Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/2Z219dbgkhBwcqXKo9EWUKwBkHY.roa
File: 2Z219dbgkhBwcqXKo9EWUKwBkHY.roa (raw, json)
Hash identifier: RwxV8urCA/Ftn5AMD2SKwHb89y2pfubzB4/+ZSV6V+E=
Subject key identifier: D9:9D:B5:F5:D6:E0:92:10:70:72:A5:CA:A3:D1:16:50:AC:01:90:76
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 018AAD810BEBB1CCD0121B7C538D3CBF6426
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/2Z219dbgkhBwcqXKo9EWUKwBkHY.roa
Signing time: Tue 19 Sep 2023 12:53:50 +0000
ROA not before: Tue 19 Sep 2023 12:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 194.180.26.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:81:0b:eb:b1:cc:d0:12:1b:7c:53:8d:3c:bf:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Sep 19 12:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d99db5f5d6e092107072a5caa3d11650ac019076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:84:8c:d1:42:2b:f6:71:96:74:08:c8:13:
d8:be:66:e1:9b:7a:0e:6d:ed:31:4c:05:e8:c2:70:
05:5f:c5:11:57:e9:c5:1f:87:20:55:f3:e4:d1:6f:
08:42:eb:64:3e:3b:1a:bc:ad:4b:b5:01:77:98:b7:
2b:b6:30:07:0e:15:07:8a:f0:16:f0:8c:0b:20:ae:
24:df:c9:35:7e:14:ed:20:ef:80:c5:5a:42:7e:89:
e7:a9:2d:16:20:b4:78:d7:47:08:56:4c:56:cb:34:
1d:ea:da:e4:7d:6d:ae:85:a5:9a:d2:a2:dc:26:e0:
3e:cf:d5:e4:38:41:bd:67:4b:e6:b1:96:fc:58:59:
d4:04:77:dd:f3:80:7d:04:1d:b6:ec:62:c3:08:5d:
76:fa:fc:b8:54:e4:fa:e5:27:cc:dc:74:18:9b:cf:
29:a5:36:8a:63:97:c4:84:a9:37:03:d9:dd:6d:6f:
51:36:3c:b2:95:a2:22:4e:63:41:05:11:fb:c2:22:
d3:1f:a3:9e:eb:50:b6:76:8f:42:0e:15:33:00:82:
31:af:04:fc:ac:04:8e:26:ea:a4:64:86:82:86:8c:
4f:d5:72:7d:34:1f:f7:66:84:77:c0:13:77:5d:7b:
9d:62:8c:09:ae:99:25:4e:31:e3:77:8c:29:84:73:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:B5:F5:D6:E0:92:10:70:72:A5:CA:A3:D1:16:50:AC:01:90:76
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/2Z219dbgkhBwcqXKo9EWUKwBkHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.26.0/23
Signature Algorithm: sha256WithRSAEncryption
06:6f:69:98:35:73:fd:09:47:f2:8d:ec:ae:11:92:97:82:6d:
3f:69:3d:1f:05:a1:2c:5a:50:7a:8e:94:32:0d:07:59:53:7a:
07:1f:eb:cc:fb:19:ee:35:7f:6f:30:d5:fe:56:0c:bc:4f:82:
2b:cb:3d:23:3f:54:c2:f6:11:2f:73:e6:62:02:89:9e:4b:61:
cd:dc:9a:39:32:0f:17:29:6a:62:90:7e:ae:5f:9b:01:e6:02:
0e:7f:e2:8f:b6:c4:73:1a:f6:6f:f1:26:b6:9d:db:e8:1d:f3:
72:db:e1:68:4c:be:ac:fe:d6:87:72:b9:04:c7:5e:13:2e:66:
f9:3e:78:5d:cd:c6:85:ad:12:31:e4:bc:e2:7c:fe:d5:2a:67:
ad:05:c8:5f:e6:9e:e3:26:ee:3f:67:fe:26:b0:d2:21:ec:8b:
b4:bd:6a:0d:27:1b:bc:84:4c:82:b9:c4:e8:5f:46:ac:28:c7:
ee:38:91:43:39:e3:81:d5:85:6b:ab:d3:3b:2a:f9:2e:3b:96:
07:50:4d:c8:05:d0:13:68:cd:a1:0c:59:51:e4:f0:4d:08:55:
cd:0a:96:79:9f:74:5e:29:c5:90:f4:48:75:f1:d0:ab:b2:e0:
4e:7b:59:62:93:ec:f4:8c:ad:67:f0:ac:93:8a:08:bc:95:fd:
25:61:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:23 2024 by rpki-client on console-fra.rpki-client.org