Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/xqbAOFzOxuEEYh9kWPxtApe0ELw.roa
File: xqbAOFzOxuEEYh9kWPxtApe0ELw.roa (raw, json)
Hash identifier: iRl2ycF4ev0iwQeBbalm9VgD5YoK13fjbKzgT2+rfH8=
Subject key identifier: C6:A6:C0:38:5C:CE:C6:E1:04:62:1F:64:58:FC:6D:02:97:B4:10:BC
Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial: 018B6B0A8EAD4139265B098881D19CA570B9
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/xqbAOFzOxuEEYh9kWPxtApe0ELw.roa
Signing time: Thu 26 Oct 2023 08:12:15 +0000
ROA not before: Thu 26 Oct 2023 08:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 194.76.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:0a:8e:ad:41:39:26:5b:09:88:81:d1:9c:a5:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Validity
Not Before: Oct 26 08:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6a6c0385ccec6e104621f6458fc6d0297b410bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:5c:b2:84:d9:55:d3:04:31:db:e4:bf:9d:
42:0a:32:63:b8:a8:25:33:7e:91:35:01:3e:0f:15:
20:8e:b1:ea:c1:c1:70:c9:7f:87:66:b3:01:ee:4b:
01:5e:4d:6e:d9:e2:78:d7:84:f3:c9:95:2b:ec:ac:
ce:78:dd:f1:42:4b:15:34:30:22:e5:88:34:fb:ba:
4d:39:82:5d:d7:7f:ff:b4:c2:01:b7:89:7a:b7:e6:
56:21:91:0a:ef:76:e3:7a:80:88:7e:7b:6e:98:a1:
5c:b5:53:69:51:96:c2:83:78:bc:34:52:4a:f3:75:
a2:d6:2a:31:71:ec:c5:aa:bc:3f:4e:4d:8f:74:c9:
9b:78:aa:f1:ba:5e:07:a1:7e:a4:53:cf:b1:58:db:
35:68:b8:14:f4:3f:81:6a:df:f7:fc:4f:9f:7b:70:
ee:5d:79:89:b2:56:6c:23:1c:87:47:e6:a3:bf:26:
36:d6:dd:29:1b:b6:3f:f4:85:06:13:26:d1:ce:b5:
e1:9a:49:61:88:8d:1a:98:b1:e1:a2:de:f3:37:7f:
d3:b4:a9:f6:7f:29:92:74:9a:e1:15:57:d7:ad:45:
ec:2a:b6:ba:36:5c:ae:fb:a4:f5:03:d1:93:38:1c:
eb:69:14:4b:06:55:85:f8:5f:e4:91:30:b9:fd:5e:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:C0:38:5C:CE:C6:E1:04:62:1F:64:58:FC:6D:02:97:B4:10:BC
X509v3 Authority Key Identifier:
keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/xqbAOFzOxuEEYh9kWPxtApe0ELw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f5:70:0b:f5:49:ef:d6:96:ab:5b:f1:fc:b3:4c:f6:c1:69:
b3:9e:22:ca:91:38:a1:92:a7:2f:de:f8:f9:a4:56:a3:a1:53:
56:d4:71:48:3f:dc:75:17:94:6b:66:87:de:02:a0:00:7f:6f:
27:24:e1:6d:22:56:94:2f:37:9c:76:71:f5:81:b1:0a:93:2c:
e7:5d:d4:25:aa:45:b2:c8:bb:f7:26:32:66:a4:18:4b:3a:06:
d9:0b:f4:21:c2:f9:70:bc:93:47:2f:46:8b:51:af:a5:5b:64:
95:56:20:ab:9d:e6:63:94:e9:47:57:2b:25:68:d1:04:f5:71:
98:52:56:e3:cb:d6:2e:e3:06:bc:c5:9a:63:71:f3:54:ad:c1:
d7:85:20:e4:ef:91:d8:ab:da:6b:a3:2f:e6:ca:aa:97:77:60:
a8:a1:ab:96:b7:51:9a:b5:0f:7c:2b:ff:a5:37:dd:d1:ee:d7:
58:24:b8:1e:ce:3b:a2:0f:70:14:f3:79:52:50:37:f9:48:26:
a0:de:05:5a:51:b5:02:40:0f:26:65:45:cd:29:38:d5:90:05:
0b:60:be:cd:74:f9:bf:ac:2f:68:88:62:ce:92:b8:ba:3e:de:
eb:cd:be:c2:ac:85:e4:b3:d0:32:d5:5c:fa:a1:91:9f:6b:f3:
9d:e5:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:34 2024 by rpki-client on console-fra.rpki-client.org