Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/3v2mJ61xvtqUWr00BEQiW9OLJBQ.roa
File: 3v2mJ61xvtqUWr00BEQiW9OLJBQ.roa (raw, json)
Hash identifier: fb3JDQzq2Wv51D5vQLTarbZ4Sn3TUSTFno064GR14uc=
Subject key identifier: DE:FD:A6:27:AD:71:BE:DA:94:5A:BD:34:04:44:22:5B:D3:8B:24:14
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018B1E6FA78CD7E526A2520DED49D42E81ED
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/3v2mJ61xvtqUWr00BEQiW9OLJBQ.roa
Signing time: Wed 11 Oct 2023 11:11:55 +0000
ROA not before: Wed 11 Oct 2023 11:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.169.48.0/24 maxlen: 24
194.165.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:6f:a7:8c:d7:e5:26:a2:52:0d:ed:49:d4:2e:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Oct 11 11:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=defda627ad71beda945abd340444225bd38b2414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:5c:3b:66:60:09:20:79:bc:7e:92:3b:98:
57:89:f6:2a:13:70:87:06:a7:d9:5e:b9:66:a8:62:
53:06:85:4b:08:b4:37:af:e4:53:99:f3:bb:75:bc:
6a:9a:eb:16:50:77:27:b9:d5:bd:b3:d9:4c:44:4d:
49:dc:6d:01:cb:07:6d:13:12:39:fc:38:7d:59:64:
d4:1a:ac:3f:54:c4:20:18:e7:1e:2f:89:66:dd:e6:
c2:64:e1:87:fa:2e:63:1f:ae:4d:b9:44:1e:0b:9a:
2b:35:d9:14:5d:3d:c0:13:c6:ed:0c:da:a5:af:0d:
06:bf:97:b2:7c:27:f0:06:8d:1b:21:24:2f:f9:8b:
1c:45:64:6c:8e:a0:66:74:94:14:ba:9f:10:4c:79:
27:63:66:a9:fc:f9:e3:37:21:ca:09:4a:c3:a2:f5:
da:1c:b3:37:de:50:31:b7:ab:1b:42:24:41:70:f5:
62:ee:8c:db:fa:47:7c:86:c9:28:62:35:34:22:cf:
c4:32:b7:de:cd:bc:a2:0e:79:9e:70:b3:f0:7b:25:
32:11:2a:fe:32:bf:0d:13:0b:14:60:7e:fc:3a:ea:
aa:cf:c5:98:d2:5a:40:10:02:43:f0:ca:84:19:c4:
66:2a:9c:dc:c3:e5:6a:15:4c:a9:18:8e:36:31:43:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:A6:27:AD:71:BE:DA:94:5A:BD:34:04:44:22:5B:D3:8B:24:14
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/3v2mJ61xvtqUWr00BEQiW9OLJBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7f:22:95:6b:5a:01:da:97:e3:e6:ee:fb:41:6b:ec:b4:50:
0b:81:bd:42:d9:f8:07:a8:57:82:31:b9:85:1b:9d:d0:88:36:
9d:a6:f3:9b:11:f2:22:38:a1:6e:26:35:5b:70:89:89:70:3b:
a4:1a:cb:0a:59:40:fb:33:ce:12:f9:26:da:f7:2d:9b:13:00:
6d:76:89:a2:f1:54:e8:c1:68:67:d5:a0:a0:6c:8b:0a:a4:c4:
8a:9b:77:a8:4d:36:fd:aa:ea:36:55:82:15:93:77:79:92:f7:
35:91:1f:26:b4:12:80:77:6c:84:99:74:63:05:78:2a:10:df:
40:15:84:18:32:85:fa:ad:2e:ac:d0:05:93:d4:fe:79:b5:9c:
c3:ce:6a:58:0d:8b:69:55:9a:94:f0:39:e4:30:b9:bb:2d:d5:
cd:97:43:e8:da:d4:fd:cb:13:96:d7:53:3e:82:12:34:b9:35:
3f:c9:7b:81:8d:97:81:32:63:ab:1e:29:62:c9:d9:c7:92:8b:
d4:65:d1:5d:34:ea:c7:59:69:70:dd:44:40:24:91:70:81:37:
e7:80:25:3b:5e:ff:c7:c5:8f:6f:8d:28:0b:6a:29:78:a5:cf:
56:bb:30:e3:46:4c:c2:9b:a5:3b:ab:02:5e:b5:18:ae:7f:40:
46:27:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:31 2024 by rpki-client on console-ams.rpki-client.org