Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1FciKm6hDFPtCl73thrLke-gKUI.roa
File: 1FciKm6hDFPtCl73thrLke-gKUI.roa (raw, json)
Hash identifier: S7dAbb4tfyWQpDkAbzoCEmnvR3+dmiFssn3At8Fp4fs=
Subject key identifier: D4:57:22:2A:6E:A1:0C:53:ED:0A:5E:F7:B6:1A:CB:91:EF:A0:29:42
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01857102CE97F6D73984D134EA801232E0CE
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1FciKm6hDFPtCl73thrLke-gKUI.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60709
IP address blocks: 194.102.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ce:97:f6:d7:39:84:d1:34:ea:80:12:32:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d457222a6ea10c53ed0a5ef7b61acb91efa02942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:c6:fd:3e:1c:98:24:b7:60:d3:d1:1b:36:
48:cf:9e:95:b6:8e:0f:42:84:4c:df:94:45:93:e3:
9a:df:3d:9c:1c:c5:2a:75:27:09:96:b5:ad:40:84:
be:af:36:84:17:b5:f0:52:11:a7:80:53:fd:d2:16:
28:6c:01:24:12:e1:d9:8f:7b:af:89:13:fa:fa:dc:
0f:8e:da:fc:58:0c:43:d8:c8:6e:54:f0:50:19:c0:
8c:7f:93:77:41:aa:e1:9d:16:b7:df:68:4e:17:6b:
ea:3b:b7:84:5e:ee:1e:da:15:22:a0:64:d2:c3:f7:
3b:f6:e2:76:45:b3:96:3a:e7:c7:5b:4a:8e:81:43:
0e:cc:4f:2c:dd:0c:eb:e4:fc:c4:ac:91:70:9f:6c:
24:4b:30:1f:f3:87:25:c7:a4:19:17:59:74:09:02:
5b:9c:ef:75:ef:38:de:00:7d:03:98:0d:bf:53:42:
34:8e:80:7a:7d:50:bd:e9:0a:e3:a1:5d:c0:20:63:
c7:a9:d5:e0:84:f2:8c:b3:ee:07:64:2c:e8:34:c5:
a5:65:8f:c5:33:4f:0b:47:76:6f:db:09:4e:0e:44:
34:94:e5:ed:b0:b7:bf:32:01:3d:0f:b9:cc:ff:b9:
2f:35:2d:d8:7d:3f:fc:78:66:e2:3f:c2:4e:3f:45:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:22:2A:6E:A1:0C:53:ED:0A:5E:F7:B6:1A:CB:91:EF:A0:29:42
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1FciKm6hDFPtCl73thrLke-gKUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
84:79:7e:af:e3:25:da:d8:b7:63:e4:26:dc:78:97:fb:80:67:
31:b0:61:32:d7:d6:37:e0:0d:30:32:a2:63:72:9e:bf:79:36:
7e:b3:05:fc:0c:c0:01:14:9c:c8:48:0d:8b:e0:f1:27:7b:43:
8f:ea:b7:31:5b:e4:5b:3e:86:94:45:46:fd:63:fc:77:7f:be:
d9:7c:19:92:93:7a:80:f0:b2:55:4c:23:95:33:92:27:ed:61:
4b:8b:70:e3:b0:51:90:f2:89:1e:90:e1:4a:9a:f7:42:8f:5d:
61:b5:f9:14:9d:34:f3:9e:97:03:e5:95:26:95:fa:23:8d:26:
41:bb:a5:a1:cc:60:b2:b5:ee:fd:30:9b:0a:21:f3:19:12:e5:
17:6d:b6:f6:09:da:4b:d6:c9:fb:7a:5b:6e:74:22:01:70:72:
74:f1:4f:7b:d4:e5:e2:81:40:77:f8:01:35:ee:34:f4:81:f7:
79:cf:96:ca:51:fb:1b:09:38:23:63:71:dc:00:cb:6a:5a:62:
60:31:2a:2d:4d:a2:9d:cd:7c:bf:1b:93:33:f0:2a:80:8d:2a:
0b:95:89:bc:d0:4c:bd:c6:d9:31:bb:d8:85:2a:24:2c:91:44:
18:7e:dc:82:f6:b1:8c:d6:3a:98:3d:60:cf:81:15:f2:e4:98:
37:08:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:10 2024 by rpki-client on console-fra.rpki-client.org