Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/foo-vARzj6s87PPwxF1fwOC4BMI.roa
File: foo-vARzj6s87PPwxF1fwOC4BMI.roa (raw, json)
Hash identifier: 1ZRFpYJ9f1nlDiDn3MWVhkDFIfwKaJpstEfjuBo+4Wc=
Subject key identifier: 7E:8A:3E:BC:04:73:8F:AB:3C:EC:F3:F0:C4:5D:5F:C0:E0:B8:04:C2
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 0185734CD8A2DBDF34A0A01DEA968EA267CD
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/foo-vARzj6s87PPwxF1fwOC4BMI.roa
Signing time: Mon 02 Jan 2023 16:24:53 +0000
ROA not before: Mon 02 Jan 2023 16:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59816
IP address blocks: 194.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:d8:a2:db:df:34:a0:a0:1d:ea:96:8e:a2:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jan 2 16:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8a3ebc04738fab3cecf3f0c45d5fc0e0b804c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:80:7a:ed:87:4e:73:29:e0:ef:11:ff:94:
9f:ac:18:ea:a3:93:1a:44:c7:1a:37:46:57:82:1b:
88:fc:9d:0c:c4:1f:0b:d4:67:ba:82:a8:7e:93:3a:
74:ad:e2:e8:87:55:5c:bf:4f:e2:88:a8:7e:ea:c5:
5c:2d:34:9d:8a:3f:55:38:92:62:7e:34:a5:44:df:
5d:e9:9b:93:c2:c5:a1:d3:10:e5:ee:9c:55:27:1a:
e7:ee:99:e8:a7:40:d5:24:c7:4a:26:60:62:8a:bb:
1b:02:74:fa:04:53:38:dd:2b:b7:b2:65:f5:aa:f8:
84:69:91:c9:4a:d0:5f:ca:c0:65:c1:c2:1c:1b:0a:
ba:79:82:f2:cc:f5:a3:77:3d:fa:ac:1f:6d:a3:57:
62:dd:dc:dd:c9:ef:72:fc:8b:5f:5b:9d:ce:28:0b:
52:31:01:53:b6:0e:c9:30:65:86:ce:2a:fa:4f:a4:
96:9f:f2:ee:23:6e:e7:ef:a8:cc:f6:79:84:62:43:
a1:78:85:04:21:50:a8:07:67:d8:e9:7e:d7:e3:73:
ff:e6:83:b9:1b:1e:6a:f3:f7:49:5b:9c:bc:10:4a:
91:8c:82:6a:87:37:26:37:f9:12:0c:0d:f6:e8:c8:
29:4a:f9:46:5e:d0:e8:29:76:a8:1a:06:b8:23:bc:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:3E:BC:04:73:8F:AB:3C:EC:F3:F0:C4:5D:5F:C0:E0:B8:04:C2
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/foo-vARzj6s87PPwxF1fwOC4BMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:02:84:54:e2:79:4e:71:df:47:05:38:73:c8:07:79:10:8a:
23:d1:af:57:46:b8:05:8e:90:6d:b7:f5:fe:51:ca:6f:1c:61:
62:5b:f7:68:e2:be:ae:68:80:88:76:86:6a:6f:d9:09:2a:4c:
c6:30:0d:e3:49:30:90:7a:64:0d:cd:61:42:cc:df:a6:68:c0:
29:21:12:ad:59:ba:35:6a:15:ff:da:7e:c5:69:d5:12:d0:8e:
8a:ab:98:81:37:d6:70:e4:06:10:7e:96:47:2e:e4:4a:74:a3:
62:81:f5:87:ae:df:ee:1a:01:8f:9d:1f:4c:d0:06:36:80:9a:
d9:7a:dc:cc:f3:dc:c1:ee:7a:cb:24:58:13:79:6f:f1:5d:ca:
a8:b4:af:28:d3:7b:6d:81:13:3b:81:f1:f6:35:0b:d2:ba:22:
f9:02:d2:dc:35:10:ad:ca:49:7e:bd:e6:df:ce:fb:ba:19:5a:
bc:75:9e:29:06:67:89:cc:62:51:34:bd:b0:61:86:70:c9:b8:
40:40:24:2b:fd:c0:18:f1:f0:18:0e:0f:0e:c7:05:7a:25:f9:
e9:55:1a:b9:5f:3d:e5:d4:c9:35:72:3d:c9:01:5c:7d:1a:28:
f3:d7:5b:f2:e3:d7:b7:de:3c:d2:fd:d9:59:86:87:69:07:a7:
43:d0:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:12 2024 by rpki-client on console-fra.rpki-client.org