Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/DAeq6SZVQrPTEpJm7pkqGr4QwWM.roa
File: DAeq6SZVQrPTEpJm7pkqGr4QwWM.roa (raw, json)
Hash identifier: HaH6UJV7qEpvXnTtJx7Wsv6K+mr3ZyTBmHmwY6qIICo=
Subject key identifier: 0C:07:AA:E9:26:55:42:B3:D3:12:92:66:EE:99:2A:1A:BE:10:C1:63
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 018570951F40BBDB7B8618DB1B1B6A2DC62F
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/DAeq6SZVQrPTEpJm7pkqGr4QwWM.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199031
IP address blocks: 194.126.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:1f:40:bb:db:7b:86:18:db:1b:1b:6a:2d:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c07aae9265542b3d3129266ee992a1abe10c163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:60:66:4f:60:26:19:06:b4:5d:44:74:89:
00:ff:ff:8c:4a:2f:da:3b:64:c4:0e:35:63:0b:6f:
e1:ce:b2:66:8f:0c:ff:db:5d:44:ec:85:9c:8c:b9:
0a:a7:6d:b3:8f:bd:4e:0c:93:8c:76:9c:cd:a8:b1:
df:1a:3b:35:54:cd:33:9a:b6:36:14:df:36:93:25:
67:96:01:d0:35:cb:3d:89:c3:c6:04:b0:6e:e9:a5:
a5:d6:59:c3:c7:cf:85:a1:b7:fe:7c:50:83:b5:c1:
03:8e:1e:53:fe:91:52:1f:f7:32:3f:57:9d:f3:0f:
58:10:b8:03:93:d0:89:13:6d:71:e7:6f:d8:6d:04:
3b:87:46:bd:69:d5:01:6e:51:12:7b:a2:a3:9d:f4:
ea:f2:47:68:51:d2:84:f6:0c:8e:a4:2d:a5:fc:66:
ae:ab:a6:6a:e6:af:b5:5c:11:ff:10:26:a4:21:c8:
54:47:34:8a:31:5d:89:5f:a0:1d:d1:3d:6b:fe:88:
ec:b2:6b:ec:1d:c8:36:2b:cf:65:98:c8:fd:18:a2:
cb:87:d9:7a:b8:93:7d:c9:26:96:ce:5b:2d:49:c7:
b8:e3:7f:9c:52:c7:9f:3a:39:f3:a0:e0:a6:8d:28:
9a:b5:e8:0e:21:57:3e:8a:99:f8:43:9b:f9:e7:81:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:AA:E9:26:55:42:B3:D3:12:92:66:EE:99:2A:1A:BE:10:C1:63
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/DAeq6SZVQrPTEpJm7pkqGr4QwWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:92:01:ad:6d:27:9f:0c:4c:9d:da:dd:7c:d0:8f:94:15:8e:
93:33:85:37:52:44:43:b9:b2:fe:c3:c4:33:2a:09:d0:c8:30:
f2:39:a8:70:f2:de:b1:4a:26:d0:7d:fe:5c:83:7a:a5:e1:3d:
7e:25:82:ef:a3:7a:51:6a:be:32:7e:12:bd:fb:96:9f:c8:fc:
f1:61:b6:e2:aa:38:90:6c:70:5c:35:77:2a:26:e0:0a:82:36:
5f:aa:3d:98:4b:38:69:5b:da:60:b6:ec:90:db:fd:c1:4e:f5:
94:6b:c9:79:1a:c3:1f:e5:34:21:61:32:9b:52:77:32:82:fd:
a9:af:dc:fa:99:24:73:69:d6:a4:62:d6:f8:88:da:c9:ba:a5:
19:eb:31:12:00:9d:d3:8b:af:a6:eb:b6:8a:42:e0:74:79:4e:
0d:38:c0:cb:93:0f:01:25:69:f0:72:b5:d7:5c:a9:6f:79:69:
00:42:ab:4c:52:78:32:40:16:42:de:6e:14:c5:db:93:b5:fa:
af:26:64:22:9a:90:32:ae:47:6b:78:23:79:90:f8:c2:b4:e9:
c4:55:53:f2:c6:c3:f7:c9:31:75:0e:98:38:70:df:cd:89:f0:
fa:77:bb:a4:8d:b0:16:e3:91:89:69:3a:5b:04:1d:94:a5:15:
c4:9e:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:22 2024 by rpki-client on console-fra.rpki-client.org