Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9hSkFsJ2IZPipJkth6e_1MyTiZ4.roa
File: 9hSkFsJ2IZPipJkth6e_1MyTiZ4.roa (raw, json)
Hash identifier: Z1/h4c61LSmPIl3O/IDVDUe265TkuqGK6qUENZ25byw=
Subject key identifier: F6:14:A4:16:C2:76:21:93:E2:A4:99:2D:87:A7:BF:D4:CC:93:89:9E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01871527DD332D66DD0C0CE2891A1CF3BB7D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9hSkFsJ2IZPipJkth6e_1MyTiZ4.roa
Signing time: Fri 24 Mar 2023 19:45:46 +0000
ROA not before: Fri 24 Mar 2023 19:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135330
IP address blocks: 194.156.98.0/24 maxlen: 24
194.156.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:15:27:dd:33:2d:66:dd:0c:0c:e2:89:1a:1c:f3:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 24 19:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f614a416c2762193e2a4992d87a7bfd4cc93899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:d3:a2:d7:a8:b5:e3:08:7f:8f:3e:a3:b6:
fd:2f:e8:5b:d3:7b:73:80:c8:9e:a5:32:6c:52:92:
ba:11:27:96:9e:ca:84:b8:e5:61:02:f1:0a:28:37:
23:6c:c8:1e:0e:e8:7e:e9:f0:b2:8b:29:4f:a3:57:
29:c0:aa:a2:25:49:31:5b:fd:61:20:b4:47:4f:4e:
0c:32:e0:17:6b:6c:43:8b:3b:28:b0:ab:5f:2b:c9:
c6:1e:c1:0c:e7:db:ff:a1:de:8b:4d:af:4f:87:53:
c2:5c:1a:9b:fe:a8:b5:92:55:f4:ca:86:7b:4a:88:
88:a0:03:b5:95:79:66:26:7e:6e:b5:41:42:38:60:
50:ee:67:aa:24:6a:14:ba:28:ea:cb:63:70:5a:1a:
96:f8:c0:26:19:e5:42:27:7a:ac:54:07:35:f6:69:
85:af:73:b8:0e:00:de:48:57:f9:81:27:01:9a:fb:
29:2f:60:85:a2:d3:61:fd:64:52:00:b2:f5:f0:2e:
f9:2e:8c:f2:d2:ea:41:6e:9b:56:5c:92:ae:cc:9f:
4c:56:a0:ad:44:e3:47:fa:e6:9f:ba:69:9f:7e:33:
76:5d:6a:07:f6:70:c7:87:57:48:f7:32:57:5c:db:
7c:e8:aa:97:d0:86:0d:32:51:dc:0d:02:d4:93:3c:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:14:A4:16:C2:76:21:93:E2:A4:99:2D:87:A7:BF:D4:CC:93:89:9E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/9hSkFsJ2IZPipJkth6e_1MyTiZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.98.0/23
Signature Algorithm: sha256WithRSAEncryption
66:af:fa:c6:85:3a:b4:0b:f2:07:e5:dc:f5:e8:cc:03:b9:ff:
4f:69:d5:72:15:47:1a:23:f2:0f:03:bc:ef:19:23:54:9d:78:
3d:9f:82:19:ab:a2:6e:41:dd:6a:db:fb:5b:fd:38:6a:10:94:
36:14:47:e1:0f:a6:24:e6:f2:bc:36:dd:87:ef:e4:69:3e:64:
12:07:d3:82:d5:36:08:05:2f:aa:3d:55:80:a9:29:fb:30:bb:
d0:be:f6:23:ab:27:21:54:9a:6b:51:20:0c:43:4b:9f:4e:6e:
36:6a:5e:6f:6d:48:2a:2a:ab:0c:5c:6b:be:48:e3:dc:a0:09:
96:29:c2:c4:81:f5:c6:2b:f7:ad:a1:03:0f:3b:a7:9f:a3:f0:
bf:8e:10:1e:56:81:8f:96:dd:57:db:e1:37:0d:56:4f:4f:a4:
39:42:e0:00:80:bc:b2:a3:57:ad:ed:e5:60:17:f2:48:f7:d7:
ea:a6:16:81:04:d3:8f:89:ae:a7:a1:95:5a:66:0d:6e:6f:d9:
76:1c:47:d1:99:7e:22:49:1d:e9:25:c7:44:de:06:2f:35:4d:
b2:c7:90:01:d3:c2:08:8a:65:43:48:68:d7:f7:5d:04:9b:5c:
29:b0:24:ae:00:51:56:15:e8:a8:7f:cc:dd:01:58:72:1b:2f:
21:fb:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org