Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8snAZNNplDyrTiBfpoMvYT-29cE.roa
File: 8snAZNNplDyrTiBfpoMvYT-29cE.roa (raw, json)
Hash identifier: tDAjB3kaGdX0s7tCALF5yNx3qnUGXMlPhH/kYd3YVEQ=
Subject key identifier: F2:C9:C0:64:D3:69:94:3C:AB:4E:20:5F:A6:83:2F:61:3F:B6:F5:C1
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018571954ADDDAE76D0D0AED3F4D147C10D6
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8snAZNNplDyrTiBfpoMvYT-29cE.roa
Signing time: Mon 02 Jan 2023 08:24:47 +0000
ROA not before: Mon 02 Jan 2023 08:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 194.15.152.0/24 maxlen: 24
194.15.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:4a:dd:da:e7:6d:0d:0a:ed:3f:4d:14:7c:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 2 08:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c9c064d369943cab4e205fa6832f613fb6f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:c4:6d:0e:b7:33:6f:a6:44:ed:c3:75:98:
b2:42:fd:8d:bb:b2:ca:a2:1a:bf:81:58:74:2c:9f:
90:35:4a:d2:d3:c6:5f:2d:d4:5d:6b:4c:20:5c:65:
0f:b4:3f:fc:7a:40:81:27:9b:6e:8a:95:71:0e:f9:
e5:32:4f:c7:d7:61:f1:cb:3a:1b:dc:30:a1:f2:ee:
4e:05:b1:4e:c3:27:9c:3d:42:5f:d7:fb:aa:d6:38:
88:fd:7b:d8:55:05:c8:cf:19:cb:fd:ed:f3:90:e0:
b3:7f:1a:9d:37:db:5b:7e:3d:0e:96:13:34:e3:d9:
e9:22:ec:11:4e:8f:8e:19:2b:da:b1:ef:b1:18:26:
07:d2:1b:af:c6:d7:9f:26:58:af:56:1a:b1:04:fe:
6a:70:77:e0:b0:6c:2d:dd:c5:c7:82:6d:44:d1:00:
0c:85:30:b1:26:a1:13:ff:ce:a6:dc:c2:8d:93:e4:
a5:4b:37:d7:60:d1:f9:86:8c:4c:62:64:c4:b3:62:
c1:ed:9d:0c:40:cb:08:9b:9b:56:e7:87:78:a3:43:
2b:6c:ab:93:61:a2:e3:b6:b4:ed:f1:18:8d:fd:bb:
6e:d4:52:af:f6:1a:e9:9b:11:5b:0b:8b:1e:dc:25:
cf:01:0d:28:6c:e8:62:5c:97:9c:d1:02:96:9d:cc:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:C0:64:D3:69:94:3C:AB:4E:20:5F:A6:83:2F:61:3F:B6:F5:C1
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/8snAZNNplDyrTiBfpoMvYT-29cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.152.0/24
194.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fa:12:7d:1c:13:61:0c:04:0f:d1:23:7d:44:6c:34:a9:9a:
4a:5c:ce:75:7f:74:2e:7e:9d:c8:75:8a:e0:7d:ac:a0:aa:54:
9f:19:2e:cc:1b:84:23:28:15:ed:0c:9a:48:04:82:df:cb:14:
26:57:d7:d1:d2:4f:f1:2d:34:4d:f9:43:14:6e:06:3c:e7:63:
cb:97:cc:75:a5:5a:af:93:b6:3f:f3:9d:fe:69:d2:e9:e4:0e:
c9:4f:7e:63:ae:79:43:2b:19:de:8f:7f:32:57:c9:ed:84:42:
a0:1f:ab:41:31:f6:34:07:42:4a:e8:06:3f:7e:01:e7:a7:9d:
21:f1:91:b7:7a:47:4a:75:64:4a:48:59:d4:dd:df:4a:86:62:
19:d0:d2:0b:09:6f:30:c2:3a:9c:7c:4c:65:bb:fa:d7:dd:19:
22:3d:de:c4:cb:a4:a8:86:b9:7f:0b:f5:ff:49:7c:c6:41:f2:
41:b6:19:bc:01:03:a6:e4:d6:b3:72:17:fd:57:50:c7:da:73:
d4:6a:b8:80:a3:15:a3:d6:0f:b1:dc:67:0f:3a:40:14:4f:e3:
48:6b:3e:32:93:e7:86:e6:0d:7a:3b:2b:1d:c7:ef:8a:03:68:
13:05:20:0c:0a:27:11:46:41:81:b7:32:78:8b:6c:9d:f9:9a:
2f:ef:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org