Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/7CNyczgJNKjOgD_sb-nFIpjHQKU.roa
File: 7CNyczgJNKjOgD_sb-nFIpjHQKU.roa (raw, json)
Hash identifier: fLWFbNgkhnplrRen8jGSV7VIpUUgaRtu47hgD7dkb/A=
Subject key identifier: EC:23:72:73:38:09:34:A8:CE:80:3F:EC:6F:E9:C5:22:98:C7:40:A5
Certificate issuer: /CN=664c0dde9d1c6173b1ab7e21c69ab8bdd95f0361
Certificate serial: 01856F5DCFFF5F7044DDA14233CF31CC67EC
Authority key identifier: 66:4C:0D:DE:9D:1C:61:73:B1:AB:7E:21:C6:9A:B8:BD:D9:5F:03:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkwN3p0cYXOxq34hxpq4vdlfA2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/7CNyczgJNKjOgD_sb-nFIpjHQKU.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.69.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cf:ff:5f:70:44:dd:a1:42:33:cf:31:cc:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=664c0dde9d1c6173b1ab7e21c69ab8bdd95f0361
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec237273380934a8ce803fec6fe9c52298c740a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:91:08:7a:99:51:dc:79:1d:e7:65:82:96:
4e:81:ee:6a:13:0d:83:a9:b8:49:60:2e:bd:fd:bc:
53:c1:63:6a:36:45:6d:10:6d:68:de:6a:bb:ef:77:
41:87:86:5b:ba:77:2d:c4:ee:5c:90:de:f2:27:79:
56:63:20:eb:a9:bc:07:a2:75:b9:23:24:14:28:f2:
dd:bd:2c:ff:89:5c:cd:0c:a7:eb:ac:48:bf:90:57:
54:e4:81:48:fb:3b:04:5a:1f:54:ed:03:2d:7b:32:
62:3a:15:0b:5f:e7:66:c8:38:8c:6c:76:47:18:18:
13:ba:96:42:b5:12:54:79:aa:3e:0b:be:16:ee:a7:
7c:58:c7:fc:5d:30:6d:00:ca:f2:4a:b3:c0:9c:78:
b5:c7:24:99:13:ed:ce:e2:51:68:2f:c9:71:75:8d:
00:0c:9e:8f:3f:0b:25:d6:76:b3:c5:dd:4a:78:a8:
00:ec:f4:20:3e:16:0f:d5:c9:eb:ed:08:05:f8:1d:
28:06:42:ae:f7:14:2f:fa:9a:99:09:5f:08:b8:e6:
2c:20:b6:4b:c7:06:4a:ef:c6:d6:6c:03:30:c3:b1:
bd:f1:56:da:44:e6:73:c2:cb:34:91:01:d5:7d:bd:
53:30:18:97:aa:a4:db:f8:7b:c9:c1:f2:bb:1c:18:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:72:73:38:09:34:A8:CE:80:3F:EC:6F:E9:C5:22:98:C7:40:A5
X509v3 Authority Key Identifier:
keyid:66:4C:0D:DE:9D:1C:61:73:B1:AB:7E:21:C6:9A:B8:BD:D9:5F:03:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkwN3p0cYXOxq34hxpq4vdlfA2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/7CNyczgJNKjOgD_sb-nFIpjHQKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ea373e-1cf1-496b-a2cf-062f8160a5e3/1/ZkwN3p0cYXOxq34hxpq4vdlfA2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.149.0/24
Signature Algorithm: sha256WithRSAEncryption
50:94:a6:6a:c2:02:b9:5d:a1:96:38:a3:50:9a:72:6b:79:66:
8f:de:9e:e8:05:4c:b7:6d:0f:5e:ee:a0:55:db:d0:c6:c7:ae:
a4:18:f6:8c:58:b2:43:0e:fb:58:16:cc:7d:6a:76:c5:1c:b6:
9e:af:4d:d8:16:9e:b7:1a:bd:c4:50:4b:f4:5a:26:f4:a0:c0:
26:9b:f7:51:5f:a9:c9:a4:ad:2e:36:fb:21:11:01:d3:af:cf:
b5:5b:e6:b0:0a:de:e0:33:b4:2b:62:01:a3:e4:5e:ae:9e:85:
a0:01:52:86:d5:25:a0:11:4a:3b:61:da:b2:ae:09:12:a2:34:
b6:1c:fa:36:52:00:a8:0f:aa:74:95:ee:77:c3:1d:1c:f7:09:
fa:50:17:26:4e:cf:ee:aa:8e:f7:17:e4:b4:34:b2:1a:be:b4:
97:dd:cb:9c:c9:b5:78:81:cd:57:6f:ac:e2:26:19:10:07:f3:
e0:86:80:24:2d:9e:2f:e5:0e:ad:13:96:4a:55:10:a7:c4:82:
57:df:14:05:73:89:36:a6:90:e9:58:79:76:4c:e0:46:97:3e:
4a:05:1d:1e:8a:c4:27:95:41:7e:8a:1a:35:a8:3c:2e:2f:a6:
f5:fc:40:a2:66:99:46:ac:fa:14:b2:b1:8f:b6:75:2e:87:13:
d8:7a:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org