Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7P6zLq9kOpkTiYrGtwpL6FRDuJI.roa
File: 7P6zLq9kOpkTiYrGtwpL6FRDuJI.roa (raw, json)
Hash identifier: dGeudqrXHu/rF+CIkgCc4J0dG7hslD7Ex8lBIZ2frZI=
Subject key identifier: EC:FE:B3:2E:AF:64:3A:99:13:89:8A:C6:B7:0A:4B:E8:54:43:B8:92
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01857315FA8F0B21B81DB5AC03F047E069E6
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7P6zLq9kOpkTiYrGtwpL6FRDuJI.roa
Signing time: Mon 02 Jan 2023 15:24:58 +0000
ROA not before: Mon 02 Jan 2023 15:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 194.169.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:fa:8f:0b:21:b8:1d:b5:ac:03:f0:47:e0:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 2 15:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecfeb32eaf643a9913898ac6b70a4be85443b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:58:f1:15:49:68:72:67:39:c0:6b:f8:6c:
98:16:d5:93:b0:cf:06:1b:64:06:a2:09:c0:3f:f1:
fe:ce:07:3f:95:15:c1:df:53:ff:66:df:f3:76:43:
b1:99:9b:2c:b9:64:a7:f3:7e:45:8e:44:64:c2:09:
21:1e:54:4f:e3:de:bd:22:af:22:44:bd:77:9d:12:
ba:14:d5:a0:fd:e3:ee:54:80:78:52:91:e1:82:d2:
e8:d6:b8:a5:7e:51:3b:94:77:fc:6e:03:0f:70:e2:
9d:84:19:8d:9f:8a:b3:80:ae:57:1f:fd:2c:bd:a5:
ea:e7:4b:0b:56:57:0a:87:3f:5c:ca:4a:07:65:f8:
9b:fd:2c:d0:cf:13:30:cf:5d:87:d3:e0:11:51:48:
c1:a4:25:f8:cd:68:91:05:10:1f:dc:8c:88:61:92:
21:45:ed:53:1a:b3:3c:eb:24:e0:ca:fa:61:0c:dc:
e5:6f:34:c8:e1:57:47:15:1c:51:70:d9:1f:c9:4d:
63:08:d8:ef:f6:80:14:50:9b:91:25:b7:7c:24:89:
2c:ca:ea:fb:ed:d6:55:35:95:c2:a3:4a:b0:49:cb:
eb:cb:6f:48:c9:b8:40:d8:b8:f0:e4:cc:c0:61:d4:
c5:cd:d7:e2:a8:6b:26:98:ae:d0:2c:7e:47:25:65:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:B3:2E:AF:64:3A:99:13:89:8A:C6:B7:0A:4B:E8:54:43:B8:92
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/7P6zLq9kOpkTiYrGtwpL6FRDuJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9d:c3:86:2a:03:11:4c:dd:f0:19:ed:28:43:1f:fe:f1:4b:
ba:ec:52:1f:8b:3d:1c:38:e6:2b:8f:11:b3:12:b5:e8:29:f7:
f3:30:77:64:d4:41:2b:a1:f9:05:db:b0:a5:54:e1:bc:45:23:
81:fc:ed:2e:3d:72:cb:cc:65:36:fe:ea:84:de:99:3b:f6:24:
f4:e8:7a:82:86:64:84:5c:22:3a:3c:3b:c3:0e:75:8d:e5:68:
a6:3c:af:d8:ce:26:8d:8d:d0:da:81:97:98:ae:7e:4d:a9:7d:
0b:cd:1d:4a:95:00:f3:ac:05:01:4d:cc:fe:f4:9b:26:fd:83:
cd:50:1b:2e:25:b1:b7:76:a3:48:6a:92:7c:87:c7:e3:ef:50:
e6:e4:f6:67:0f:a5:48:7a:5b:aa:c2:38:4a:f8:dd:12:84:f6:
be:1b:ed:32:94:22:20:64:ef:a7:1b:7d:b1:65:be:aa:2b:36:
9a:2c:e8:f1:19:21:33:76:e4:a1:06:be:07:29:75:93:b9:de:
a0:a8:12:f1:85:85:bb:76:5c:a5:8d:9e:50:b4:33:66:1d:a3:
91:a3:01:ea:06:4f:54:2b:0b:2f:61:cc:e5:b0:a4:20:eb:9f:
6b:38:74:97:91:8e:f3:f5:ca:91:79:73:e7:8e:56:52:35:d3:
c2:4d:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:16 2024 by rpki-client on console-fra.rpki-client.org