Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/6ANB0BN9-tMY_DHSjgHOE4pKaME.roa
File: 6ANB0BN9-tMY_DHSjgHOE4pKaME.roa (raw, json)
Hash identifier: vXOdm8D51mftOrShnwR2ux3wsUaZXWcuHbZuyqw0EnM=
Subject key identifier: E8:03:41:D0:13:7D:FA:D3:18:FC:31:D2:8E:01:CE:13:8A:4A:68:C1
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 01856B6E9FD620EFA13CEB2F7B5EE698E7DC
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/6ANB0BN9-tMY_DHSjgHOE4pKaME.roa
Signing time: Sun 01 Jan 2023 03:44:49 +0000
ROA not before: Sun 01 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3334
IP address blocks: 194.148.40.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:9f:d6:20:ef:a1:3c:eb:2f:7b:5e:e6:98:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 1 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80341d0137dfad318fc31d28e01ce138a4a68c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:1e:39:7a:ab:46:01:f4:63:55:3f:47:4e:
52:12:bf:27:64:a4:ac:a4:23:e1:4a:9a:17:d6:92:
c2:23:33:6f:f1:26:eb:88:0d:95:78:75:d0:02:05:
08:5e:d6:27:19:80:8c:7c:3a:4f:df:d9:a5:29:0a:
b4:17:13:67:e8:d7:6f:38:b5:69:fa:92:05:f9:1c:
82:1a:1b:67:91:e5:07:1d:32:f8:a4:a5:f6:90:68:
4c:fd:da:fb:9d:37:a8:bf:62:e0:8c:ec:d4:2f:db:
c6:58:34:d8:2d:a6:91:76:89:96:64:51:a5:08:48:
b2:a2:36:d5:62:f6:1f:98:de:6f:4b:a0:74:0a:37:
9d:6f:49:9c:80:c1:b6:b6:61:43:8f:68:70:07:15:
91:d2:4f:ee:6e:43:df:b7:0d:9a:0b:d4:79:3c:9d:
51:85:0b:d6:c3:af:ca:56:58:29:fc:fc:75:9c:e0:
01:1c:90:d6:c1:c8:4c:42:54:81:cc:73:7f:46:3d:
ee:db:c7:f7:3d:39:a2:82:43:11:d8:bc:4c:16:f3:
7b:39:08:13:4d:64:74:87:5f:ee:2c:62:dc:4d:ca:
71:5a:60:0b:f6:79:3e:0e:16:2a:51:00:33:ae:8c:
92:63:d0:eb:2f:dd:75:d1:8a:8b:66:ce:df:29:73:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:41:D0:13:7D:FA:D3:18:FC:31:D2:8E:01:CE:13:8A:4A:68:C1
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/6ANB0BN9-tMY_DHSjgHOE4pKaME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.148.40.0/23
Signature Algorithm: sha256WithRSAEncryption
84:fc:14:84:94:63:5a:b4:94:86:c0:30:64:49:3e:5d:bb:3d:
1a:d5:66:fb:e2:c0:5e:23:63:3e:c4:05:ab:a3:b8:eb:8f:0b:
30:0f:19:d3:a6:9f:a9:a1:e4:5b:cd:e4:2b:a5:a8:2c:36:68:
e3:0e:a9:0b:0f:26:0b:86:40:37:61:6a:6f:6d:58:1f:73:1a:
b6:f7:89:ef:92:bc:73:1b:73:69:34:aa:82:ab:9e:d8:bc:2c:
2c:e3:53:bf:5d:c5:5f:64:40:a6:c7:25:2e:c0:16:f8:7c:03:
a0:5d:63:fc:8c:51:ce:4f:d9:eb:34:4f:fb:d9:0c:f8:46:0a:
5a:59:02:68:91:f2:d9:f4:11:2a:45:27:af:81:15:6a:c9:b5:
1b:ae:c8:ab:1b:57:7a:d7:27:3e:28:b3:dd:1b:3a:ed:c0:66:
1c:5e:80:1a:36:e6:95:9a:67:4d:82:d4:cc:27:9b:26:50:7e:
ad:49:f2:4f:bb:49:75:59:aa:c5:d3:55:66:ff:15:5c:8e:fc:
e6:c2:22:6d:c1:87:45:2f:18:2b:13:92:07:84:45:7d:3d:db:
6f:13:0c:64:92:1f:36:c0:5b:fa:5a:0e:72:77:01:24:cb:9f:
a8:13:ac:35:50:ca:84:6a:98:21:80:a1:48:19:a0:5d:00:e5:
5d:c7:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org