Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnSOQ-bXwVB7zSXJGLnK8k4zd4A.roa
File: cnSOQ-bXwVB7zSXJGLnK8k4zd4A.roa (raw, json)
Hash identifier: ikXs8upmypcsb0I2QuNOZvSS6Hmb2Xg957Sy0HvcmiQ=
Subject key identifier: 72:74:8E:43:E6:D7:C1:50:7B:CD:25:C9:18:B9:CA:F2:4E:33:77:80
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0C111C2E38280B696EE726E36DCC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnSOQ-bXwVB7zSXJGLnK8k4zd4A.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206774
IP address blocks: 192.36.155.0/24 maxlen: 24
194.103.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0c:11:1c:2e:38:28:0b:69:6e:e7:26:e3:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72748e43e6d7c1507bcd25c918b9caf24e337780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:22:ff:bb:96:df:93:81:ef:44:48:82:63:
67:fe:63:3c:f2:52:3a:1e:ef:43:a3:47:15:62:67:
24:98:61:cb:39:5c:b3:29:fa:ef:7f:8c:e7:25:ba:
75:d2:f0:96:c3:72:55:c1:1d:2b:6e:da:1e:57:73:
ee:f6:92:a7:c3:16:08:a0:89:7a:7f:e2:14:30:16:
27:26:32:51:c7:c3:9f:1e:71:03:03:31:2b:e9:d9:
86:bd:b2:c9:ba:49:95:18:a4:49:54:d0:cd:12:e9:
90:0e:37:2d:51:2c:12:26:21:1e:25:6c:36:8f:40:
d7:3f:7a:97:75:5b:2e:43:e4:05:e4:a6:17:3b:8c:
5b:5c:01:25:bc:b2:3d:a3:c7:fd:15:63:a5:81:de:
4c:cd:99:b2:b4:4b:34:84:3b:9d:03:4e:de:ab:c7:
63:cc:e1:b7:d0:2f:c7:6c:20:30:ba:95:7b:0b:3a:
c8:c6:04:64:82:c4:e8:1c:84:2e:02:da:67:bb:f9:
d9:b5:37:ba:df:dc:5d:23:f4:1c:e7:95:15:76:28:
30:99:76:b8:bf:94:3a:e3:ea:c0:a0:10:cf:b9:38:
f6:54:19:13:a5:74:fd:57:61:b7:cf:bd:16:94:03:
63:27:93:71:ce:15:d1:9d:a2:69:31:04:3f:44:e3:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:8E:43:E6:D7:C1:50:7B:CD:25:C9:18:B9:CA:F2:4E:33:77:80
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cnSOQ-bXwVB7zSXJGLnK8k4zd4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.155.0/24
194.103.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8e:55:2a:c3:dc:0f:ca:46:89:9f:68:4d:13:90:96:8c:2a:
20:b1:b7:dd:ce:50:c8:ae:34:c1:ee:44:5e:9a:4f:24:4e:0f:
90:9d:9b:4a:6c:55:2e:13:65:3c:53:b1:27:b5:5c:9d:9c:f6:
a3:54:51:c9:57:ff:14:b4:06:2a:24:48:c0:02:e3:92:e2:6f:
e2:82:ea:7e:5c:d5:ee:07:b5:03:f5:ef:4c:e5:f0:55:14:73:
b0:3e:cc:dc:8b:7e:86:5f:2b:d3:15:4e:68:ee:50:3c:8f:26:
d7:95:32:c0:03:ed:fb:a0:fa:c5:2b:f0:cb:ac:ea:08:60:51:
2c:14:47:85:84:8a:c5:17:34:e5:5b:94:2b:1b:91:90:6f:24:
31:cd:d3:76:92:3f:b3:7f:69:6a:64:4a:57:f1:cd:b9:bb:cb:
63:7c:eb:60:47:4d:13:90:9c:d0:16:26:47:6e:24:3a:e4:5c:
6a:34:ae:98:75:8e:f2:ce:39:0f:21:93:30:9a:e2:c2:d3:0f:
fb:e4:50:47:cd:5a:11:11:5d:46:e5:4d:98:ec:32:f7:cd:6c:
c7:65:6d:2b:47:c9:5b:b4:35:4b:d9:5b:9a:d6:83:b5:db:9e:
52:50:6e:40:23:ae:de:f0:2f:87:70:95:95:09:aa:06:bc:6d:
26:56:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org