Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/Mr_N4s56TjVvlf6XlhILyZKVUPM.roa
File: Mr_N4s56TjVvlf6XlhILyZKVUPM.roa (raw, json)
Hash identifier: fzLDWgCOtmNvrrk6ywSlmxu3e0FOHi+eK70jRXntRaY=
Subject key identifier: 32:BF:CD:E2:CE:7A:4E:35:6F:95:FE:97:96:12:0B:C9:92:95:50:F3
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 01856B40E8755DBA2A2ED751F3FC446058C5
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/Mr_N4s56TjVvlf6XlhILyZKVUPM.roa
Signing time: Sun 01 Jan 2023 02:54:53 +0000
ROA not before: Sun 01 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:e8:75:5d:ba:2a:2e:d7:51:f3:fc:44:60:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Jan 1 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32bfcde2ce7a4e356f95fe9796120bc9929550f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:fb:ac:22:c0:14:15:9e:41:0b:8a:6c:0f:
bc:84:1a:7d:e3:10:12:99:e0:f7:f0:53:19:30:d6:
04:cc:ed:87:1c:16:23:bd:12:c4:79:74:8c:6b:c6:
a7:3c:7a:44:2f:dd:28:34:bb:d9:25:e8:a0:a7:4b:
f0:19:07:2f:5a:ee:72:21:fe:11:ea:e5:2a:7d:1a:
0b:82:bd:fb:2b:ba:21:bd:ec:f4:f1:af:af:13:cd:
e9:07:03:3d:1e:c7:d5:ba:bc:70:eb:8b:dd:55:9c:
f6:be:94:72:dc:f0:fa:c6:76:58:ac:74:8f:c4:db:
3a:7a:bc:fd:01:4d:01:28:d0:08:08:02:5e:ce:57:
08:31:8f:cd:5d:b1:67:7d:ac:3c:d5:5b:58:65:33:
e8:69:b4:7c:9d:e2:2e:eb:e3:d2:a6:0c:61:a0:eb:
e5:67:bb:8f:ce:0d:81:d6:57:22:53:54:47:00:b4:
10:28:65:74:5f:ca:95:e3:da:c7:a9:f6:96:7c:22:
6b:5e:01:d0:af:69:80:51:3b:e1:21:7e:b3:1c:06:
02:8b:c1:08:f8:77:ee:4a:9c:84:b9:2f:54:8f:7d:
e3:d5:6f:f0:64:a4:91:11:bc:e9:4e:dd:65:9a:b4:
7c:50:17:01:e2:ff:6f:52:05:4d:9f:3a:87:b6:f4:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:CD:E2:CE:7A:4E:35:6F:95:FE:97:96:12:0B:C9:92:95:50:F3
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/Mr_N4s56TjVvlf6XlhILyZKVUPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:14:2a:ae:61:4a:e8:29:c1:3a:c9:a8:c8:42:b2:80:0c:b4:
41:68:dc:ca:91:9e:29:e6:28:4b:b6:a1:2e:e3:11:9c:7a:c4:
9d:80:3f:74:cf:b0:21:d8:af:db:f4:53:8f:ca:95:b5:0f:61:
e4:d7:6b:14:64:fb:d7:1e:da:21:f7:68:09:c4:a4:1c:b9:f7:
b5:cd:5a:b9:a5:f6:87:37:30:e9:c5:f0:17:ba:8c:e1:92:8d:
3c:65:04:9f:f5:f3:95:85:06:b6:15:00:36:21:c2:90:67:4d:
2f:f1:ea:ad:ad:43:6d:83:67:96:71:0d:2d:c6:fa:50:61:8b:
fe:a5:01:e9:de:64:38:41:14:63:d1:bf:6a:9b:67:96:f0:c3:
e4:aa:00:cd:08:01:be:6a:cd:19:88:96:ae:a6:0c:11:17:1a:
00:09:bc:47:88:cd:ee:eb:3c:7d:b7:71:e0:1e:4f:c7:5e:06:
f2:7c:13:a9:a4:d8:cc:d0:c1:b0:31:4e:80:53:ac:5e:1c:43:
23:e8:66:d7:dc:f2:5d:0b:8e:23:17:1e:b0:0f:f0:f8:67:2f:
48:ad:0a:43:bd:36:e6:ca:b6:0a:7d:05:00:a5:c5:46:d1:4b:
64:c5:2e:0e:68:1e:86:a0:76:4b:a3:0c:0c:2b:ca:b4:98:b6:
ba:1d:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-ams.rpki-client.org