Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/AIGKhN3p1mnAnJEZALSCNML3fdw.roa
File: AIGKhN3p1mnAnJEZALSCNML3fdw.roa (raw, json)
Hash identifier: 6XHWsufcpMCCtNQsCG67xzrcjujWtf/FUTcKQnU0v9o=
Subject key identifier: 00:81:8A:84:DD:E9:D6:69:C0:9C:91:19:00:B4:82:34:C2:F7:7D:DC
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 01856E01E55246C5B19555D8F00850AF0FB9
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/AIGKhN3p1mnAnJEZALSCNML3fdw.roa
Signing time: Sun 01 Jan 2023 15:44:55 +0000
ROA not before: Sun 01 Jan 2023 15:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31098
IP address blocks: 194.39.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:e5:52:46:c5:b1:95:55:d8:f0:08:50:af:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Jan 1 15:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00818a84dde9d669c09c911900b48234c2f77ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:03:dd:f7:c7:38:b2:a0:84:8d:8a:d7:d3:
02:4a:24:26:d9:7f:21:0b:05:b6:fe:cb:00:66:95:
4b:2d:fe:80:03:58:ea:05:9e:bc:48:ec:a4:7a:56:
76:d2:3b:a1:72:87:57:00:b2:e8:e4:95:f1:05:10:
36:3e:91:88:a9:13:83:18:99:35:f4:9a:6f:bf:28:
19:50:9b:66:15:24:5c:9f:31:2b:d1:67:f2:9b:0b:
0e:a4:9d:b0:dd:b5:56:dc:ef:d6:74:2d:99:45:a4:
3b:b5:cc:11:e2:11:96:6e:6c:19:d3:00:c5:18:71:
6b:2d:a0:fd:a3:f6:91:b1:31:6e:d0:bb:0c:cf:5a:
a0:42:f5:38:c8:9c:57:37:f5:76:bf:4d:88:26:d7:
89:4f:94:16:8d:87:ec:5e:5b:ab:0d:1f:dd:bf:68:
6c:e4:c4:56:d3:fb:50:76:9e:74:6a:73:94:f9:75:
15:b1:18:06:7a:bd:c8:49:f0:f9:96:77:6c:46:aa:
03:01:62:12:02:3a:52:10:a3:b0:9e:91:ec:8b:c2:
d6:2b:9c:8b:60:8c:73:5e:f6:bc:ea:d8:4b:eb:80:
16:d6:17:ef:ba:f1:5a:b5:3b:c1:21:cf:c3:b6:bb:
f4:03:aa:0c:95:76:0d:b1:9c:09:58:96:ba:ea:0e:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:8A:84:DD:E9:D6:69:C0:9C:91:19:00:B4:82:34:C2:F7:7D:DC
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/AIGKhN3p1mnAnJEZALSCNML3fdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:17:7a:09:d4:07:b5:ed:df:6c:bb:b3:8a:2d:59:d6:66:51:
2d:cb:6c:74:2f:13:87:a6:f5:be:94:52:54:45:53:a9:88:c7:
93:e3:74:c3:6e:62:88:c4:7f:3f:9b:e7:8c:0b:d3:ba:ab:51:
81:76:96:c0:99:1d:70:41:b1:63:da:82:0d:a2:1c:9c:3c:96:
dc:b0:95:d5:85:cb:e6:90:8c:df:bd:21:80:34:67:eb:6f:80:
67:24:5e:79:6b:c3:49:af:6b:41:56:bc:54:fa:c4:71:4e:34:
35:70:87:74:e6:5f:cd:51:5e:d3:28:6a:eb:4b:92:93:b9:c4:
7c:8d:d5:8e:29:b3:0b:de:f9:87:62:d8:92:25:13:f2:23:cd:
fe:80:a3:2b:87:a6:a0:57:f4:fe:89:2a:05:d4:b3:cd:8e:50:
1f:d6:f7:fb:07:5b:df:4e:62:4a:35:98:1f:77:f5:49:81:d5:
a1:f9:ab:90:a6:4b:ba:58:64:cf:53:3c:62:4b:99:23:8c:4a:
58:31:15:e0:8f:39:dd:14:a9:52:bf:d8:c2:7b:64:c6:22:e2:
84:55:c6:ca:b5:9c:59:dc:41:1a:f8:e1:9e:dd:b6:59:1c:65:
01:f5:46:a9:ba:58:74:15:70:84:4c:f0:f8:0b:c9:11:2b:97:
77:2f:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:16 2024 by rpki-client on console-ams.rpki-client.org