Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/xof023NLbwMZmMMN6pSgKb82W4c.roa
File: xof023NLbwMZmMMN6pSgKb82W4c.roa (raw, json)
Hash identifier: IMs/Vl9mYSLXS4ntPqdW4D0RxAoFgtXH8JJVBsbk8OA=
Subject key identifier: C6:87:F4:DB:73:4B:6F:03:19:98:C3:0D:EA:94:A0:29:BF:36:5B:87
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01880A5346055543D327E79E8C10DC8D845C
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/xof023NLbwMZmMMN6pSgKb82W4c.roa
Signing time: Thu 11 May 2023 10:20:09 +0000
ROA not before: Thu 11 May 2023 10:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.156.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 06:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:53:46:05:55:43:d3:27:e7:9e:8c:10:dc:8d:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 11 10:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c687f4db734b6f031998c30dea94a029bf365b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:d7:9d:0c:9d:0b:02:15:d6:9f:c8:a4:b3:
bd:70:87:d8:97:ab:02:c2:69:a4:ea:eb:f0:9f:5b:
b0:33:e4:a7:7f:23:41:5a:e6:44:36:c1:09:ef:42:
22:af:af:71:42:32:06:de:31:e7:b6:13:43:b8:e5:
97:2f:00:2a:bb:60:0b:d5:1a:88:bf:62:ae:f5:55:
ad:a0:1b:65:bc:22:7e:3f:a4:ef:97:c4:50:f8:91:
91:11:58:89:79:ce:b4:ab:b4:9a:cd:2f:08:10:09:
27:26:47:bd:68:ab:67:e8:91:df:ea:16:57:1a:83:
69:cb:47:de:0c:e5:ee:63:0b:e8:ad:d4:fd:e1:4e:
06:06:81:a0:7a:5a:6c:d4:29:81:69:e1:26:7d:ae:
e1:ac:35:9a:fe:b4:6e:e6:16:d3:68:02:04:a5:b5:
8f:bb:c6:7e:ee:de:c9:7d:44:06:74:91:a8:b0:07:
81:9b:79:de:b6:db:17:da:d3:ad:b6:1c:d3:0e:b6:
f7:98:7e:3c:62:0e:27:3a:91:72:70:1c:78:52:f8:
ab:d5:7e:f5:52:6b:e2:9c:4a:7c:7b:97:e9:c8:ae:
0a:22:f8:f1:43:40:c7:03:2c:50:3c:20:8e:ca:0a:
a2:e7:f6:21:b9:39:7e:9f:06:df:e6:0b:96:6c:06:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:F4:DB:73:4B:6F:03:19:98:C3:0D:EA:94:A0:29:BF:36:5B:87
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/xof023NLbwMZmMMN6pSgKb82W4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.228.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fd:6b:bd:7f:09:56:81:a7:be:78:fe:ef:dc:13:42:7d:9b:
77:0f:de:e7:93:ba:24:a1:e4:83:fb:e8:cb:ef:49:08:dc:73:
4e:a1:7d:19:a4:7d:12:fe:9c:8c:30:ac:22:73:19:39:25:60:
bf:3e:05:b6:56:b2:be:c9:ba:08:e4:98:41:c8:e8:d5:3d:92:
16:08:ee:e3:ce:f6:10:79:74:93:d3:bb:7e:76:81:a0:6b:55:
35:e2:9b:9e:bb:de:2c:ba:77:6c:a8:ae:f2:d6:2d:33:57:8f:
70:44:fb:a0:e1:2e:90:14:90:85:55:82:0c:b8:1c:fc:9c:89:
3a:f1:2e:9d:fe:0c:45:6a:54:2c:a5:94:80:50:83:32:dc:6e:
3c:23:06:52:5f:25:b5:5c:54:4b:82:3f:91:b2:72:5d:91:9c:
b2:6d:2c:06:85:50:0b:13:a2:6f:26:f7:20:9f:f3:1e:1e:d6:
89:fe:9a:74:64:4f:88:b0:97:43:af:cd:a6:2a:1c:98:86:a8:
e1:de:fe:aa:09:4c:12:d9:2a:25:3a:22:71:10:84:53:b7:31:
70:c4:fc:46:d6:3f:e4:60:c2:e5:36:46:30:c1:bb:d2:20:f4:
a6:a2:59:e2:29:56:e6:9e:18:14:47:5c:fd:6c:df:77:dd:37:
11:72:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org