Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/0lZCbdu1bhH7TAyHNcpwGQYsqpM.roa
File: 0lZCbdu1bhH7TAyHNcpwGQYsqpM.roa (raw, json)
Hash identifier: N7UHUf9L2QAEyR1de+Aj+pZWlHpdgzpEV7duyV0kwX0=
Subject key identifier: D2:56:42:6D:DB:B5:6E:11:FB:4C:0C:87:35:CA:70:19:06:2C:AA:93
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 018570303EF30013C3EDCC2B21FDD2FAA0DA
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/0lZCbdu1bhH7TAyHNcpwGQYsqpM.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 194.53.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3e:f3:00:13:c3:ed:cc:2b:21:fd:d2:fa:a0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d256426ddbb56e11fb4c0c8735ca7019062caa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:28:ce:be:77:69:7c:35:7d:1d:81:e5:8d:
9a:e3:48:af:1e:1f:18:19:3b:d2:85:ce:38:2e:94:
1c:4d:d5:cd:df:12:11:44:8e:b7:52:9f:60:bd:d9:
46:95:f4:ce:84:06:10:5b:5f:8b:2f:13:17:d0:bb:
05:3d:7f:7d:6a:ac:35:6f:df:1c:9c:a4:ff:d3:5d:
4e:7e:b7:f8:4d:0d:7c:29:1b:76:3b:52:cc:f5:fa:
73:02:92:ff:14:b6:de:c6:7b:4c:90:49:99:6f:83:
4f:a1:e2:06:de:23:6f:df:81:37:ce:4e:c3:69:53:
0e:fd:36:b6:53:0f:ce:06:6d:1f:3d:38:4e:3f:91:
12:6c:9d:ed:a5:06:e4:09:e9:d0:1c:d3:85:a3:20:
4e:e0:3c:6c:08:e5:f4:c2:4c:a0:27:d7:ee:f0:0c:
98:46:32:68:8e:22:ac:13:73:10:22:02:55:2f:1f:
d2:5b:df:b5:ed:3f:79:01:18:58:01:e1:7a:a8:8a:
f4:d4:b2:a4:2f:62:29:81:37:de:9e:6e:37:50:cf:
db:8d:b5:b4:4a:b4:df:fd:29:cb:8c:f6:bc:49:c0:
03:a0:d7:80:60:4b:3e:63:30:73:10:ae:7e:8b:18:
1a:f9:98:73:0d:d1:b6:aa:05:53:0a:65:22:6f:ab:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:42:6D:DB:B5:6E:11:FB:4C:0C:87:35:CA:70:19:06:2C:AA:93
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/0lZCbdu1bhH7TAyHNcpwGQYsqpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:24:4c:8d:06:88:a2:de:f5:5e:d8:e7:7b:e6:dc:70:1d:
3a:ab:e3:4f:c3:9f:ab:79:04:22:90:85:45:42:38:3a:f9:f3:
0b:01:91:5e:5a:07:79:5b:74:aa:9e:79:7e:79:38:cd:7d:55:
06:1b:8e:01:6e:b9:4b:a5:6a:89:e2:65:db:ec:57:8c:fe:51:
73:c5:1f:cf:67:7a:f8:c6:a2:8d:62:8f:d6:2e:e6:49:ea:92:
ac:c7:91:df:43:11:3f:61:ea:e9:c0:c4:30:ad:7c:82:20:8d:
79:ab:ed:ca:2c:ca:79:85:33:63:ce:df:37:37:f4:d5:dd:05:
e5:09:fa:23:a4:b0:8e:bd:1d:94:61:05:cf:cf:0b:de:ae:e4:
cf:28:53:84:b7:38:4d:16:d3:b4:c1:38:e4:21:b2:48:b4:58:
97:91:6d:58:79:a2:c0:5c:ca:ef:6c:ff:3c:94:e4:fa:3d:e5:
f9:fd:7f:ce:b9:7f:7d:93:33:11:1a:ca:51:c3:b4:e0:3d:59:
d9:76:99:9b:27:69:bf:19:b8:0a:30:dd:72:d5:ae:2f:a6:53:
4c:63:f9:99:09:01:a5:ee:7f:3e:22:d2:89:a1:64:c8:11:c3:
c2:39:19:d8:97:2c:ed:36:70:50:4d:b2:c9:e2:4c:8f:59:9e:
0d:d6:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:45 2024 by rpki-client on console-fra.rpki-client.org