Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/E3Yzp1PHf81hYKPpAGRlf3mySlE.roa
File: E3Yzp1PHf81hYKPpAGRlf3mySlE.roa (raw, json)
Hash identifier: UDf8/Z60RbR//6ANDJbKzXejv39TuI9D5JIyxQdTbuo=
Subject key identifier: 13:76:33:A7:53:C7:7F:CD:61:60:A3:E9:00:64:65:7F:79:B2:4A:51
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 018571A7923A05BF4E30A866A56A3D2FD834
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/E3Yzp1PHf81hYKPpAGRlf3mySlE.roa
Signing time: Mon 02 Jan 2023 08:44:45 +0000
ROA not before: Mon 02 Jan 2023 08:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51212
IP address blocks: 194.187.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:92:3a:05:bf:4e:30:a8:66:a5:6a:3d:2f:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jan 2 08:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=137633a753c77fcd6160a3e90064657f79b24a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:a6:c6:a4:36:3b:e7:a9:13:b3:51:83:a1:
9a:e6:6b:67:7f:08:f0:9d:de:49:6a:24:b0:a1:f9:
35:73:b3:45:cc:04:45:fe:d8:bf:d9:6a:2a:7b:b8:
3f:d5:4e:ef:2b:11:59:6f:8c:69:69:36:21:1d:da:
69:9b:62:c3:3c:4f:dc:50:b5:38:2c:0f:ee:31:65:
68:fe:5d:d7:ac:64:27:35:37:7c:ea:1b:da:43:d3:
6f:c6:a4:a8:68:2e:31:6a:52:14:68:26:15:60:a3:
9b:fd:98:9f:d8:5d:1e:e1:27:a3:f7:ec:07:91:d2:
78:22:0b:20:74:d4:11:41:80:ab:a0:6f:e9:ec:71:
e0:f8:00:84:37:50:47:84:f6:ec:da:5a:25:e1:b3:
8a:f1:85:6d:0c:34:7d:55:c4:1b:93:8b:56:d8:fb:
33:7f:5c:9a:f3:2f:84:86:8e:8d:fa:7d:e5:88:6c:
b9:72:1f:77:26:e4:dc:fd:9d:b2:2c:3f:27:fd:d1:
c1:7e:96:b1:77:c4:e5:b0:2b:98:82:92:fc:6d:d9:
55:69:18:51:54:c4:e1:ba:59:2f:c6:27:67:92:0f:
9a:91:09:5a:e6:e2:3f:b4:cc:4e:74:3a:0b:a2:6e:
9b:72:c1:48:e1:83:96:83:78:22:ea:36:01:78:f6:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:33:A7:53:C7:7F:CD:61:60:A3:E9:00:64:65:7F:79:B2:4A:51
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/E3Yzp1PHf81hYKPpAGRlf3mySlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:e6:f7:ca:36:b7:1c:29:d6:35:70:86:9c:b7:30:ee:1f:40:
71:42:7d:85:e2:5c:b0:f1:3f:ba:aa:ed:05:e6:c4:ca:42:ae:
ef:32:12:79:86:57:23:a5:1f:9d:33:89:da:79:83:da:61:df:
22:da:a0:e1:5b:e4:33:ae:b5:36:82:e4:f2:e2:85:c7:77:e4:
58:76:d9:79:f7:5a:35:74:c2:eb:db:0e:3c:54:f6:60:af:39:
08:1e:27:39:a0:b9:52:1b:d7:08:b3:a2:d0:a8:33:f6:bf:37:
86:0b:40:da:21:53:1c:77:ab:23:dc:e6:55:43:35:84:c5:ef:
11:c4:a5:45:75:6f:18:14:e0:6f:23:58:2e:94:07:03:75:cb:
95:0d:e1:57:0f:e5:22:b5:ef:ce:25:0e:7a:58:f7:9f:72:be:
60:43:00:6f:86:59:60:f7:e4:54:e4:a8:f3:1c:6a:a5:1a:e9:
7a:99:84:60:11:2f:3b:cf:dc:54:27:4d:48:b8:e4:ea:ce:14:
5f:13:b1:32:7b:e0:60:fa:3b:77:30:19:24:33:ce:dc:2d:e1:
95:17:37:5a:63:6a:d1:b1:90:f9:69:61:95:0f:92:3a:ae:0e:
e9:bd:ef:42:46:e4:d9:9e:18:51:08:52:ee:bb:c0:44:db:b8:
50:b7:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:47 2024 by rpki-client on console-fra.rpki-client.org