Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/Hu7oDGuJsPjLa-OJvGO2f-RJCmg.roa
File: Hu7oDGuJsPjLa-OJvGO2f-RJCmg.roa (raw, json)
Hash identifier: b8yvzeDT3vpd3hdovtphyXY3nd7t/j/5wNFLyd3i6HM=
Subject key identifier: 1E:EE:E8:0C:6B:89:B0:F8:CB:6B:E3:89:BC:63:B6:7F:E4:49:0A:68
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CCE7CB2066A9CCCD39E73D28E95EB
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/Hu7oDGuJsPjLa-OJvGO2f-RJCmg.roa
Signing time: Mon 02 Jan 2023 15:14:57 +0000
ROA not before: Mon 02 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49391
IP address blocks: 194.90.84.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:ce:7c:b2:06:6a:9c:cc:d3:9e:73:d2:8e:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eeee80c6b89b0f8cb6be389bc63b67fe4490a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:83:86:86:68:bc:7d:3f:43:d0:34:80:5f:
4e:01:e2:7a:c2:1a:8c:96:b3:8a:f8:a2:eb:36:46:
ed:57:5d:98:7e:75:52:a0:d0:02:1a:32:81:41:76:
e3:4f:00:d0:dd:0b:cc:f7:f5:ab:d8:f7:99:ab:af:
6d:f0:47:4b:d0:8b:e6:83:20:7f:5f:21:8e:4c:c6:
8b:ea:6a:bf:2f:4e:66:d3:00:16:86:4e:cf:cc:04:
b1:67:cc:5c:73:5f:6e:c4:ca:98:2f:a7:cb:ae:d4:
2b:56:62:d7:fb:ac:2a:5a:69:e3:2d:93:b4:c0:2f:
fd:5b:1d:9c:25:a5:6d:25:f5:91:11:4f:ed:c4:88:
3e:32:a8:ff:fb:90:69:30:ce:f1:0b:be:07:55:f6:
45:6f:64:50:e2:e6:20:81:c9:05:b5:47:12:00:e5:
33:d0:7c:18:03:6b:cd:4c:bd:52:30:c5:0f:d1:f1:
66:6a:22:15:8e:36:ca:f9:88:0c:c1:f4:bc:a5:a6:
80:c5:93:66:a3:19:e7:a4:8c:b3:44:39:03:ff:a4:
5f:16:36:9b:e0:87:0a:57:0b:b2:49:ca:41:99:10:
7b:8a:66:8d:5a:ee:ef:89:89:08:cd:49:8f:c7:ce:
bd:e6:d3:e8:11:7e:80:b7:13:ca:6e:19:ec:f7:b0:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:E8:0C:6B:89:B0:F8:CB:6B:E3:89:BC:63:B6:7F:E4:49:0A:68
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/Hu7oDGuJsPjLa-OJvGO2f-RJCmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.90.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:b8:40:22:d1:e3:e3:8f:c2:41:07:df:32:bd:82:f6:33:e4:
c3:49:e0:4c:03:57:c1:67:98:a5:c7:68:a3:3e:45:fa:12:28:
12:63:f9:5e:38:f8:c5:96:28:50:6b:58:6c:38:03:aa:78:48:
52:93:d1:b3:1c:0f:35:0e:2a:1c:42:17:2a:a4:5f:1e:45:61:
d5:7c:a4:ec:3b:93:b8:60:b8:65:1c:e7:23:63:b4:79:63:65:
82:20:9a:47:6b:a5:fa:2c:59:19:5d:37:18:ac:5f:98:b5:e6:
ea:0f:50:f3:8c:69:9d:88:27:de:15:61:95:50:53:66:c0:ba:
32:6f:8b:37:16:cd:68:b4:23:49:5d:07:2d:38:e8:48:ef:f1:
56:a3:71:ff:20:0a:bd:be:55:3a:41:9e:ff:10:41:ac:40:4b:
2e:1d:67:2d:2a:30:a6:6e:71:78:6f:b4:90:66:e7:fc:9d:82:
00:9e:47:43:ca:2c:39:37:c1:2a:80:cd:20:d7:a1:47:67:b8:
39:a5:f4:db:b4:73:8a:1e:4b:41:de:69:2e:6f:39:5a:6d:ff:
55:58:60:ea:4e:d8:5c:da:68:1e:f5:ac:74:53:d1:33:01:85:
de:03:1e:a8:74:bf:7d:de:b3:68:16:d2:eb:36:e4:8f:76:56:
f8:03:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:44 2024 by rpki-client on console-ams.rpki-client.org