Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/3VEu39oKjLyfon5aupTtplM7ZQ8.roa
File: 3VEu39oKjLyfon5aupTtplM7ZQ8.roa (raw, json)
Hash identifier: CHuV6N76vwBeyHF/4IP6HTYBP1ju3mXizneWW7NIFu4=
Subject key identifier: DD:51:2E:DF:DA:0A:8C:BC:9F:A2:7E:5A:BA:94:ED:A6:53:3B:65:0F
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306B112B0811FEF0E6FA6E3B34D692
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/3VEu39oKjLyfon5aupTtplM7ZQ8.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49180
IP address blocks: 194.88.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6b:11:2b:08:11:fe:f0:e6:fa:6e:3b:34:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd512edfda0a8cbc9fa27e5aba94eda6533b650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:61:ee:4d:73:da:84:0d:ee:e5:06:da:db:
71:1d:87:90:ad:91:66:f3:18:fc:a8:84:30:36:71:
92:0c:d1:ff:05:7c:a1:42:64:86:23:0c:bb:76:8d:
8a:5e:03:1b:43:7b:01:ba:c0:68:69:88:fd:aa:7b:
df:95:23:5f:86:9e:4c:a8:29:61:32:be:ef:da:8f:
7c:b6:fc:07:b9:1f:82:24:83:07:d4:1b:25:f1:4a:
e3:71:87:e5:a5:ba:07:3d:0d:80:7e:a9:7f:ae:41:
c0:3b:19:42:89:fb:26:74:74:52:54:c9:47:be:11:
cd:9b:0a:fb:fd:73:6b:1f:54:fb:c3:80:3d:ef:40:
f0:48:cd:bd:86:57:04:d3:ea:44:ed:1f:4e:08:f2:
ba:b2:61:b5:f9:6f:a4:e2:e9:f4:4e:63:17:d1:6e:
c2:00:ff:c1:a4:16:ef:7a:36:1f:fe:34:57:f3:52:
af:7c:e1:0e:fb:fa:85:89:5e:bb:f7:4a:1e:94:96:
20:1c:4d:0b:3d:8a:f5:fd:a1:f4:8c:37:76:5e:ab:
ff:27:dc:f2:a0:b9:65:31:81:c0:aa:08:f5:c6:8d:
61:08:7d:dd:c0:2d:a0:91:d9:84:14:6c:55:47:e6:
13:09:c9:93:9b:3e:6d:8b:86:2d:4f:c5:af:1f:60:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:2E:DF:DA:0A:8C:BC:9F:A2:7E:5A:BA:94:ED:A6:53:3B:65:0F
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/3VEu39oKjLyfon5aupTtplM7ZQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.56.0/24
Signature Algorithm: sha256WithRSAEncryption
23:05:9f:9a:ff:0d:77:87:de:8f:a7:ef:80:8c:d3:2c:eb:76:
cb:9c:e8:34:dd:20:3b:88:13:55:0d:0f:1f:cf:69:03:4d:53:
23:e2:5b:c1:68:b0:4c:38:a3:a8:18:82:f3:e2:44:4b:4d:e8:
79:60:b3:b4:95:b8:25:39:27:2a:59:6a:b1:35:9c:bc:27:8c:
cc:8e:2b:67:3d:f1:a5:72:10:fa:e1:47:10:bd:ca:7f:4c:cf:
46:92:5d:86:bb:b8:64:bd:ce:42:3b:ed:3c:2f:3b:3c:a7:ee:
16:31:90:32:85:76:5b:f0:43:b1:5a:64:97:6b:1a:71:01:71:
aa:d0:0d:9e:07:29:87:f7:e2:ef:61:79:75:8a:51:4b:61:58:
8d:10:d5:26:2e:a6:94:56:1c:ae:8a:2a:e4:37:3e:9d:c4:fc:
e9:bd:03:35:60:21:b6:90:ee:94:bb:bf:f8:15:44:55:c8:c0:
d5:4f:71:bf:60:ca:89:36:87:50:52:b9:18:bb:dc:e8:86:bb:
27:42:d9:df:77:3c:e8:8a:16:c3:5a:f5:60:81:31:52:0f:16:
e7:8d:97:02:68:36:fe:31:57:18:d6:22:da:67:ee:20:37:4d:
e4:6c:1a:30:29:52:ee:76:23:bc:3c:5a:4c:4a:0a:a2:17:bc:
79:6b:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:13:00 2023 by rpki-client on console-fra.rpki-client.org