Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/7aVcfi-SiE2aRIP7JQv3k7dFtGs.roa
File: 7aVcfi-SiE2aRIP7JQv3k7dFtGs.roa (raw, json)
Hash identifier: T/mXR9nEoQvzmKlqTcGZ4o/wseVTLK8sLfzROEx6830=
Subject key identifier: ED:A5:5C:7E:2F:92:88:4D:9A:44:83:FB:25:0B:F7:93:B7:45:B4:6B
Certificate issuer: /CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Certificate serial: 0185E7F3C0A6965E0B29B3BA326FA34465DE
Authority key identifier: 1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/7aVcfi-SiE2aRIP7JQv3k7dFtGs.roa
Signing time: Wed 25 Jan 2023 08:03:09 +0000
ROA not before: Wed 25 Jan 2023 08:03:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 194.31.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:f3:c0:a6:96:5e:0b:29:b3:ba:32:6f:a3:44:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Validity
Not Before: Jan 25 08:03:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda55c7e2f92884d9a4483fb250bf793b745b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:62:c4:94:c9:13:fc:3e:4b:cd:63:f6:ee:
4a:2d:f5:46:1d:84:31:38:bb:22:ff:e2:ac:3d:f3:
07:ac:51:a2:76:03:64:b6:a4:f4:a3:c5:3d:4b:47:
8f:28:15:95:86:ea:a5:81:65:40:c7:00:15:f2:15:
1e:5e:d6:d7:61:3f:ef:70:b8:88:56:82:b5:99:60:
23:89:6a:51:9a:ef:1d:af:ba:2b:3f:8f:5e:23:85:
34:f6:32:ae:6b:bc:b0:26:33:f7:e4:a8:73:53:89:
62:b5:f1:a5:6b:f7:7d:f0:f4:a5:b8:47:25:43:03:
d1:1f:36:0c:84:e0:66:fd:26:c0:f5:dd:47:22:74:
7b:50:58:f4:b3:9c:fa:bd:85:da:f4:b5:bc:80:f7:
2f:2f:15:52:d0:53:28:d9:77:3a:c0:0c:5d:a2:f6:
8c:e0:f0:1a:4b:fb:86:47:84:9e:f1:24:27:f4:c5:
5b:9d:3f:1b:01:db:3d:32:46:46:07:7a:c7:fd:9f:
61:c0:ed:2f:5e:37:33:fa:1c:27:4a:d1:24:60:64:
6a:1e:1c:33:b0:4c:ea:d9:0c:9c:58:84:01:d3:81:
93:c9:af:ff:3a:04:37:8f:16:a3:d4:ff:dc:f7:be:
a4:98:30:e9:df:42:6c:cc:75:22:71:c7:a6:b4:27:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:5C:7E:2F:92:88:4D:9A:44:83:FB:25:0B:F7:93:B7:45:B4:6B
X509v3 Authority Key Identifier:
keyid:1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/7aVcfi-SiE2aRIP7JQv3k7dFtGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f8:e9:0d:4c:bc:d5:11:81:88:6d:77:a3:70:48:da:a4:6e:
2b:8f:76:d5:1a:9d:3c:75:f7:24:92:9a:80:8b:3d:74:5c:5d:
a4:7e:74:10:78:e4:9d:5a:46:48:5e:70:d4:38:1e:23:05:74:
ae:79:22:27:69:de:42:6d:76:d8:da:f1:60:77:a8:90:13:ae:
fd:ed:5b:f1:23:6c:2f:f3:b1:98:db:a6:8f:22:e1:30:c5:1a:
d5:7e:9f:55:ac:6c:1e:d5:10:b0:23:63:a9:c8:6b:b9:82:30:
e6:04:60:da:db:6a:22:d7:0e:46:c6:2a:c9:3a:ef:20:39:c4:
bb:e5:ce:a6:1a:04:2d:d3:9a:db:48:28:ea:51:d3:d9:32:52:
d5:fc:4f:f5:92:e2:82:8a:33:13:f9:a3:69:8a:72:15:6c:40:
06:f2:19:d8:12:7e:eb:2d:79:36:b9:2a:eb:7f:7e:94:d0:8f:
71:a7:c0:22:ee:7d:ce:b5:da:90:ff:b6:5d:1b:46:09:73:61:
b5:78:b8:3e:e8:a9:be:21:28:a2:9c:b5:86:52:21:d7:ea:24:
b3:3e:a0:67:67:b5:cd:3c:67:05:de:b1:d2:ad:6f:44:0a:08:
da:71:76:c3:37:5c:23:85:ba:89:7a:4d:c2:fd:7e:71:c0:5f:
6d:2a:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:32 2024 by rpki-client on console-fra.rpki-client.org