Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ixFd4yYdz87cOlR4rXN6CzSY8M4.roa
File: ixFd4yYdz87cOlR4rXN6CzSY8M4.roa (raw, json)
Hash identifier: aef+N00hZE9iw+BKK3WnCd7u7/sttt5aqXE1Czd8CQQ=
Subject key identifier: 8B:11:5D:E3:26:1D:CF:CE:DC:3A:54:78:AD:73:7A:0B:34:98:F0:CE
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0188B1AD4B481A7CEE3286FA585169EF561A
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ixFd4yYdz87cOlR4rXN6CzSY8M4.roa
Signing time: Mon 12 Jun 2023 22:15:04 +0000
ROA not before: Mon 12 Jun 2023 22:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 194.15.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:ad:4b:48:1a:7c:ee:32:86:fa:58:51:69:ef:56:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 12 22:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b115de3261dcfcedc3a5478ad737a0b3498f0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:18:ef:31:c9:fb:38:50:e8:13:af:be:76:
da:23:03:c0:81:64:e4:f2:93:4e:3a:67:90:5f:9d:
b0:67:80:71:d4:f4:82:e4:21:97:20:5d:82:b8:96:
ef:44:1c:a5:ee:29:48:e3:cc:01:db:46:77:a2:7d:
5f:f8:9b:6e:60:ed:70:1e:75:c0:1c:6f:12:33:13:
97:08:9b:98:e3:36:46:79:9f:3d:b4:98:89:93:f8:
0d:c0:b4:eb:b8:99:cc:6f:eb:6e:bf:4b:ad:31:2e:
97:9e:b0:c2:9c:e8:82:40:1a:40:86:21:98:54:e4:
81:b8:2e:54:4e:52:e4:3a:3e:4f:74:af:d9:5d:a4:
2a:0c:b3:52:4d:60:01:7d:ed:d3:56:17:3d:2a:b7:
04:91:cf:b5:0f:9b:09:7c:a8:71:c3:db:27:81:f8:
8c:4f:e6:1e:dd:37:7b:0b:a2:a2:9a:82:03:1c:40:
e2:cf:3c:23:72:51:41:e1:93:9a:26:4b:df:d6:8e:
5f:a2:03:65:33:50:1e:6b:06:4b:0a:40:66:e5:2b:
2b:0f:86:f8:ca:27:ab:30:7c:ba:15:f2:8c:1c:1c:
73:e4:b8:6b:fb:68:fc:1b:75:74:e5:e3:a3:cb:4e:
38:d3:b1:8e:e3:85:c0:ff:69:a3:4f:54:79:41:c2:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:11:5D:E3:26:1D:CF:CE:DC:3A:54:78:AD:73:7A:0B:34:98:F0:CE
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ixFd4yYdz87cOlR4rXN6CzSY8M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.154.0/24
Signature Algorithm: sha256WithRSAEncryption
55:14:ea:63:41:7f:3b:eb:73:7f:e8:25:a3:ba:0d:93:bd:03:
f9:e9:6b:9b:c5:3b:63:9e:55:ff:87:a2:e2:e6:b4:2f:d8:7d:
b1:19:9d:cf:a9:08:fa:ee:24:9c:bc:02:e6:f1:29:19:36:87:
32:48:18:df:b4:b0:37:5a:20:cc:41:84:7d:de:52:b8:cb:7c:
9d:6d:2b:7f:31:f5:e5:4a:db:76:da:3e:aa:41:45:ac:16:8c:
eb:fb:de:ce:ba:58:e4:e9:b0:ab:e9:f9:81:9e:2b:fa:d9:17:
8d:ee:fd:d7:5e:e3:8c:e5:37:23:54:6d:8b:ed:df:a1:9f:1c:
79:09:72:d2:e6:20:6e:26:a7:d3:80:f3:7e:be:98:5a:05:6e:
24:d0:c8:2d:8d:29:9b:d3:15:89:05:8b:22:ac:0f:58:67:ea:
b9:47:71:62:86:37:33:d2:b6:15:a6:fe:23:b2:33:f3:e6:10:
82:e5:c9:60:b9:13:35:19:98:43:dd:87:8d:d2:dc:5f:d4:21:
d5:dc:f9:7f:dc:f2:13:a6:82:74:3e:a5:5a:b0:6c:f3:94:b8:
74:fb:00:33:5c:b4:a3:f7:ce:38:f2:5e:03:38:f6:64:4a:22:
34:81:f3:ca:d7:b5:f9:53:ba:05:9e:a4:ba:2f:7a:76:ef:c5:
ac:fa:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 07:07:20 2023 by rpki-client on console-fra.rpki-client.org