Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1-xg-MoEW2oFSeKrUm4sW08wJM2c.roa
File: 1-xg-MoEW2oFSeKrUm4sW08wJM2c.roa (raw, json)
Hash identifier: 1HYIfPepLEKs2JGGdJXs8NSBPWQ0+By/VP/93lZrqUQ=
Subject key identifier: FB:18:3E:32:81:16:DA:81:52:78:AA:D4:9B:8B:16:D3:CC:09:33:67
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 01882DBBAC2A4CAE66FE58517AB695355541
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1-xg-MoEW2oFSeKrUm4sW08wJM2c.roa
Signing time: Thu 18 May 2023 07:20:54 +0000
ROA not before: Thu 18 May 2023 07:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.59.8.0/24 maxlen: 24
194.59.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:bb:ac:2a:4c:ae:66:fe:58:51:7a:b6:95:35:55:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: May 18 07:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb183e328116da815278aad49b8b16d3cc093367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:32:aa:a9:9d:9b:b0:24:8d:78:67:ab:78:
91:ab:fe:4b:79:f5:ad:48:e1:58:df:47:f6:2e:9a:
83:73:57:9d:3f:16:67:1e:5e:55:19:11:56:a2:ce:
bf:56:07:e9:86:5d:82:be:6c:ac:55:e8:ae:9e:d0:
1d:e5:1e:7e:e4:2f:27:41:1b:0c:48:7a:cb:96:0c:
1d:b0:a5:84:0e:42:9b:0b:ef:c9:11:e7:f8:bc:23:
91:66:4a:61:31:4c:f8:72:bf:8b:0d:ea:98:be:91:
75:d7:e1:52:7a:44:95:6a:a4:2b:fa:a6:a0:2d:48:
45:af:50:ee:a4:9b:f8:87:e3:50:8e:cb:e9:13:30:
7b:c1:03:e9:c5:b0:94:fb:37:c6:2c:c4:a5:27:58:
03:ec:5c:1c:c8:97:76:bb:56:f5:55:b5:de:89:e2:
b7:8a:ee:8b:c9:48:99:84:c1:e0:d1:09:70:f5:f2:
6b:2f:07:66:ba:4e:0f:3b:8e:11:74:af:ee:2a:da:
11:e5:83:30:2d:fd:06:ca:43:08:18:0a:af:12:9f:
8f:f5:77:2a:6b:cc:9d:b6:2c:7e:54:1a:ea:07:ea:
75:b8:8d:ba:3f:ec:50:6c:fd:09:f1:e6:2c:80:68:
7f:30:b0:01:6e:7d:e9:59:97:28:61:56:92:55:95:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:3E:32:81:16:DA:81:52:78:AA:D4:9B:8B:16:D3:CC:09:33:67
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1-xg-MoEW2oFSeKrUm4sW08wJM2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.8.0/23
Signature Algorithm: sha256WithRSAEncryption
36:6f:f5:4a:2b:1f:c3:57:9a:3f:00:90:5f:14:79:98:f6:5c:
bd:d5:25:59:6b:30:ba:94:92:ec:38:d5:cb:d5:db:f6:a9:3f:
5c:00:a5:8a:5f:bd:ed:87:07:2d:4d:aa:f7:e5:6f:24:e2:dd:
e6:80:89:ce:aa:e8:ee:f3:00:16:d6:6e:67:5b:77:ad:81:49:
69:03:86:bf:f6:2a:51:04:35:53:3e:dc:fc:15:c5:81:57:01:
ed:e6:f9:90:4c:24:e2:66:c8:5a:31:79:c8:bf:6d:54:6b:9d:
f1:d0:0c:cb:fe:84:b4:51:31:e5:21:8a:19:4a:38:67:05:db:
84:18:04:54:6e:93:b7:e7:cd:58:0c:56:b9:d1:d7:0f:f1:9b:
31:fa:db:d5:0f:39:1c:6b:8b:f3:40:52:e7:6c:66:52:48:26:
44:a2:72:56:07:94:ed:f2:e4:5e:a6:2d:58:f7:ab:55:ab:48:
63:3a:f0:24:ea:a6:bd:97:06:a0:04:6b:39:60:5a:3a:20:5c:
de:29:c7:c1:15:c9:a0:7d:da:89:f0:97:eb:6d:89:a8:51:aa:
57:e6:c1:7a:8e:c7:34:fc:4f:2c:7f:43:f2:9d:27:e5:b3:5b:
01:8c:c3:41:ef:77:00:13:b1:0e:f3:e2:93:cf:fc:31:2e:a3:
e8:7e:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-ams.rpki-client.org