Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/_AKb47yvumNcgTQLAxEbBshOwrs.roa
File: _AKb47yvumNcgTQLAxEbBshOwrs.roa (raw, json)
Hash identifier: odek+KkSixcWoPRWTUIbhPf5JfD+9+uTuQgIBsRZoN8=
Subject key identifier: FC:02:9B:E3:BC:AF:BA:63:5C:81:34:0B:03:11:1B:06:C8:4E:C2:BB
Certificate issuer: /CN=6abe4b2be924e56962dfa404b4791c230e14c54c
Certificate serial: 01856C6EEE662E44DB0F1D922557181DC722
Authority key identifier: 6A:BE:4B:2B:E9:24:E5:69:62:DF:A4:04:B4:79:1C:23:0E:14:C5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar5LK-kk5Wli36QEtHkcIw4UxUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/_AKb47yvumNcgTQLAxEbBshOwrs.roa
Signing time: Sun 01 Jan 2023 08:24:47 +0000
ROA not before: Sun 01 Jan 2023 08:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.32.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:ee:66:2e:44:db:0f:1d:92:25:57:18:1d:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abe4b2be924e56962dfa404b4791c230e14c54c
Validity
Not Before: Jan 1 08:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc029be3bcafba635c81340b03111b06c84ec2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:42:b6:90:88:a3:84:81:80:6f:2e:32:d3:
8a:55:5e:7d:03:91:5f:94:5d:69:02:fe:5b:46:80:
fc:b1:99:dc:8b:0d:02:6e:04:b6:4b:65:76:21:6b:
98:d6:27:21:68:af:7f:39:d2:a1:74:f2:e6:07:87:
25:cf:e7:5e:3e:73:02:b7:60:e8:49:ff:e1:e2:f1:
ca:2c:24:af:88:0e:9a:f9:98:24:8e:4e:6a:90:69:
d6:6c:e0:a0:27:43:e5:55:99:45:c1:9a:72:56:d0:
91:38:f3:31:fc:f4:3b:3e:0b:b5:b6:84:48:e6:b4:
3f:76:eb:d1:96:3d:01:5c:b7:5e:c7:a6:9c:7d:a5:
84:78:90:a4:f3:e0:94:c8:ef:b6:d3:7f:66:5c:e0:
f9:b1:ed:83:17:dc:98:cb:50:46:20:75:1e:d6:87:
21:aa:bf:03:eb:20:ae:25:88:09:52:e7:ea:f0:cf:
60:c4:fd:00:2d:07:ab:2d:c0:9c:b2:05:a6:31:c1:
f8:43:c8:b9:dc:0f:ec:33:52:77:a8:39:1e:0e:dc:
dc:78:c3:3a:cc:b8:a1:9e:ce:a2:95:00:c6:f4:3d:
fa:e0:58:ef:9e:92:fb:0a:f8:d2:19:a6:e2:f6:ea:
8f:60:89:40:19:68:4c:91:e7:5f:b4:46:32:a4:6d:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:02:9B:E3:BC:AF:BA:63:5C:81:34:0B:03:11:1B:06:C8:4E:C2:BB
X509v3 Authority Key Identifier:
keyid:6A:BE:4B:2B:E9:24:E5:69:62:DF:A4:04:B4:79:1C:23:0E:14:C5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar5LK-kk5Wli36QEtHkcIw4UxUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/_AKb47yvumNcgTQLAxEbBshOwrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/ar5LK-kk5Wli36QEtHkcIw4UxUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.105.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e9:18:cf:c9:1f:50:3c:eb:ca:45:96:34:f5:80:26:7a:8d:
3a:01:36:d3:d8:22:3b:06:c9:06:e0:fb:0e:6e:e0:8e:68:57:
8b:b3:11:1f:1a:a5:b1:43:06:af:e8:a0:26:06:37:63:e2:6d:
97:9e:f1:80:22:1c:4b:bd:65:8d:26:d0:86:9c:19:3b:4b:49:
c4:b4:f1:39:1f:6c:a0:1f:8e:eb:b0:99:27:72:e0:c3:0f:4e:
04:c9:68:ad:3b:46:b0:9f:1e:84:6a:5f:c6:6b:97:54:b9:a3:
41:ce:ed:57:f0:e2:7c:cc:f9:89:d4:bf:d7:a8:60:bd:60:02:
e0:27:a2:1b:05:dc:95:4f:55:77:3e:41:6f:e6:74:d5:3a:19:
cd:8a:c4:b8:61:16:dc:c4:82:ef:c1:7d:14:1e:5a:3d:15:78:
63:a3:0e:d6:d0:dd:ce:91:90:e4:69:04:8d:6c:2a:ff:31:1e:
ac:55:7b:e5:d6:08:b7:0d:94:4c:d3:50:1f:fd:ed:c5:71:36:
03:d5:51:34:96:23:e0:5d:eb:98:33:7f:fe:76:cf:d4:e5:35:
82:19:ea:cb:12:60:51:0e:ee:fc:7e:26:63:00:ec:b9:26:81:
b7:75:38:5a:49:91:91:1b:13:ce:10:92:97:f5:d2:8e:f9:54:
2f:3a:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org