Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/iKZaViT3ImmdLVKdP2q-11k4kUw.roa
File: iKZaViT3ImmdLVKdP2q-11k4kUw.roa (raw, json)
Hash identifier: yBtmv5vftGl49ODtYmZ1/3l8SYZzTIaM4cG4GFBCnHU=
Subject key identifier: 88:A6:5A:56:24:F7:22:69:9D:2D:52:9D:3F:6A:BE:D7:59:38:91:4C
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0188EC47046725869915DFCDADE32072E123
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/iKZaViT3ImmdLVKdP2q-11k4kUw.roa
Signing time: Sat 24 Jun 2023 07:20:56 +0000
ROA not before: Sat 24 Jun 2023 07:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ec:47:04:67:25:86:99:15:df:cd:ad:e3:20:72:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jun 24 07:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88a65a5624f722699d2d529d3f6abed75938914c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:61:e8:8e:71:a4:2e:c6:b0:cd:fb:f6:84:
91:e7:2f:86:74:20:cb:e4:23:d7:2c:be:82:88:39:
3a:cf:b5:45:20:ec:0c:43:d6:1e:42:96:56:04:de:
20:dd:b7:11:22:03:48:b9:c0:ad:01:6b:4f:56:1e:
58:20:90:4c:cd:48:af:70:c2:ed:d8:57:39:82:42:
90:06:60:0c:05:a2:8d:41:a5:89:15:97:16:f3:56:
a2:0f:79:09:3f:ff:56:be:91:3d:38:7c:09:8e:57:
b8:ad:c2:83:10:c3:b9:e0:24:04:3b:52:ef:55:22:
30:98:59:0f:84:78:e6:8b:aa:3a:99:90:8b:97:ea:
fb:2e:3b:99:67:19:22:b4:da:c0:69:5c:08:10:ea:
c0:e2:65:78:7e:c6:a3:9b:bf:36:01:1a:e9:19:55:
42:49:a4:1e:df:01:02:5c:46:96:8d:1f:69:88:10:
4e:18:4c:e3:5a:97:ed:80:0b:25:da:b5:f3:dc:e6:
c7:ff:40:0d:f1:91:1a:0a:6d:a4:7f:f2:ea:8a:fc:
ed:f2:04:c2:e9:1b:a8:ac:ba:8d:e5:f0:32:58:c2:
61:76:5d:c4:5d:19:6c:a8:65:2c:5b:f7:46:8e:8d:
1f:80:7e:ea:ad:0d:27:86:e1:db:b5:b0:aa:f6:d2:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:5A:56:24:F7:22:69:9D:2D:52:9D:3F:6A:BE:D7:59:38:91:4C
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/iKZaViT3ImmdLVKdP2q-11k4kUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0a:fa:7c:de:2e:68:41:88:ac:35:e6:03:6f:59:7b:53:fe:
3b:17:3c:24:18:c4:6c:f8:64:3a:06:bc:42:80:2c:02:6a:49:
28:48:7a:0d:5c:6b:8b:dd:9d:0e:81:f4:1b:ba:f3:e7:7a:69:
56:1a:d1:b7:93:38:a9:1e:de:eb:dc:c2:66:8a:3e:3a:c9:53:
be:15:14:c6:31:5b:0c:37:49:93:4b:fe:5a:47:b8:d6:29:9c:
99:ea:98:58:0f:5a:8d:29:ea:fb:ca:0b:40:c8:c1:e8:a3:4f:
c1:88:0a:84:60:c6:cc:67:76:92:80:86:aa:e0:59:99:de:ec:
2b:13:48:c4:7f:44:47:93:34:34:37:fe:d0:68:94:b3:66:60:
dd:34:93:6a:d6:f0:5d:cb:81:9f:12:14:69:b6:dd:a7:88:91:
d2:f3:54:6b:41:4f:c6:81:00:fb:8d:a9:33:0b:7e:82:f3:25:
5c:41:24:df:1d:02:85:c7:a5:b0:f2:5c:ad:0a:c1:85:96:29:
0d:72:93:7d:d3:8d:3f:d7:b8:df:61:6b:03:da:0b:94:b3:13:
cf:2b:05:18:87:b8:3e:89:7e:f8:f1:dc:dc:73:5d:06:b9:11:
1c:0f:4f:15:ce:20:0b:f9:ee:a2:f6:d0:77:75:ee:98:65:02:
e8:d5:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:51:21 2023 by rpki-client on console-ams.rpki-client.org