Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/z6NoelFGBk9Ski2n8ESCosO6404.roa
File: z6NoelFGBk9Ski2n8ESCosO6404.roa (raw, json)
Hash identifier: RKbhi8ufgicZuSRbLS6owcxszqnuMLlvmR41C1uRmNk=
Subject key identifier: CF:A3:68:7A:51:46:06:4F:52:92:2D:A7:F0:44:82:A2:C3:BA:E3:4E
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 01880BE0C910DDF9D53487A0CBB9F0F7A369
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/z6NoelFGBk9Ski2n8ESCosO6404.roa
Signing time: Thu 11 May 2023 17:34:20 +0000
ROA not before: Thu 11 May 2023 17:34:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8298
IP address blocks: 194.1.163.0/24 maxlen: 24
2001:678:d78::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:e0:c9:10:dd:f9:d5:34:87:a0:cb:b9:f0:f7:a3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: May 11 17:34:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa3687a5146064f52922da7f04482a2c3bae34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:22:a4:44:23:70:00:5e:c9:02:9d:53:14:
af:ec:41:d0:60:b3:59:6f:bf:78:e2:f6:0e:cf:82:
36:c4:a2:41:e1:89:92:5f:b6:8b:4f:1c:18:43:20:
f5:08:ad:22:a4:6d:bf:ba:75:73:d3:5b:c6:e7:2c:
d9:47:93:b4:a9:94:bb:87:9d:a5:2e:22:e0:ff:04:
05:1d:4a:da:ea:2e:35:5b:b3:47:9d:6b:e1:1e:6f:
39:26:40:16:18:24:98:f6:13:04:72:1d:91:71:9d:
ea:f4:b6:a5:49:cd:79:0b:ca:de:93:1c:d8:c2:05:
86:4a:cd:55:8b:83:80:ba:4c:40:8e:ee:0c:c5:14:
b4:ec:7a:93:f8:bb:8a:f1:50:23:8f:e8:22:36:42:
87:1c:03:ac:17:aa:fa:16:96:4d:cc:6d:16:6e:66:
f3:fe:dd:51:5d:66:e8:69:a3:3d:33:1c:0e:5b:59:
fd:e5:b7:dd:e7:ed:16:39:bd:21:23:84:86:52:83:
d2:c1:f1:18:59:1e:c4:c7:98:b9:b8:2d:fc:2b:ef:
94:16:20:01:c7:e4:02:9f:5f:5f:98:02:65:26:b7:
7c:08:bd:6b:46:38:8e:f7:f4:11:43:74:7f:f5:e9:
86:5b:e2:80:3a:47:25:56:2a:59:8d:25:26:8f:a5:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:68:7A:51:46:06:4F:52:92:2D:A7:F0:44:82:A2:C3:BA:E3:4E
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/z6NoelFGBk9Ski2n8ESCosO6404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.163.0/24
IPv6:
2001:678:d78::/48
Signature Algorithm: sha256WithRSAEncryption
44:2c:87:0d:ac:34:bd:33:e1:fc:88:ef:8c:70:6b:a2:1c:89:
7d:59:01:61:10:79:0c:40:7b:8a:31:a7:ca:3b:0f:23:1d:a8:
9b:b2:da:0c:bc:58:9e:a1:cb:28:e1:9b:73:67:e7:da:c8:9c:
09:2d:e5:90:94:c4:9f:49:02:f8:a2:2a:a9:7a:99:e8:c6:0c:
a0:e4:d8:06:6d:e0:f9:fa:ab:db:ff:5a:43:02:2e:c4:2b:bb:
a0:76:8b:7d:ce:44:46:23:da:49:65:6f:fb:4c:f5:6b:3e:af:
af:c3:10:ea:b6:d2:4e:ed:ff:48:02:2e:ce:73:1d:99:00:88:
59:3b:9c:d2:d7:2a:61:7d:ae:c0:87:df:ad:58:16:44:26:78:
e6:9a:2a:28:87:ea:bc:05:e7:5d:dc:80:26:bb:8f:1b:c0:1f:
de:4f:c2:06:6c:89:1d:b9:1b:0f:1b:8b:f8:fd:f9:07:19:28:
b3:c3:da:52:d1:25:22:6f:16:d7:45:33:97:e6:47:83:72:ec:
8e:fc:f3:1e:6d:74:07:24:5c:b5:d1:5f:50:23:fc:c7:04:25:
f0:46:19:b6:71:d3:b8:5a:9c:e7:7d:67:c1:06:0d:c6:12:59:
44:30:ef:cc:0b:82:6e:d9:9b:f1:6d:64:c5:01:d9:f5:41:68:
84:47:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org