Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/tn-a4S96-3F1KNPxv1LyIDJ6pHk.roa
File: tn-a4S96-3F1KNPxv1LyIDJ6pHk.roa (raw, json)
Hash identifier: sCfyMCcHVaISa6TiHmQYc0x2qBqe60b+Jp3Cce6ZLvo=
Subject key identifier: B6:7F:9A:E1:2F:7A:FB:71:75:28:D3:F1:BF:52:F2:20:32:7A:A4:79
Certificate issuer: /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial: 01865FD0AF370ED7620CE896FF53B8C6401B
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/tn-a4S96-3F1KNPxv1LyIDJ6pHk.roa
Signing time: Fri 17 Feb 2023 14:39:17 +0000
ROA not before: Fri 17 Feb 2023 14:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 194.62.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:d0:af:37:0e:d7:62:0c:e8:96:ff:53:b8:c6:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Validity
Not Before: Feb 17 14:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b67f9ae12f7afb717528d3f1bf52f220327aa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:76:87:5c:e5:86:ec:3b:56:1e:33:b9:ce:
f5:8f:72:4b:89:9b:8b:07:77:a8:ef:45:7d:59:f7:
20:8c:af:07:aa:e5:cb:d9:18:99:ea:00:53:ca:35:
5d:45:cb:7f:e3:fd:5b:24:b2:13:c1:6b:6b:5f:eb:
6d:09:f0:49:75:b8:b8:fd:30:1d:c9:ba:cc:cb:ab:
06:87:5c:d9:94:dc:fb:e3:1f:1c:2b:8c:c8:0a:00:
e3:08:18:e2:c2:b6:0f:dc:5d:fd:20:dd:4b:c8:9d:
8e:e3:3a:b0:fc:51:26:ca:f9:ef:30:ee:83:5e:04:
9c:07:53:7d:a2:a4:e3:3f:b7:8c:84:be:a6:e0:56:
fa:05:ad:2c:55:db:2f:e0:4c:a5:a0:dd:7d:ce:46:
54:8a:d7:a1:3d:2a:c1:b4:03:c5:9c:74:37:f5:af:
fd:8d:ee:60:b5:6d:f8:7f:3d:01:e4:f3:94:35:ab:
d5:2b:ae:40:f6:d2:38:38:06:71:db:c4:71:fc:63:
1e:43:32:fc:ee:18:2c:fa:54:15:09:6d:73:e8:4c:
ab:26:53:87:8f:4d:d6:ef:9b:24:3b:ae:71:b7:2e:
68:89:d0:eb:e9:1d:bd:df:21:28:3f:70:da:88:b4:
df:75:22:37:15:c2:f4:58:38:1c:fa:07:cd:3d:ac:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:9A:E1:2F:7A:FB:71:75:28:D3:F1:BF:52:F2:20:32:7A:A4:79
X509v3 Authority Key Identifier:
keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/tn-a4S96-3F1KNPxv1LyIDJ6pHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:da:f9:10:ee:b9:ac:63:75:ac:f2:2e:90:16:b5:29:f9:10:
2c:e5:5d:5d:96:5b:33:65:f2:2f:78:a2:97:ed:b4:cc:ad:27:
fe:8a:0e:f9:53:57:90:9b:63:cd:48:d4:ff:d1:ba:7a:3c:cd:
ba:68:7e:b4:d2:b1:3d:68:a7:0d:c9:3b:c3:1e:bc:52:b0:54:
b4:da:b0:bc:71:9e:77:6b:1b:d0:a4:e8:33:08:b3:9d:ca:ff:
1a:af:bb:ac:74:82:71:b9:53:6b:67:19:52:c6:4e:9c:ba:fb:
65:aa:15:d5:5a:c4:99:c1:9f:15:8e:11:a9:8f:44:71:9f:fb:
a9:5b:90:6b:0b:07:20:12:90:25:67:24:4f:62:3f:ff:43:4e:
43:26:b3:fb:be:71:4b:cc:a4:ab:46:51:56:d2:1a:b0:36:38:
c3:77:68:7a:6d:58:28:3f:24:b1:83:0e:ba:5e:cf:44:3c:23:
81:92:db:27:d6:c1:cf:bd:3d:c8:96:8e:15:b2:42:6b:a5:00:
81:9d:fc:16:0e:3b:7c:b8:49:7d:9b:36:4f:95:3f:73:ed:5a:
29:01:bd:8a:3a:e0:46:9d:0b:62:fc:9e:31:8a:2e:35:2d:f7:
9f:ab:55:55:11:26:28:8f:dd:11:26:72:70:16:df:d2:fa:f1:
ca:e2:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org