Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/xkYT3DqF5jS08fitko6S92omM-8.roa
File: xkYT3DqF5jS08fitko6S92omM-8.roa (raw, json)
Hash identifier: TBlbuViMdPB5nYzVpvLw9ipoQc0jD6X1jfWQATqHt8w=
Subject key identifier: C6:46:13:DC:3A:85:E6:34:B4:F1:F8:AD:92:8E:92:F7:6A:26:33:EF
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0188F6BA2E27119D8E57100F12397D2453FF
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/xkYT3DqF5jS08fitko6S92omM-8.roa
Signing time: Mon 26 Jun 2023 08:02:56 +0000
ROA not before: Mon 26 Jun 2023 08:02:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 194.15.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:ba:2e:27:11:9d:8e:57:10:0f:12:39:7d:24:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 26 08:02:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64613dc3a85e634b4f1f8ad928e92f76a2633ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:3c:6b:4c:79:0e:25:79:7a:6d:e6:6f:fa:
60:7f:2f:09:a0:ab:79:23:37:91:1b:e7:94:73:e6:
6f:f7:38:2c:1d:d4:e3:e2:16:f0:f6:31:28:b9:10:
76:fd:40:b0:06:20:f6:35:7a:b0:46:f9:a5:fc:d8:
55:6c:fa:e0:55:0f:19:0c:67:ba:55:53:84:3c:c0:
e2:a7:df:cb:69:45:3e:e1:23:0f:b2:b0:73:af:9a:
16:da:35:58:11:98:ef:40:a7:52:c1:b8:99:47:2c:
fd:7d:ef:f9:be:85:1f:1b:e4:84:25:d6:36:b0:00:
e2:47:71:32:a9:4f:2e:c3:34:e7:0b:74:66:b6:f9:
b0:6f:14:b4:c0:e4:58:34:1a:62:5d:3c:3d:bd:4d:
9d:88:0d:9a:4d:d6:da:96:b1:e6:c0:86:cd:db:04:
13:99:a6:42:54:73:da:9f:7a:c9:25:fd:3c:4e:aa:
9b:b0:68:95:20:b6:d6:78:fd:0c:b1:ce:4c:47:11:
a6:53:a4:a5:c7:c5:8b:9e:8b:4e:3c:cb:90:60:7c:
f0:53:5f:1a:75:64:2f:e0:9f:de:95:fc:03:b5:64:
cd:0a:c2:2e:36:96:98:99:51:a9:02:e7:d9:6b:70:
5a:40:cd:86:f7:88:43:cb:6e:ad:79:73:27:52:a2:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:13:DC:3A:85:E6:34:B4:F1:F8:AD:92:8E:92:F7:6A:26:33:EF
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/xkYT3DqF5jS08fitko6S92omM-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fe:3c:df:45:1d:c3:d5:44:bc:eb:df:96:82:b4:63:c2:b8:
42:a4:b5:f4:31:5b:d6:b1:50:31:9e:4e:e8:0d:89:65:c3:99:
f2:c8:7b:07:43:24:5f:35:30:ad:71:33:ee:df:f4:95:14:cf:
60:a9:74:ec:c1:6c:60:62:f7:10:26:42:56:a7:d5:9b:28:7a:
d8:b1:bd:54:dd:72:3e:06:d1:b8:77:39:0d:98:81:d8:f9:10:
a6:15:b9:f1:4e:a8:c5:0a:38:79:67:f5:6e:f3:f0:08:ef:3f:
b2:3c:e0:b2:f0:69:c6:3b:4d:77:0f:cb:7d:e1:5a:fb:93:9d:
57:58:f7:f9:ef:ca:7d:8d:85:d6:c9:60:96:00:8a:4d:ad:e2:
2d:a0:f2:f1:b3:b4:5e:96:1f:d3:7f:b6:57:4e:4e:ec:69:9f:
ad:59:cb:60:7a:36:33:91:de:da:47:84:71:89:8c:de:b0:4f:
59:c9:24:85:f4:c0:10:ae:3a:d6:d9:37:8d:ca:07:7a:50:f7:
72:7f:7c:6c:e3:2e:5f:71:bd:e4:28:de:18:0e:a2:3b:76:63:
07:cf:ac:c4:4b:64:fe:73:ef:20:ba:7b:15:ce:78:fd:11:98:
73:a5:c6:76:69:82:25:a3:88:4a:8e:6c:88:93:bd:4b:2c:ab:
2b:ae:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 08:30:47 2023 by rpki-client on console-ams.rpki-client.org