Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/XydJQF6i5Yt4v69my6UU6I_8BAA.roa
File: XydJQF6i5Yt4v69my6UU6I_8BAA.roa (raw, json)
Hash identifier: GzsKxCfaiG6WvU4lpFVoCZfqgffQfACSVqIYf+iBMWg=
Subject key identifier: 5F:27:49:40:5E:A2:E5:8B:78:BF:AF:66:CB:A5:14:E8:8F:FC:04:00
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 018604239B88F0657481A0DDC0E272F771C8
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/XydJQF6i5Yt4v69my6UU6I_8BAA.roa
Signing time: Mon 30 Jan 2023 19:24:47 +0000
ROA not before: Mon 30 Jan 2023 19:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:23:9b:88:f0:65:74:81:a0:dd:c0:e2:72:f7:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Jan 30 19:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f2749405ea2e58b78bfaf66cba514e88ffc0400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:9c:14:d7:8b:2f:9f:f9:f9:da:18:11:da:
45:67:17:73:39:fe:2a:9a:fa:6d:87:e7:bf:59:0d:
72:9c:f2:be:a0:df:b3:57:b8:39:09:71:3d:d1:3b:
8f:be:27:7e:8e:e3:40:12:06:af:bb:b1:4a:e5:d6:
94:45:44:41:84:70:52:ba:c7:09:f8:ac:f5:22:34:
2d:da:fa:94:ca:d7:37:89:8e:e7:27:07:f5:27:c6:
6e:78:f0:02:59:f5:1d:7e:e5:93:c2:b6:32:4a:0a:
da:2b:8b:d3:a1:56:96:56:25:a1:ba:50:90:94:5b:
34:6d:dc:29:15:f9:10:32:b8:23:f3:01:9e:cc:5f:
f6:85:ac:6d:3d:f7:b5:66:c2:9d:7c:63:72:77:e7:
a2:fc:25:a6:81:e0:58:11:ef:df:1b:a6:f4:07:2f:
fb:3f:87:70:70:1c:3b:e1:5f:b6:29:00:1a:0d:00:
db:20:4d:c5:9c:9c:16:f1:57:20:1f:2f:24:da:d3:
ce:0b:4e:8c:a7:81:e8:e6:fe:f1:31:b4:0c:7e:b7:
48:d5:89:a4:16:63:78:03:7d:25:03:2b:ea:22:b8:
84:58:b2:e6:7f:b7:4f:d2:ce:6d:85:fe:b7:b5:95:
69:d8:ee:39:af:25:99:c9:3c:21:9c:7d:46:e7:d3:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:49:40:5E:A2:E5:8B:78:BF:AF:66:CB:A5:14:E8:8F:FC:04:00
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/XydJQF6i5Yt4v69my6UU6I_8BAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
48:83:ea:f7:ad:04:54:df:eb:51:c0:b9:f9:d9:cd:36:ba:98:
8f:e9:4f:5a:db:34:94:b9:4e:e8:73:94:50:b1:83:1c:d7:4f:
17:0b:d3:93:d7:97:a7:6b:8e:38:32:b6:00:ab:bd:d0:26:35:
30:16:c4:7c:c2:e8:20:e7:f4:24:df:95:35:08:2f:7e:f5:ab:
04:27:3b:b7:d0:b4:31:f3:7c:62:a3:c1:8f:61:9a:2d:67:73:
04:38:b1:48:5a:dc:94:f3:a3:65:42:85:8b:2f:dd:50:f5:5f:
fe:40:9c:bb:a4:9c:15:b6:ba:82:c6:19:b3:72:bc:44:be:c9:
f4:7b:23:37:78:05:65:22:77:9a:c6:db:2f:d8:bd:e0:eb:2f:
74:cf:82:1e:fc:94:ef:5d:e1:b8:49:65:7b:0b:5d:c2:b6:00:
f0:df:f1:a6:94:b7:49:82:82:65:40:44:13:8b:5f:7e:f7:73:
8f:69:df:b1:a6:17:cb:d4:5e:64:32:e9:bd:ca:55:93:03:0a:
f7:4e:f6:2c:8a:4f:c4:a4:3a:95:ec:5e:27:af:ae:be:a9:7e:
2b:bb:4d:17:67:c4:cd:9e:0f:f1:9a:32:0e:1a:2c:da:34:d4:
78:46:85:80:d0:24:47:33:87:13:d2:b9:c6:07:d4:e4:22:9a:
78:be:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:16 2023 by rpki-client on console-ams.rpki-client.org