD29F901
Authority key identifier: F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa
Signing time: Tue 31 Oct 2023 17:27:15 +0000
ROA not before: Tue 31 Oct 2023 17:27:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41171
IP address blocks: 194.26.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:c6:79:10:5a:37:1c:b5:0f:6a:96:de:bd:29:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Validity
Not Before: Oct 31 17:27:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0add550dbd1b2ab5df957435a0ffd1be1d048250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:8a:60:4b:d3:fe:f8:46:b5:71:ed:6d:9c:
15:70:b7:a3:7f:b6:c3:e8:a2:42:6d:54:5d:96:bd:
60:bb:92:1c:74:0d:12:48:95:24:cf:87:3b:27:eb:
a1:bc:1e:fe:bf:ed:e7:23:dc:20:14:af:61:a7:0d:
8e:cf:d7:ad:ef:d2:a4:4b:e2:f8:d9:da:61:0d:27:
2c:76:0a:f5:d2:a0:b0:3f:98:07:9e:2a:05:6a:12:
47:2b:b8:e3:3f:cb:84:84:6a:c5:92:fa:a3:18:36:
93:a4:7f:ed:50:6e:ed:d9:02:0c:e1:00:e3:e6:b0:
c0:35:91:75:a3:ee:a4:a6:b1:87:dc:c5:fe:be:79:
1f:6b:b5:78:bc:ea:58:cb:c2:cb:b9:40:37:45:b9:
11:05:ed:c7:f6:60:d6:00:cb:98:ee:fb:4e:c2:a6:
2c:da:e3:12:2e:4e:b2:4b:55:27:90:82:5b:ee:0e:
88:9b:02:92:87:f3:e1:68:4b:60:72:22:2d:76:69:
14:e3:d5:d7:21:29:a1:44:c0:6f:33:56:5f:25:95:
87:86:67:99:ef:e8:7a:6a:42:6e:a0:79:9a:b4:40:
07:06:2d:a0:d8:3b:0d:9f:fe:3b:b6:4d:8d:03:50:
61:36:f7:d9:8d:78:78:a0:0c:5e:0f:f6:89:54:da:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:55:0D:BD:1B:2A:B5:DF:95:74:35:A0:FF:D1:BE:1D:04:82:50
X509v3 Authority Key Identifier:
keyid:F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/Ct1VDb0bKrXflXQ1oP_Rvh0EglA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.218.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6a:0d:36:97:b3:86:bc:8f:fe:73:4f:c8:fd:c8:56:c8:fa:
88:9f:a5:76:7b:a0:59:c4:0e:9f:68:64:02:c7:18:95:d9:40:
55:8b:ac:2f:3c:3d:47:fe:7d:d1:d1:f8:64:8c:d6:29:20:db:
3d:0a:06:da:6f:d2:73:a9:d3:54:9a:35:94:a1:15:9a:6f:e7:
05:84:f8:06:71:62:6f:18:1b:33:7d:b6:de:a8:47:f1:c1:b9:
e2:43:f0:ac:dc:45:9e:d9:be:8a:b8:80:d3:c5:70:fc:59:6c:
f3:77:41:68:0e:74:57:0a:b6:91:5c:f0:bb:64:ce:40:5b:fe:
e5:31:76:c8:00:52:05:a8:f0:41:c2:eb:23:22:17:c8:6f:e6:
c1:07:3f:13:30:31:89:9e:c4:1d:21:44:c1:44:ee:3d:b3:c1:
03:22:e0:79:6c:fe:36:ec:3c:c8:8b:ad:c9:29:12:25:b8:61:
e9:9d:b4:57:aa:d8:11:9d:04:3a:cf:fd:2d:3f:f0:fb:b0:2e:
eb:ee:9e:25:8e:88:ed:bd:5a:05:32:c3:cb:d5:57:39:81:5b:
02:c3:a8:84:27:cb:b9:74:e0:2a:fd:9c:73:22:01:10:2f:0d:
b8:a2:8f:64:2a:d9:9a:f0:25:70:75:02:f2:1f:9e:a7:b5:77:
3b:6e:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:44 2024 by rpki-client on console-fra.rpki-client.org