Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/pWcOZQ_KYpn267RijkxoooR_92I.roa
File: pWcOZQ_KYpn267RijkxoooR_92I.roa (raw, json)
Hash identifier: UNWONSCN6s8lzNo72fLLG47SzFvUlOfYvc5Lnh157xg=
Subject key identifier: A5:67:0E:65:0F:CA:62:99:F6:EB:B4:62:8E:4C:68:A2:84:7F:F7:62
Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial: 01856DE656A0ECC9FE431B3B9FB04A5F28C2
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/pWcOZQ_KYpn267RijkxoooR_92I.roa
Signing time: Sun 01 Jan 2023 15:14:50 +0000
ROA not before: Sun 01 Jan 2023 15:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48560
IP address blocks: 194.50.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:56:a0:ec:c9:fe:43:1b:3b:9f:b0:4a:5f:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Validity
Not Before: Jan 1 15:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5670e650fca6299f6ebb4628e4c68a2847ff762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:dd:b7:e6:57:2e:94:17:ad:60:f3:eb:a8:
cf:43:e2:fb:0c:18:33:a4:23:35:1e:65:a9:ff:68:
49:6f:0c:76:80:5f:5b:24:8f:e7:6c:b7:3d:ff:bc:
e0:72:bf:cf:eb:f9:af:89:b2:9c:81:42:9d:d2:c4:
41:0e:ce:f2:c6:ad:f9:07:d3:de:de:77:48:4a:c2:
0f:d8:c5:3b:71:a7:17:c0:53:6d:46:e5:09:24:b6:
a9:da:e9:c2:15:e6:eb:ad:1a:97:ad:ce:cb:0d:57:
13:b0:56:3d:a5:bb:a1:31:c3:5c:0f:8b:25:88:86:
8a:78:9c:5e:48:d2:4a:72:0d:15:f5:f1:9d:0d:e5:
b7:14:ad:62:27:f3:2e:a6:f3:1c:98:9f:50:66:9c:
e8:89:2e:10:45:c1:78:48:d6:49:48:ef:a7:c3:44:
9e:ef:8f:75:bb:ab:53:c9:16:27:49:9f:80:f7:08:
ff:a9:91:76:4c:b3:fb:fd:32:cb:84:fc:42:4b:45:
16:2a:e0:31:78:7a:77:87:e1:08:32:c2:d7:a7:b6:
8d:42:e0:42:29:8e:38:ec:97:c7:30:4a:ee:cd:27:
61:fd:92:cd:60:2c:7e:7e:7c:18:2d:74:93:49:10:
ab:35:b6:d7:61:2a:ef:71:ab:a9:76:5b:d2:70:32:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:0E:65:0F:CA:62:99:F6:EB:B4:62:8E:4C:68:A2:84:7F:F7:62
X509v3 Authority Key Identifier:
keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/pWcOZQ_KYpn267RijkxoooR_92I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1f:cf:c2:56:58:ca:ba:ca:ce:cd:ab:88:96:94:41:4e:40:
4f:df:dd:8b:25:ec:d2:47:e9:08:bb:9c:fd:56:41:81:24:f5:
ff:44:eb:71:fd:63:2d:f7:12:43:36:3e:37:e1:ae:f9:23:f5:
e1:ad:e8:39:06:9f:02:67:25:ba:10:a0:6f:24:8b:27:89:ce:
09:d3:d4:6d:67:73:a1:77:7c:3b:13:c7:f4:3c:4d:25:87:a0:
0e:f8:97:1b:2a:e2:25:6a:75:d2:72:47:d7:06:75:83:c3:93:
3c:07:8c:6d:9f:3e:ff:f3:83:00:a8:99:36:07:91:4c:14:24:
d8:cb:82:d0:b2:0c:53:58:29:d3:f2:91:1c:a5:d5:4b:be:dd:
55:b0:e1:d1:38:ba:98:ef:78:0a:2d:f6:35:5c:05:9d:72:03:
18:f3:bf:eb:d2:de:cd:17:80:a6:26:4f:9e:00:0b:0c:38:85:
d2:cb:5b:da:ff:84:c2:ec:c4:fb:44:d3:b4:f9:40:4e:97:ab:
46:19:d5:67:c7:07:d8:97:13:59:88:b9:20:a0:71:df:e4:7e:
e5:ff:19:3f:1c:33:ec:0c:4b:28:0c:09:07:9c:d0:d7:62:a8:
1b:a8:79:cd:ec:6c:ba:89:f8:9c:d0:c5:d9:6a:b3:73:ce:40:
9a:02:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:21 2024 by rpki-client on console-ams.rpki-client.org