Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/C7OKpEuM3mtCUXMfI_vdzvU8hww.roa
File: C7OKpEuM3mtCUXMfI_vdzvU8hww.roa (raw, json)
Hash identifier: aI03kbEqPt+txBmSm/W+h9KhnDtgMqA97b3NQe1z4Ac=
Subject key identifier: 0B:B3:8A:A4:4B:8C:DE:6B:42:51:73:1F:23:FB:DD:CE:F5:3C:87:0C
Certificate issuer: /CN=dbcab601ebb26d579ea87acfffb763ce81c98131
Certificate serial: 0185712783B146E8669569666CB1C021EB38
Authority key identifier: DB:CA:B6:01:EB:B2:6D:57:9E:A8:7A:CF:FF:B7:63:CE:81:C9:81:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28q2AeuybVeeqHrP_7djzoHJgTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/C7OKpEuM3mtCUXMfI_vdzvU8hww.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34294
IP address blocks: 194.146.68.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:83:b1:46:e8:66:95:69:66:6c:b1:c0:21:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcab601ebb26d579ea87acfffb763ce81c98131
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bb38aa44b8cde6b4251731f23fbddcef53c870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:7b:17:16:d4:8f:66:ec:4c:0a:5e:0c:2a:
68:06:97:d4:68:36:1b:4e:34:be:a1:51:27:6e:b4:
28:0a:79:e5:cf:f7:32:c1:00:10:fe:66:02:88:84:
8e:22:57:b1:bc:d6:07:e5:f6:10:4f:14:ee:c9:3b:
02:35:68:27:06:af:66:c0:59:83:0b:c5:a5:db:c5:
b7:d5:d9:e0:9b:b4:3e:64:1f:72:f0:bb:02:82:55:
4a:37:9a:e1:85:e5:71:5a:14:9a:6c:1c:98:a0:c6:
8d:73:c7:1f:f2:e4:94:2d:1d:b6:d2:6b:95:55:a2:
f5:a6:4d:f5:04:32:d2:6c:4f:f1:ed:a3:8a:89:b8:
ba:20:e2:01:b8:0e:a8:6e:8f:c9:ba:5f:44:53:34:
a6:57:f9:40:ba:5f:5e:8f:19:36:0a:4d:24:23:e0:
5a:46:2a:2a:6c:7f:30:36:c5:c9:e1:f1:d9:be:1c:
8c:3a:13:63:5c:58:da:4f:ef:dc:61:32:17:f5:8f:
86:6b:57:25:ac:3e:f9:ab:b6:4c:31:5a:3a:34:46:
b0:45:c1:12:d0:c5:0d:7e:e7:fe:7d:8a:a8:3c:f8:
8b:e5:c8:2b:aa:a4:e5:c6:11:15:0b:7c:5c:6a:94:
74:2a:11:8f:a6:fa:83:0c:aa:9c:da:81:d2:96:c0:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:8A:A4:4B:8C:DE:6B:42:51:73:1F:23:FB:DD:CE:F5:3C:87:0C
X509v3 Authority Key Identifier:
keyid:DB:CA:B6:01:EB:B2:6D:57:9E:A8:7A:CF:FF:B7:63:CE:81:C9:81:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28q2AeuybVeeqHrP_7djzoHJgTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/C7OKpEuM3mtCUXMfI_vdzvU8hww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cea886-4678-46cd-bea0-b5e188174755/1/28q2AeuybVeeqHrP_7djzoHJgTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.68.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b9:b8:ff:76:95:6a:83:75:a8:51:fa:d7:45:af:7c:e4:da:
04:3d:95:5b:b0:e4:17:06:58:de:c1:2d:ad:b7:3d:47:3a:9a:
ee:2d:a1:51:46:7c:d3:54:4e:7b:60:27:4b:05:db:d2:6b:77:
79:fa:c6:e6:72:c2:79:30:32:bb:cb:1b:fa:01:81:01:02:9a:
14:bb:7a:03:41:13:fd:a1:43:4d:a1:3f:2d:a5:23:cf:19:1e:
41:09:19:88:6a:8f:c5:07:0f:c9:ed:37:c9:20:59:42:9b:3f:
73:7e:a7:7d:99:f0:87:f3:23:dc:4b:64:13:52:ed:c8:c6:ec:
b1:38:12:70:59:ad:6a:91:15:7e:56:94:14:71:12:08:c2:66:
95:13:81:20:cc:8d:3e:ed:cf:6e:be:23:ff:b1:ba:55:fd:e8:
94:f2:09:4e:75:12:55:28:f8:b9:84:ab:e0:7f:d7:6c:e8:73:
02:09:e3:e1:c2:3a:8a:ca:f0:1c:92:e8:2c:f7:7b:3a:29:77:
4a:f9:ee:e9:ee:06:90:f9:01:15:52:37:7f:e4:0b:9e:b2:41:
ea:46:1f:73:c0:0b:57:d4:3b:3a:2e:1a:a6:2e:85:bb:7b:58:
12:a2:7f:63:59:7d:42:d8:76:d3:c9:00:d4:ad:a8:bb:62:a5:
ce:d2:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:25 2024 by rpki-client on console-ams.rpki-client.org