Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/9gVmYrzVGhJ6-1bxZG2jAFC0ThQ.roa
File: 9gVmYrzVGhJ6-1bxZG2jAFC0ThQ.roa (raw, json)
Hash identifier: wn4vzzbosu/qW2xIv4QpqAIsdb4sphbmRsKHlnGh0V0=
Subject key identifier: F6:05:66:62:BC:D5:1A:12:7A:FB:56:F1:64:6D:A3:00:50:B4:4E:14
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 018573E88C2C200D1565E6547E5429A6FED8
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/9gVmYrzVGhJ6-1bxZG2jAFC0ThQ.roa
Signing time: Mon 02 Jan 2023 19:14:58 +0000
ROA not before: Mon 02 Jan 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56575
IP address blocks: 194.36.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:e8:8c:2c:20:0d:15:65:e6:54:7e:54:29:a6:fe:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Jan 2 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6056662bcd51a127afb56f1646da30050b44e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:ea:f3:54:b5:41:26:86:ff:4b:9e:f7:f6:
e0:7f:e2:84:ce:df:84:87:27:76:00:24:73:a0:c6:
9d:ce:36:ca:ea:30:80:10:38:a6:3f:bd:f3:8a:c5:
c9:5c:0b:53:72:08:09:b9:48:73:cf:40:b3:0e:4a:
86:49:d1:53:c7:4a:49:07:96:fc:7f:0d:52:d8:90:
4e:95:d5:b4:8a:25:71:c8:3e:bf:42:df:e3:38:30:
85:2d:7c:b1:c7:db:07:48:24:2b:29:65:ac:52:86:
91:7d:c9:ae:be:74:1b:60:04:01:ee:11:2d:83:97:
d5:31:1b:54:79:4e:4a:69:f2:b8:bc:94:86:0d:0c:
ed:32:ea:46:d5:cc:54:38:f8:26:f4:bb:07:ab:11:
7d:60:1f:aa:4e:42:77:4e:99:5a:00:8f:31:89:ba:
6e:02:4e:36:c4:ff:dd:d7:71:2d:a3:f1:23:19:d9:
de:27:b4:65:43:82:bd:5a:6e:b4:22:3c:59:8a:f5:
23:3d:b8:07:0c:52:01:53:cb:f1:4a:fb:51:18:01:
fd:fb:0d:44:5c:62:88:83:42:69:3c:70:42:8b:50:
40:27:e2:5b:8b:94:6d:da:5d:c0:37:01:2c:45:cf:
b8:7b:52:70:4e:d7:35:41:65:3e:b3:cb:6b:ec:69:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:66:62:BC:D5:1A:12:7A:FB:56:F1:64:6D:A3:00:50:B4:4E:14
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/9gVmYrzVGhJ6-1bxZG2jAFC0ThQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ea:06:f5:24:5e:fd:69:05:d2:af:c1:02:00:88:57:77:20:
1a:45:51:20:48:45:aa:62:26:1d:7c:b7:00:b5:d8:47:d5:f3:
23:78:ea:2f:f0:35:1f:e2:4a:83:b2:47:47:ee:ed:6e:cc:cb:
b8:75:31:a5:07:13:97:98:1b:ec:40:bc:10:27:5e:aa:ea:c0:
fb:e4:65:1c:ff:42:4c:6a:79:f2:9b:bf:e4:07:a1:ff:33:68:
93:54:ab:02:94:70:5f:9a:69:9e:f0:cc:7a:d9:d7:3b:4b:17:
9b:b6:ec:bf:9c:89:a8:b4:24:29:c3:84:cb:1f:0d:3d:bf:f6:
11:9d:c5:c2:7f:f5:60:7c:d1:35:5f:f4:09:e3:f6:57:f1:91:
34:4b:9c:38:89:10:1a:f6:2a:bd:c4:89:6a:ed:54:3b:e0:0c:
8d:fd:5c:31:03:81:58:d4:94:a0:b8:98:a0:36:e1:5e:8f:c7:
6e:3b:fb:5b:a3:80:ba:81:17:3a:80:d3:23:18:30:c9:8c:56:
76:68:88:88:9a:5e:72:37:26:d8:0b:f1:64:bd:c5:f5:94:75:
d4:b6:b7:92:fc:f3:b2:bd:07:da:05:6d:c2:84:41:b8:26:4c:
2a:56:e9:76:c7:2b:ed:a9:3c:5f:0c:3f:73:09:ca:ad:61:9e:
c7:ef:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:58 2024 by rpki-client on console-fra.rpki-client.org