Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5FOCZZtsUQKyBU2AyjLkYPavZPA.roa
File: 5FOCZZtsUQKyBU2AyjLkYPavZPA.roa (raw, json)
Hash identifier: 5NppMjjkmnAWTAk5jRyZBMZM8P7kXZNkLFkOn8WqRHg=
Subject key identifier: E4:53:82:65:9B:6C:51:02:B2:05:4D:80:CA:32:E4:60:F6:AF:64:F0
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0189C502BD8E1B3FDD3DC6AF3AE1B5ED5DEC
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5FOCZZtsUQKyBU2AyjLkYPavZPA.roa
Signing time: Sat 05 Aug 2023 09:23:58 +0000
ROA not before: Sat 05 Aug 2023 09:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 194.156.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:02:bd:8e:1b:3f:dd:3d:c6:af:3a:e1:b5:ed:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 5 09:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45382659b6c5102b2054d80ca32e460f6af64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:f1:5c:b2:f6:03:e8:b2:50:90:72:cb:7a:
38:aa:01:03:02:d1:b7:74:63:0f:2a:3e:d9:79:0c:
a6:31:1c:8a:78:40:95:89:7a:78:01:91:af:3b:34:
29:d1:4b:13:ed:c6:be:b8:13:7e:36:6c:1c:a8:6d:
5f:b9:96:4f:a0:42:8d:59:a3:a2:eb:f6:50:bb:bc:
34:01:73:48:d7:e6:65:86:99:9c:e7:fb:d9:e9:a5:
e6:75:05:72:98:1c:5e:3a:b1:87:0b:50:72:12:e6:
f5:0f:c9:4b:8f:1c:0e:80:b3:ff:74:3e:34:01:02:
71:11:ed:70:1d:7c:fd:c9:1f:37:43:54:47:67:e9:
aa:c4:db:c1:a0:ce:fa:56:63:b9:97:65:94:da:d9:
06:0f:3c:ce:22:a1:eb:96:5c:63:61:3c:98:5f:bc:
bd:a7:a2:06:50:f8:1d:dd:f6:bb:4f:86:f2:32:31:
60:00:b3:3e:b5:45:88:40:c8:4d:3f:6d:27:a4:a5:
d5:d7:c1:ef:6c:88:7d:5c:55:d8:78:b5:c2:67:b3:
f1:78:33:de:7a:6a:85:b3:6c:b8:29:7b:2c:75:b4:
16:f6:9d:3c:6c:2b:34:9a:62:dc:e9:d6:1e:3f:c7:
ac:4c:12:37:c4:04:51:a9:9a:e7:64:7c:b0:63:a3:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:82:65:9B:6C:51:02:B2:05:4D:80:CA:32:E4:60:F6:AF:64:F0
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5FOCZZtsUQKyBU2AyjLkYPavZPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:53:36:db:46:2d:1e:79:85:7e:92:8b:b8:7a:1f:b6:58:e9:
41:4e:fc:7d:7f:45:12:1f:11:d0:f7:6e:9c:95:96:c4:01:eb:
d6:0f:14:b3:cd:43:6a:5d:78:90:b5:7b:a1:a7:69:7f:11:b2:
6e:b2:ff:12:04:0c:a0:9a:1d:5e:d5:30:64:59:71:f4:8e:ab:
9a:d2:13:42:ba:2b:8c:e7:cd:b6:69:5c:d2:7a:08:b7:16:ba:
b5:1b:e7:ef:15:7b:74:a5:6d:8f:b2:48:1b:88:e3:1c:50:7b:
0a:65:41:3d:88:13:80:c7:81:90:84:4c:21:99:a4:08:1d:8d:
cf:7d:8e:cb:d9:eb:60:10:0c:18:23:ae:05:86:57:1a:09:d5:
c8:ce:3f:6d:98:b1:12:63:8f:ca:66:f4:de:d0:21:70:b6:bb:
56:7a:5d:0a:4f:5d:bf:a9:d7:fe:ac:fe:a6:7f:e4:41:1e:0e:
30:1b:d2:32:d5:bc:62:d2:76:18:75:b6:f6:af:64:17:28:ec:
9c:99:a1:17:55:bf:ad:f7:9d:d9:75:3d:4c:6d:04:dc:65:a5:
7b:76:bd:74:48:3a:87:1a:f7:13:e9:42:79:65:46:80:d0:53:
bf:35:cb:4a:31:06:c8:3b:19:04:c1:67:39:92:3c:ba:36:65:
81:7f:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 12:57:44 2023 by rpki-client on console-ams.rpki-client.org