Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/24CSywvGJ-YD5HCdCwuEBev27ag.roa
File: 24CSywvGJ-YD5HCdCwuEBev27ag.roa (raw, json)
Hash identifier: ztM4YR4AFjVtZktO+V7SNhdkMjpgYl/LTAm31RAa6No=
Subject key identifier: DB:80:92:CB:0B:C6:27:E6:03:E4:70:9D:0B:0B:84:05:EB:F6:ED:A8
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 01856C1CC7E2CE8860A9D79C2849832ED822
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/24CSywvGJ-YD5HCdCwuEBev27ag.roa
Signing time: Sun 01 Jan 2023 06:55:03 +0000
ROA not before: Sun 01 Jan 2023 06:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.15.16.0/24 maxlen: 24
194.15.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:c7:e2:ce:88:60:a9:d7:9c:28:49:83:2e:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Jan 1 06:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db8092cb0bc627e603e4709d0b0b8405ebf6eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:0a:00:53:46:a9:1c:c1:d7:c8:fd:5b:b3:
04:a0:0b:aa:d2:22:07:40:8d:68:1c:05:5b:57:d4:
da:6f:7b:d7:ae:68:96:f9:1f:f9:d2:99:56:cc:fd:
9f:a0:fc:f5:90:78:3f:e3:c0:09:66:df:b6:1b:35:
2a:0a:2b:85:f3:61:af:32:9a:f9:d6:ce:e1:ea:0b:
a7:57:ce:18:fb:e1:68:bb:2d:1c:34:47:be:82:d6:
84:c4:4c:fb:c4:e1:bc:f9:68:66:d1:73:77:37:51:
42:02:cd:f5:7d:08:9c:4d:88:0d:ed:49:3c:3b:e2:
27:32:3d:d9:cb:56:23:d9:5e:67:14:75:6a:7f:49:
c5:96:d8:dc:2d:a6:1a:76:4b:b1:29:52:cf:4f:79:
60:b6:ad:4c:a3:02:9c:02:e4:7e:c8:d8:41:c5:15:
1f:79:44:2f:a8:d1:55:42:df:94:75:20:83:b2:07:
61:30:1f:74:7f:cc:e4:37:e6:24:b8:0f:cf:01:5d:
30:5a:3b:fb:54:1f:2f:f6:d6:bb:b6:b2:e1:6f:e8:
73:63:20:74:2c:7e:d3:2a:07:28:29:0e:e8:16:2e:
6c:a7:c8:4b:63:6c:59:ec:1b:8c:01:92:3a:75:8c:
0c:1e:e2:33:59:64:b4:58:5c:0b:db:c2:47:81:8a:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:92:CB:0B:C6:27:E6:03:E4:70:9D:0B:0B:84:05:EB:F6:ED:A8
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/24CSywvGJ-YD5HCdCwuEBev27ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.16.0/24
194.15.18.0/24
Signature Algorithm: sha256WithRSAEncryption
72:05:17:ce:76:d4:de:06:e9:72:46:ca:90:1b:6b:6b:16:52:
ac:25:29:d8:c7:57:6d:ec:cf:9a:3c:d0:89:d9:ca:1e:d3:38:
94:1e:0c:e4:56:91:97:e0:a3:20:6d:20:40:c3:1d:34:99:2a:
ae:1d:0d:96:4e:fc:40:18:61:95:73:d5:75:bb:2b:57:fe:95:
41:e1:c5:eb:b3:d3:97:00:28:9b:94:ff:4e:cf:4e:31:e9:cf:
1f:2d:9c:37:69:e0:59:06:33:32:cd:86:91:72:d0:31:61:e8:
88:89:c1:a6:bf:d8:ed:0e:cf:67:42:92:d4:e8:7a:3d:d2:1d:
55:8a:08:f3:67:71:f3:62:33:20:9c:e5:73:db:a4:89:76:d2:
14:0d:25:6c:8d:e2:9c:33:45:49:fb:c3:1b:47:cf:a7:59:45:
1e:a7:e0:cc:cb:6f:30:24:9b:66:0d:ba:2d:9b:44:c7:9f:63:
ee:00:b6:00:76:21:79:03:2f:ba:7f:4f:29:97:30:36:9c:55:
d6:4e:ee:29:1c:c2:40:a5:ad:59:b4:d5:9d:40:44:63:ff:2a:
9c:f8:b1:ea:eb:20:8d:c1:fa:8f:0f:c2:a9:d1:53:52:82:97:
29:72:a6:e5:09:b2:bf:fa:c2:a6:08:ac:7e:0b:6c:ab:eb:0c:
86:68:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:48 2024 by rpki-client on console-ams.rpki-client.org