Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aXrRaMm3dFlsd5f1VTdOkhjkjvM.roa
File: aXrRaMm3dFlsd5f1VTdOkhjkjvM.roa (raw, json)
Hash identifier: XXIKrlSwaRDzW97CUdFXy7cum9A+qAXTNvwLxJrl1BY=
Subject key identifier: 69:7A:D1:68:C9:B7:74:59:6C:77:97:F5:55:37:4E:92:18:E4:8E:F3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C541B6C5E864E9E6544DC1DE9E5707C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aXrRaMm3dFlsd5f1VTdOkhjkjvM.roa
Signing time: Sun 01 Jan 2023 07:55:29 +0000
ROA not before: Sun 01 Jan 2023 07:55:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212757
IP address blocks: 94.199.103.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:1b:6c:5e:86:4e:9e:65:44:dc:1d:e9:e5:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=697ad168c9b774596c7797f555374e9218e48ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:82:5d:64:ea:5e:e3:d3:81:21:22:8b:7a:
9b:92:81:2a:0f:77:c4:94:cd:6f:b7:09:04:44:9f:
33:aa:7c:06:21:df:fb:a7:dd:f3:2d:28:76:12:2e:
c1:19:67:30:3d:b0:38:06:e4:7e:32:ba:db:7a:de:
39:de:9b:73:de:bd:28:49:ff:42:95:be:9c:33:5d:
9f:8e:f5:b7:76:ef:e5:b8:d9:23:41:fd:d6:78:bc:
a6:02:b7:a6:b9:ee:b6:ae:44:02:b0:e8:23:81:81:
24:5c:71:ee:27:8d:02:b8:49:f3:0a:61:fe:40:b0:
24:95:bb:43:ea:be:23:49:cc:54:e4:ce:cc:18:52:
68:b4:1b:84:b1:29:49:92:ad:f9:2a:0f:59:3a:11:
87:fa:a1:32:7c:9f:73:99:73:89:e6:15:39:11:aa:
b9:ae:87:c7:4a:60:97:77:18:3f:e6:0d:c5:95:ab:
89:eb:a0:e2:90:11:46:74:d7:8b:47:2b:13:4b:05:
3c:53:2a:b0:06:07:82:5a:ec:f1:c5:74:cf:1a:cb:
c9:2f:d9:31:f3:26:75:c0:3a:00:44:7e:f0:64:91:
fd:5e:28:b3:12:52:39:e3:06:73:35:27:f4:04:b5:
7c:87:47:9f:8c:65:f1:66:f3:bd:16:40:67:3d:53:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:D1:68:C9:B7:74:59:6C:77:97:F5:55:37:4E:92:18:E4:8E:F3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aXrRaMm3dFlsd5f1VTdOkhjkjvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.103.0/24
Signature Algorithm: sha256WithRSAEncryption
66:84:77:62:18:18:0b:6d:d4:e8:da:bc:79:7a:95:62:43:93:
f4:b4:54:b9:d7:29:de:72:0f:be:90:e4:37:86:df:d1:6a:53:
c8:c1:fa:28:db:f9:de:9b:69:3f:cd:b0:2f:74:34:0f:0b:ed:
21:da:8f:f2:74:d6:72:51:47:97:8a:f7:8e:a5:15:f3:5c:56:
aa:89:60:b9:cb:c8:8a:e4:1f:1d:43:d0:32:10:d4:d5:39:82:
38:00:13:d1:73:d7:ca:9b:bb:87:a3:42:5c:93:39:a9:27:25:
93:64:71:b6:0e:b9:96:ab:95:78:f3:94:ed:f6:f5:bb:2c:f8:
67:8c:1f:d3:9a:3c:a9:f2:d6:66:03:88:d4:87:07:40:fc:97:
6d:cf:eb:2e:5a:32:1b:66:ca:ad:57:df:37:c2:b4:9e:89:38:
15:fb:06:15:fc:89:c5:02:67:57:0e:d4:16:c6:e1:5e:b8:cf:
9f:9b:16:c8:f3:7d:72:20:e5:f6:3d:8e:9e:8c:9d:33:3c:13:
f6:18:f3:fe:1e:4c:56:3d:8f:56:52:f7:b5:be:d3:b2:0d:11:
46:f6:2f:15:b8:23:24:47:9b:17:76:a6:a5:61:6c:e4:a6:ca:
84:23:ed:f4:5b:79:2f:d2:37:a3:fe:13:d6:b8:79:78:43:96:
4d:41:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org