Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/B1Oi4ZhKjl9FUM73uzbEI_WJZF4.roa
File: B1Oi4ZhKjl9FUM73uzbEI_WJZF4.roa (raw, json)
Hash identifier: s16XHDCNWZMEIuash869c0lXBrbneVMAcSeAYgLN0ac=
Subject key identifier: 07:53:A2:E1:98:4A:8E:5F:45:50:CE:F7:BB:36:C4:23:F5:89:64:5E
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 018570305C72E14A595B20EBCB0927331A2B
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/B1Oi4ZhKjl9FUM73uzbEI_WJZF4.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206546
IP address blocks: 194.0.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5c:72:e1:4a:59:5b:20:eb:cb:09:27:33:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0753a2e1984a8e5f4550cef7bb36c423f589645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:ab:ee:d1:17:93:95:25:6d:06:c5:f1:e9:
fd:f2:1c:a1:8e:3e:8c:7b:e1:14:18:ae:9c:fc:7e:
87:08:82:97:11:b4:1c:4d:ad:2a:44:c9:ed:18:da:
79:39:24:9c:73:f7:ad:c9:f5:8b:39:e1:a8:cb:04:
69:7b:fa:ef:db:52:a2:41:c4:55:e0:87:60:a9:06:
c8:c8:af:36:97:a0:5c:89:99:a4:4d:60:f7:6f:c4:
b3:69:43:3e:49:38:71:fe:ca:d9:c3:69:fb:b8:02:
0d:4f:26:f7:b6:b8:11:2e:7c:22:8e:fd:a2:bb:fc:
4d:fc:59:08:f8:dc:7d:31:f6:00:7d:aa:70:e2:4d:
0b:c1:6e:e2:a6:0a:35:99:87:9d:e3:60:75:62:3c:
93:4f:e6:51:73:bb:9e:8a:79:c7:6f:2d:ef:0d:b0:
61:02:3f:ab:0e:a6:95:39:d5:52:c6:72:d5:9b:1b:
e5:52:9b:1d:27:5f:44:06:dd:99:62:16:cc:93:9b:
47:4e:71:a1:04:c4:18:8b:4c:4e:83:40:14:85:d4:
7a:11:5a:39:84:2f:88:04:ff:c9:4d:ea:13:1e:9a:
18:58:b3:85:2c:a0:81:6d:59:13:b1:6c:a4:47:f0:
cc:35:5d:b9:32:41:b8:f2:48:3e:04:28:91:50:87:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:A2:E1:98:4A:8E:5F:45:50:CE:F7:BB:36:C4:23:F5:89:64:5E
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/B1Oi4ZhKjl9FUM73uzbEI_WJZF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
52:22:e7:61:40:82:d1:26:23:d0:f4:fe:3e:46:93:28:d4:7d:
f1:1a:a7:9e:28:a5:60:a7:15:96:24:9b:bc:b8:ae:24:00:3d:
5c:e2:dc:6e:0d:4f:a8:70:a8:ea:93:aa:20:2b:54:e9:98:56:
7b:dd:ab:fa:eb:79:b0:12:8c:38:71:9b:02:93:4f:4d:47:b5:
0d:82:0d:f8:f8:95:52:d9:43:eb:d0:0b:03:d3:8d:d1:1f:ee:
4f:1a:55:f8:fb:99:1d:19:72:f9:66:53:4d:97:68:a0:62:ca:
ce:7f:09:6e:fd:ea:5c:67:15:5a:26:1b:45:40:2c:ec:b1:4d:
d1:ae:c3:25:26:a0:6e:84:6e:ca:c6:79:40:8e:7d:94:b2:70:
f5:08:8c:8d:dd:25:6f:31:22:50:89:c3:2f:9f:4d:d8:f2:d7:
88:03:58:e9:59:1b:0a:46:fa:41:0f:77:2c:50:97:2f:b3:0b:
4d:87:3d:68:86:b1:18:05:3a:68:64:e2:79:eb:e2:17:a5:62:
9d:6b:c9:61:75:c5:30:c7:2a:42:af:85:7a:f0:96:7f:92:22:
7e:a4:61:1d:d0:7f:de:84:d5:e7:b0:87:d6:34:8a:3a:53:fc:
a0:62:c0:9d:be:5c:44:0f:0d:c9:df:02:f0:e7:4a:ac:a5:56:
fd:c3:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:44 2024 by rpki-client on console-fra.rpki-client.org