Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/dojydSjapKT7XnZkKXlml0_jXsI.roa
File: dojydSjapKT7XnZkKXlml0_jXsI.roa (raw, json)
Hash identifier: ecvvCCxnken4de260rJuBzkpBDBsHoVUlhlvzwc+Nu4=
Subject key identifier: 76:88:F2:75:28:DA:A4:A4:FB:5E:76:64:29:79:66:97:4F:E3:5E:C2
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 01856FC2542732CD01177CF04293FAA397FF
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/dojydSjapKT7XnZkKXlml0_jXsI.roa
Signing time: Sun 01 Jan 2023 23:54:44 +0000
ROA not before: Sun 01 Jan 2023 23:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209256
IP address blocks: 194.6.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:54:27:32:cd:01:17:7c:f0:42:93:fa:a3:97:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Jan 1 23:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7688f27528daa4a4fb5e7664297966974fe35ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:4d:a9:5b:65:7e:2d:2f:ff:ed:4c:94:10:
51:03:fd:b7:37:fa:b1:d3:4d:98:e4:46:54:59:25:
e8:99:5f:ed:aa:78:21:77:e5:4b:e8:d7:68:59:25:
d5:4e:81:f4:16:85:d3:7a:68:6c:59:b4:b9:7b:2e:
9f:fe:a1:0e:9c:fc:6d:40:42:13:82:d4:a4:47:c0:
3b:55:90:f1:b2:7c:4c:ce:b8:d2:b6:bc:f5:fa:de:
40:2b:fc:39:c0:14:1c:65:31:78:12:f6:b2:9e:f0:
ce:1d:db:83:a4:0a:5e:61:01:e0:35:73:bd:e0:54:
7e:ab:9b:01:49:3a:e3:83:d2:ed:2d:cd:bf:fe:1c:
2d:18:11:8e:29:f9:ad:da:ef:3e:c1:04:71:2d:94:
f8:19:9d:a0:fe:43:a7:c4:c3:2e:d5:13:d2:cd:03:
a6:4a:91:31:84:e6:3f:31:1a:ba:ac:af:18:9e:cd:
e9:35:bb:65:db:9a:56:aa:14:21:da:07:48:79:4a:
4a:58:a7:38:7b:e9:e5:93:55:77:76:30:24:b3:0b:
14:cf:68:81:25:30:0e:02:e9:53:16:55:e7:ff:8d:
03:91:bf:ea:58:ac:e2:f7:83:94:f6:c4:79:ad:4f:
ab:a1:39:0e:95:e8:1b:31:66:b8:81:a6:51:dd:ad:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:F2:75:28:DA:A4:A4:FB:5E:76:64:29:79:66:97:4F:E3:5E:C2
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/dojydSjapKT7XnZkKXlml0_jXsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.243.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fe:0d:58:e3:16:a4:01:43:b8:79:a1:40:d4:1f:05:d6:ad:
30:81:cb:a9:bd:09:2a:aa:eb:e0:75:5c:ae:ac:6b:9f:df:09:
78:3a:46:1c:6c:3b:ef:9a:53:27:7d:b8:f5:86:cf:35:2e:79:
fa:b6:e1:3f:af:c1:78:0f:51:ed:1e:06:64:76:3c:44:2c:a2:
5a:9c:83:34:62:22:3e:3e:79:0f:88:6a:2a:2d:7e:85:60:5c:
12:06:db:46:9e:07:0e:ec:7e:a2:65:e9:81:b7:60:b8:f4:c1:
99:80:cf:6e:3e:2c:9a:f4:40:ed:59:57:c0:39:8a:48:71:55:
69:11:ab:5b:c0:bf:c0:d2:63:7f:c4:c8:2e:2d:11:31:fa:86:
d0:aa:3a:9f:3b:f1:75:23:ce:86:6a:2f:dd:9a:2c:88:0c:bf:
95:bb:05:fa:58:b6:a2:b0:ec:82:f7:54:f8:aa:f5:64:0a:a0:
57:13:7d:8e:c8:7c:f3:93:65:1f:b1:2f:93:4c:c4:ff:fc:8d:
96:d7:9d:da:20:38:e9:75:55:de:d4:fc:c1:c8:84:ce:f4:20:
18:73:48:81:6d:d1:3c:91:60:9a:28:bc:34:ab:bc:d0:72:71:
a4:31:12:96:2b:4e:60:b5:35:f3:0a:e7:2d:de:75:a3:f2:66:
d6:e9:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:06 2024 by rpki-client on console-ams.rpki-client.org