Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cU-3tiihb8mGG4J23bnRMIUTaHw.roa
File: cU-3tiihb8mGG4J23bnRMIUTaHw.roa (raw, json)
Hash identifier: QwzAJE/AuDX/FhuQDSWktpG1dXTcTChrkJXz/fyedTw=
Subject key identifier: 71:4F:B7:B6:28:A1:6F:C9:86:1B:82:76:DD:B9:D1:30:85:13:68:7C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BE88BA065BE06239486061F9D85D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cU-3tiihb8mGG4J23bnRMIUTaHw.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202403
IP address blocks: 195.136.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:be:88:ba:06:5b:e0:62:39:48:60:61:f9:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714fb7b628a16fc9861b8276ddb9d1308513687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:46:ad:59:9e:97:b2:77:94:95:c8:6d:d1:
92:19:2c:2a:b2:a3:df:fc:72:28:e4:1f:c1:6b:06:
ef:bf:fc:56:af:6c:ea:3d:bf:5a:ac:bc:cb:62:d9:
87:ad:7c:28:09:cb:30:ba:df:1c:bc:5b:22:8e:67:
7b:a9:08:fd:8a:d5:ba:a4:98:e8:55:2d:fa:f4:96:
d4:e8:9d:1c:1f:ea:df:23:51:ca:02:fd:7a:cc:95:
8a:90:b9:d8:4b:0f:76:41:9e:0d:9c:ef:be:bc:08:
2c:7f:a4:4d:bd:69:3f:7d:fd:58:07:4c:b8:6e:23:
67:1b:6e:ea:bb:f2:37:ba:e1:36:30:10:c4:7e:c7:
f2:41:e0:2d:3e:83:92:ff:34:5d:52:73:75:53:d2:
57:1a:eb:cc:95:ac:9f:d3:88:15:24:f3:af:1c:41:
5f:ee:51:10:16:ab:a7:e3:96:d9:29:3a:ba:7e:0d:
e6:bf:59:81:27:88:37:f1:2e:54:30:3b:1d:0f:b8:
fd:ab:af:f2:93:89:57:8b:10:a1:19:a9:01:b0:71:
89:9b:1c:47:1b:36:1a:fd:49:f2:19:d8:ad:58:b1:
d2:d7:37:ae:ce:89:fd:47:0d:02:d0:07:9b:7a:2a:
9a:91:30:b8:33:05:92:d7:0b:5b:af:29:ec:be:74:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:B7:B6:28:A1:6F:C9:86:1B:82:76:DD:B9:D1:30:85:13:68:7C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cU-3tiihb8mGG4J23bnRMIUTaHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fd:76:59:00:10:ce:2a:b5:d2:03:1e:78:ba:45:04:17:46:
4e:92:1b:87:1b:25:88:96:a1:69:69:0c:93:83:a9:c7:4c:f3:
8c:d8:d8:09:25:e6:96:57:28:dc:ff:23:6a:da:c3:ee:2c:2e:
84:b0:5e:b4:1a:ea:67:9d:dd:1e:46:e2:63:42:cc:20:35:59:
ac:cc:ff:10:13:02:37:0a:b5:6f:58:6d:37:b5:58:28:18:b4:
30:9e:0b:bc:5c:c7:43:07:66:ec:dd:10:15:d1:cf:57:19:26:
37:d5:3f:09:5c:00:4f:84:7a:80:10:f9:67:91:76:ff:88:a5:
1c:0b:2b:4a:9e:ea:18:f8:cc:4b:66:e8:c4:d6:7c:a4:52:27:
1d:21:ca:12:6a:c5:d2:32:97:a3:ee:30:04:68:87:2f:12:ef:
a3:da:f4:21:e7:d7:a8:47:24:63:02:d0:e2:0b:95:10:75:45:
0d:b1:51:da:4e:ee:23:0b:ca:f2:cb:70:92:7b:85:8e:a0:37:
6d:6d:60:a3:55:7d:c1:28:9a:58:6e:6d:cd:19:25:5a:39:4b:
66:27:a9:9c:14:bf:91:50:54:fb:09:a3:25:ed:91:e0:84:23:
45:af:6c:3d:f6:80:15:63:47:3b:ad:9a:c0:4f:eb:64:71:b7:
05:45:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org