Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/CVlGYOlZuX61Cp6GwxqM6ZU6koM.roa
File: CVlGYOlZuX61Cp6GwxqM6ZU6koM.roa (raw, json)
Hash identifier: CySKKRxkXDxSEN2ijTpNcr/oKIZCMh/s+ZjFss+uV2g=
Subject key identifier: 09:59:46:60:E9:59:B9:7E:B5:0A:9E:86:C3:1A:8C:E9:95:3A:92:83
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 0185715E6C1C4D8BF66340C66C6EC4B6C3AA
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/CVlGYOlZuX61Cp6GwxqM6ZU6koM.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 194.42.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6c:1c:4d:8b:f6:63:40:c6:6c:6e:c4:b6:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09594660e959b97eb50a9e86c31a8ce9953a9283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:30:b0:81:8b:10:f8:95:1b:00:d3:07:9a:
d5:64:5a:98:23:dd:dd:fc:8e:cd:49:de:42:19:61:
be:4d:a5:69:01:88:3b:67:e6:7e:59:c8:d3:09:5b:
d6:b8:bd:b4:07:bc:3b:7e:51:e9:63:4d:b8:57:8c:
bc:64:7b:7b:2a:57:0b:ed:ba:39:bd:1c:1a:c1:da:
b0:85:5f:66:f8:60:e7:b4:28:a0:40:0d:60:61:2d:
2e:e0:9c:3f:c9:cd:02:55:b0:e8:6f:40:7e:f7:1b:
1a:dc:d3:35:3a:b3:45:11:15:97:9b:59:7f:4c:85:
bc:7e:f2:dc:4f:9d:a3:56:e9:42:5e:7c:9c:32:60:
9b:78:b8:c4:62:9b:1b:e3:73:9e:02:21:64:69:e3:
09:db:67:7b:62:0f:d5:69:5b:fa:7d:9f:39:f4:03:
8e:32:02:89:b1:95:fc:21:84:c3:9e:e8:21:d7:52:
58:3c:82:7f:e1:87:69:fb:5e:eb:cc:40:73:2d:77:
52:cc:3f:13:5f:36:a2:0d:b7:7d:dc:98:32:c7:a0:
fe:c0:1d:18:44:c0:cb:f5:b5:ac:09:fd:1f:54:64:
56:87:a5:53:56:65:e5:fb:2c:ea:84:0c:a4:2d:6f:
2e:c2:0e:62:d8:6f:e9:ac:55:a2:91:80:6c:5f:28:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:46:60:E9:59:B9:7E:B5:0A:9E:86:C3:1A:8C:E9:95:3A:92:83
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/CVlGYOlZuX61Cp6GwxqM6ZU6koM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.160.0/23
Signature Algorithm: sha256WithRSAEncryption
87:f5:ed:15:57:b5:45:11:c3:82:28:1b:37:69:95:b0:d2:0d:
dd:3c:2a:2c:b4:34:13:f2:77:18:26:fe:42:b0:58:39:bc:20:
64:86:06:e9:69:ee:0b:25:de:81:82:a4:cb:36:fa:f7:17:82:
65:0d:09:23:c1:52:25:4c:59:c9:71:14:15:97:61:de:7f:a3:
e3:2a:5a:31:dc:a7:ef:1c:84:77:dd:0a:1c:0b:b8:30:a9:ce:
23:73:7e:3b:4d:fe:13:e8:cf:5a:24:a4:93:b7:26:2b:7f:bb:
f3:b9:35:64:fc:cf:02:1e:67:01:cd:34:4a:9c:4d:29:d5:5b:
5c:a7:22:9a:dc:ba:6f:00:5e:3f:ad:f2:be:61:c2:a0:0c:cc:
6d:d7:3f:ec:f3:1b:9e:c8:0a:2c:ae:b1:8d:8f:7d:74:6a:fd:
16:f8:01:9d:66:a2:bf:6e:9e:70:39:f6:39:6d:06:a7:9b:cf:
22:db:19:74:82:eb:ef:3c:5c:c4:c7:9a:e8:c9:39:cd:2c:38:
a3:ea:8c:f9:b2:75:fa:1c:da:5c:da:f8:58:16:ee:fc:93:4e:
ba:f7:be:af:7f:cc:0e:42:37:6c:24:7d:95:b9:6b:77:37:f5:
e1:37:f8:38:45:8a:3e:e4:43:9f:56:a8:13:61:b4:6b:7c:b1:
87:62:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:29 2024 by rpki-client on console-fra.rpki-client.org