Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/gUTBKT7iG_h4Ql8Eu09zM7-ODIU.roa
File: gUTBKT7iG_h4Ql8Eu09zM7-ODIU.roa (raw, json)
Hash identifier: E172GZQOMizBqgixhvkhOK1FoH2/1EjneOm9bP5JTAs=
Subject key identifier: 81:44:C1:29:3E:E2:1B:F8:78:42:5F:04:BB:4F:73:33:BF:8E:0C:85
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01856F8B951078020F94D8D1F407E73E879D
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/gUTBKT7iG_h4Ql8Eu09zM7-ODIU.roa
Signing time: Sun 01 Jan 2023 22:54:56 +0000
ROA not before: Sun 01 Jan 2023 22:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.16.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:95:10:78:02:0f:94:d8:d1:f4:07:e7:3e:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Jan 1 22:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8144c1293ee21bf878425f04bb4f7333bf8e0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:c2:56:9a:d1:ac:35:5b:15:cb:7a:f7:82:
10:d0:19:44:ee:a4:6a:43:aa:eb:e8:c6:42:c3:59:
6d:d3:db:3a:58:03:db:ba:f3:cd:dd:d2:b1:f5:4b:
b0:d1:97:65:f7:3b:53:fa:fa:11:dc:02:7c:ec:02:
05:a6:52:d6:5e:17:3f:c2:b6:a1:bd:76:de:dc:dc:
b3:e6:18:40:9e:7a:3e:44:6e:6b:e5:a9:7b:d4:43:
ae:5c:0a:41:09:0c:7f:a1:ea:82:26:95:bd:92:35:
d9:ca:03:13:90:b5:5b:e8:a0:33:a0:8f:26:2e:b1:
00:bf:37:2e:0f:f5:15:05:dc:d0:3f:88:01:43:61:
59:28:d4:52:0b:01:8f:a6:db:73:d0:e1:0a:e3:fb:
6d:7d:ca:f2:e7:22:9e:50:f8:1c:9f:77:79:d8:8d:
32:fd:07:e9:e6:2d:a0:a9:4c:1e:a1:d7:41:b1:76:
94:6b:dd:bd:b2:b6:8e:9c:d4:a1:e1:59:db:8d:b0:
a4:d3:b0:3f:96:30:30:ac:4a:f3:d9:b6:5b:99:6d:
d1:a7:ce:86:78:aa:68:fc:c7:f0:eb:13:e9:df:09:
83:78:85:d2:94:4a:97:10:50:34:4c:bf:bb:de:7e:
d9:60:d8:11:0a:93:00:e8:32:45:5e:fd:f2:92:92:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:C1:29:3E:E2:1B:F8:78:42:5F:04:BB:4F:73:33:BF:8E:0C:85
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/gUTBKT7iG_h4Ql8Eu09zM7-ODIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.245.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d4:0e:df:2d:9d:54:7e:47:b8:09:4b:d0:87:6a:37:79:1a:
84:aa:dd:30:26:6a:96:df:29:f2:50:89:1c:d6:86:b5:dc:c2:
d9:1c:2a:08:37:31:7d:6f:97:a8:9c:15:7c:db:1a:5b:8c:b7:
1c:cb:d0:aa:21:0f:64:7f:ec:62:8c:f6:6c:cb:84:d0:42:a7:
15:27:b2:4a:2c:17:df:1f:cb:2e:6a:34:62:86:c2:59:f9:d3:
af:ac:8a:44:49:7d:48:26:03:d1:2a:a4:41:fd:94:c7:fa:b0:
d3:82:20:13:84:7b:46:ac:88:b7:d6:e0:1c:88:98:b5:38:8f:
5d:1c:7c:9d:cb:7d:00:76:33:04:70:80:73:9d:66:9b:e4:4a:
d7:79:28:45:6c:52:cf:51:79:b1:23:0b:d9:0c:5b:2e:c0:58:
ec:2b:2b:e5:8c:52:0c:bc:d4:1f:5b:b4:75:34:b3:b7:08:3e:
79:45:d8:6e:6f:05:f9:80:b2:70:f8:5c:fe:21:a8:49:46:6f:
d2:30:24:b2:7b:b9:3f:d8:e2:e9:e9:4a:c0:4f:f0:6a:5a:b4:
da:35:5c:59:ec:bd:9d:67:f1:1d:e6:14:84:0f:0c:03:cc:6b:
5e:42:6a:9d:d3:01:33:3f:6c:89:07:67:39:8f:d6:19:a1:7e:
8d:4f:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:13 2024 by rpki-client on console-fra.rpki-client.org