Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/5DTy_wlbZF28Q1-TCuMw5d2qEN4.roa
File: 5DTy_wlbZF28Q1-TCuMw5d2qEN4.roa (raw, json)
Hash identifier: YVP/EfNFV6WzaBMq1LGcHsEY1mlrGJcA0XaeCb5ZIIw=
Subject key identifier: E4:34:F2:FF:09:5B:64:5D:BC:43:5F:93:0A:E3:30:E5:DD:AA:10:DE
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018765FD75E14C9DA5A128333E50F52E54CB
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/5DTy_wlbZF28Q1-TCuMw5d2qEN4.roa
Signing time: Sun 09 Apr 2023 12:28:42 +0000
ROA not before: Sun 09 Apr 2023 12:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 194.15.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:fd:75:e1:4c:9d:a5:a1:28:33:3e:50:f5:2e:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Apr 9 12:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e434f2ff095b645dbc435f930ae330e5ddaa10de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:3c:e1:4f:34:29:07:94:cd:b0:24:cd:ca:
1e:39:13:00:9b:ea:1e:ba:3d:7b:1e:fc:ee:2d:94:
a2:0a:77:47:ca:4c:4f:b8:b8:3f:3d:74:7c:bd:f7:
49:e3:a9:2a:92:46:85:36:74:16:ed:10:34:e8:40:
1f:d8:77:d7:8c:48:9b:d0:9e:ea:38:18:aa:fa:11:
ff:a7:8f:0c:7f:a3:b5:a3:b0:08:72:06:eb:d8:a1:
05:11:04:d5:0c:62:c6:5a:29:90:08:14:18:ce:d8:
56:3c:6a:41:e2:74:80:3b:d1:78:93:7a:ba:ac:79:
37:95:b6:fc:0e:02:e8:81:aa:b5:56:08:23:df:e1:
31:58:a7:73:f1:99:88:38:b0:49:7f:5e:d9:ce:5c:
f8:25:45:86:57:6d:e2:7a:89:9c:d5:6a:5a:ab:7c:
d3:de:ec:79:e6:84:e6:40:80:a2:19:00:ec:54:4b:
cf:35:f3:4e:41:b0:ff:d4:fd:7a:b6:be:db:32:f8:
dd:16:fe:22:4d:58:dc:de:05:42:98:69:da:15:61:
50:0a:41:3f:51:7c:65:49:09:5d:32:6a:4a:41:4a:
0e:cc:e6:7f:8c:18:ea:02:e6:dd:70:d4:70:05:a1:
dd:14:8b:35:be:9b:fd:85:2c:14:63:90:28:f2:1d:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:F2:FF:09:5B:64:5D:BC:43:5F:93:0A:E3:30:E5:DD:AA:10:DE
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/5DTy_wlbZF28Q1-TCuMw5d2qEN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
64:31:d1:2e:ae:23:6a:5b:8c:dd:9b:fd:d3:c0:d0:ea:7d:52:
17:50:f6:2c:5f:61:87:5e:3c:f5:ab:b1:62:6e:0f:8a:53:f2:
2d:27:e7:a4:85:8f:90:bb:25:fd:4b:54:5e:9e:ef:7d:a8:5e:
c9:23:53:aa:f5:01:38:cc:c0:be:9d:e1:e1:18:1a:1b:cc:c2:
a4:f1:36:1f:14:9b:fb:0d:b6:87:33:5b:43:e8:77:97:bc:27:
6f:01:5d:40:b7:e0:bf:22:2c:12:ca:64:51:23:95:aa:95:f2:
1c:17:61:fa:6b:7f:2d:80:b0:00:85:fd:cb:e7:89:3c:b8:9f:
2b:2d:80:84:ef:a7:14:31:b9:f0:ba:3c:c5:61:31:e1:02:9a:
a6:5e:07:09:25:e8:d7:18:29:cd:c6:4b:f2:02:b1:4b:85:4f:
15:82:86:29:a8:36:3f:52:06:73:7a:db:9a:73:c0:ba:fd:99:
c1:a9:ed:80:98:8b:02:0b:84:c0:fc:6c:6a:79:07:04:ae:9d:
68:c2:9c:7b:ba:6e:d8:c7:53:ce:81:c1:d6:d4:13:3d:35:00:
3d:9a:52:c4:d2:be:5a:04:40:48:85:4d:3b:57:5b:50:ce:bf:
91:81:46:02:67:d5:c7:9f:62:2a:f2:06:47:37:60:8c:f1:78:
06:65:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org