Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/tEstb8aPGQrczIZZjO2ng-AgQ1I.roa
File: tEstb8aPGQrczIZZjO2ng-AgQ1I.roa (raw, json)
Hash identifier: +Gi6beuy3+sSxvxpRbDm9CNk8vzLxtfPQe3mmM6z/YQ=
Subject key identifier: B4:4B:2D:6F:C6:8F:19:0A:DC:CC:86:59:8C:ED:A7:83:E0:20:43:52
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 01856D93FC08043239B14A0084EAD2592245
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/tEstb8aPGQrczIZZjO2ng-AgQ1I.roa
Signing time: Sun 01 Jan 2023 13:44:52 +0000
ROA not before: Sun 01 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213009
IP address blocks: 194.150.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:fc:08:04:32:39:b1:4a:00:84:ea:d2:59:22:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44b2d6fc68f190adccc86598ceda783e0204352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:ab:ed:4d:ff:f4:47:91:24:0d:01:10:30:
7f:a7:79:19:d0:b2:ff:33:83:3f:44:6e:20:56:53:
ef:77:2b:ba:4f:22:a9:5a:68:d7:82:51:53:c2:b3:
bc:af:c0:9b:77:ba:fc:47:62:6d:1c:cf:09:ee:e5:
95:85:54:58:ff:67:92:7d:aa:5f:e6:9e:69:af:b4:
77:82:7a:cb:07:69:65:75:56:11:64:8d:ae:5b:f4:
01:4b:9e:d5:0b:30:e0:36:ac:5c:ee:4d:22:3a:2b:
51:38:7e:f3:79:a2:62:bb:b2:dd:df:1c:7e:f0:0f:
04:bc:13:a8:88:1d:c2:b6:87:c6:11:bb:7d:62:98:
40:ba:7e:ee:79:06:c7:79:f4:9a:e7:3c:0a:e6:30:
b4:bd:31:93:85:73:14:50:7d:c4:48:c6:97:1e:60:
b6:18:4c:c6:87:54:2d:52:ca:ca:b4:73:af:c3:71:
0a:92:25:f5:d4:4f:c2:7f:e5:28:c5:1c:0e:14:43:
26:ea:ce:a4:ef:c1:00:ba:0e:da:0a:e6:62:55:37:
17:0d:17:5b:a9:34:22:eb:cf:4e:02:ef:45:f0:93:
86:b4:3e:7a:cf:71:3d:a2:5d:70:63:35:58:c0:11:
a1:46:23:29:be:c9:21:da:9a:ef:5a:8f:49:43:72:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:2D:6F:C6:8F:19:0A:DC:CC:86:59:8C:ED:A7:83:E0:20:43:52
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/tEstb8aPGQrczIZZjO2ng-AgQ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.107.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1a:12:dd:98:bd:82:ca:bf:eb:9f:f5:91:6e:0c:d6:73:84:
6a:07:40:ae:3e:5f:f8:a0:65:02:80:d2:96:d2:49:ea:ec:73:
25:06:d8:65:9a:8b:3c:33:a3:c3:72:ab:73:9a:cd:58:c5:74:
26:39:31:50:6a:73:d5:60:ce:b2:eb:da:58:8e:42:7d:af:d0:
64:0b:48:8d:b3:cd:25:12:1d:65:28:ea:5c:97:3b:19:08:8c:
9d:f5:4a:f4:09:40:21:54:d1:01:dc:91:83:6a:60:74:6e:b1:
eb:5b:2f:38:0b:2f:25:2c:40:cb:67:30:58:7e:71:2e:50:af:
81:47:d3:c2:d6:42:26:8e:a2:21:8d:45:68:d6:a9:75:e1:2a:
56:32:42:52:6a:7f:df:77:80:d9:13:7f:ca:10:ec:4d:e4:b9:
b7:be:4a:67:b9:dc:41:ec:5b:c3:c3:ba:d3:ee:64:e5:83:d7:
5f:1f:91:3e:82:73:fc:ec:7f:55:95:f4:cc:0d:cb:35:c5:00:
d1:2a:c9:81:f6:3d:3b:bc:eb:f6:4f:e5:01:78:31:3d:37:a6:
8c:c2:1a:f5:b7:bf:8e:d6:99:71:ac:35:56:ec:23:81:38:8e:
22:1b:80:2c:a5:6e:64:9c:0d:34:bd:56:31:b9:e9:4b:12:ab:
6f:bb:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:26 2024 by rpki-client on console-ams.rpki-client.org