Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_KsaA18UleMup6f6EhNxizUuvuc.roa
File: _KsaA18UleMup6f6EhNxizUuvuc.roa (raw, json)
Hash identifier: 2FviMZJTC1mkFnxvH7FcoX8Nbpo3vdmj/75etDLrVQU=
Subject key identifier: FC:AB:1A:03:5F:14:95:E3:2E:A7:A7:FA:12:13:71:8B:35:2E:BE:E7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF662697EB813FB414D039EFB455C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_KsaA18UleMup6f6EhNxizUuvuc.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53007
IP address blocks: 194.132.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f6:62:69:7e:b8:13:fb:41:4d:03:9e:fb:45:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcab1a035f1495e32ea7a7fa1213718b352ebee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:93:61:7a:42:f9:3a:fb:c6:a3:97:64:d7:
7a:97:e2:4b:98:fa:d7:41:fa:4d:48:24:ed:8a:0f:
48:9f:e6:5b:7f:45:fe:af:9f:30:96:b3:ce:eb:17:
22:15:28:03:85:45:bc:52:76:22:0e:69:55:5e:fb:
4c:ba:a1:ef:ac:e6:16:91:a8:64:2e:91:d2:31:27:
0f:c0:a1:6c:fd:78:7d:7e:0f:23:fe:7b:6d:44:43:
54:bf:ab:1c:49:53:23:af:47:c5:8b:16:39:fc:e3:
9f:7f:3e:3a:36:68:48:80:ab:f8:6c:f6:05:ab:d5:
51:d4:1e:0a:f4:a8:08:c0:1e:7a:02:2c:6a:60:e6:
29:da:7c:fc:ef:ac:60:f4:48:ed:eb:1c:0d:6c:e8:
7d:b1:47:5b:29:a3:d0:1f:b1:a3:c8:3e:d9:0e:d4:
03:c9:50:7f:fa:cf:a7:fb:3a:df:a8:08:6f:2e:6a:
09:43:3a:b5:39:cd:65:b9:4e:ec:e7:2f:65:0f:c8:
44:b1:c1:9a:9b:d9:47:a8:a3:8d:b0:97:10:2b:f9:
59:af:96:81:23:f7:9d:8f:9d:b4:75:49:90:ba:83:
4f:f5:9d:ef:a3:c8:12:67:4f:15:5e:4f:31:6e:1f:
94:12:dd:ac:15:c6:52:07:77:2a:48:8a:e4:e4:65:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:1A:03:5F:14:95:E3:2E:A7:A7:FA:12:13:71:8B:35:2E:BE:E7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_KsaA18UleMup6f6EhNxizUuvuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.122.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c5:53:73:5b:ad:c5:8c:3a:cb:6f:bc:57:49:6f:b4:c1:52:
41:af:3a:e7:3a:47:5c:e8:28:41:ac:a4:da:16:8d:38:db:f4:
5f:2a:15:35:51:e3:32:cd:5a:b4:25:2e:a7:cd:41:ca:12:9e:
6b:89:95:30:8b:ee:fc:f7:41:1e:a2:7d:37:08:a4:3f:89:97:
ee:c0:83:01:43:71:f3:38:e2:7b:81:18:7b:63:f8:49:d0:41:
69:df:8e:dd:fe:4a:cb:ae:3a:4d:3d:69:7d:83:bb:a1:92:56:
99:af:fb:ce:b7:76:36:2e:69:c5:19:31:e6:6d:9e:33:fd:59:
74:cb:f7:fd:ae:3c:40:da:61:ee:c0:18:24:87:cd:44:a8:0d:
35:23:7c:3f:d6:d9:4c:bf:99:08:c8:5d:0e:39:9e:b9:d1:ca:
87:8a:b0:99:e0:0d:78:e8:40:2c:da:70:d8:cd:98:2e:c9:f0:
6c:0d:96:b5:42:7d:91:59:26:f9:52:5e:7c:9c:25:36:56:73:
49:72:46:68:94:00:2d:38:ae:09:51:d8:1d:57:90:cf:39:86:
11:91:c3:e5:3c:bb:10:0e:a6:1f:df:8f:a3:ac:b3:15:51:b4:
fe:b8:88:50:32:57:d1:71:98:b0:13:0d:ae:6f:5a:34:3b:ca:
10:f5:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org