Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2J6fs_Jn_hvKGURwTddHBS3GeHI.roa
File: 2J6fs_Jn_hvKGURwTddHBS3GeHI.roa (raw, json)
Hash identifier: Fw0db23uuGt9IPi4FooNY/INqqqGTOid4TtYBXrQRn8=
Subject key identifier: D8:9E:9F:B3:F2:67:FE:1B:CA:19:44:70:4D:D7:47:05:2D:C6:78:72
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018BBA71BA05EDDC63DABE8D6CC48EE5221C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2J6fs_Jn_hvKGURwTddHBS3GeHI.roa
Signing time: Fri 10 Nov 2023 18:14:57 +0000
ROA not before: Fri 10 Nov 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 194.165.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:71:ba:05:ed:dc:63:da:be:8d:6c:c4:8e:e5:22:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 10 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d89e9fb3f267fe1bca1944704dd747052dc67872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:6d:76:21:8f:27:11:60:81:57:7e:06:02:
17:cb:b6:d4:1c:cb:f8:21:bc:f6:ca:c7:3e:a2:a9:
ce:64:2c:91:08:a0:95:ae:0c:1c:12:1d:20:b0:a1:
c3:f9:b1:70:14:5e:ee:c3:d9:54:79:94:d8:ae:41:
0a:c4:60:ee:8f:12:20:db:a2:ef:18:4f:c8:bd:a3:
e4:bd:0c:c7:c8:53:f7:9c:66:2d:8f:b7:72:ab:96:
34:a4:df:61:bc:e4:f9:f7:df:14:91:ff:ac:19:61:
be:e7:36:45:00:44:61:0c:87:98:27:63:7a:c7:e1:
9e:69:0a:74:33:bc:07:8f:ae:d6:29:09:ee:46:a1:
f7:39:33:8d:02:d6:2b:fb:a2:f0:bd:f7:c1:65:e8:
35:98:9c:0e:c5:1c:67:49:be:31:9f:65:aa:ef:06:
c5:91:89:28:42:3d:4a:7e:dd:a0:8a:26:c8:af:90:
2a:7e:f6:ec:cf:c3:b1:51:69:21:ff:6e:9f:5c:2a:
d4:cd:ee:31:3b:f3:dd:d7:e6:4d:2d:7e:d1:00:9b:
e9:38:97:65:3d:29:df:97:7c:0d:32:18:23:a7:0a:
4a:30:65:00:ee:ee:3f:cb:fd:d6:da:87:13:39:5e:
cd:ae:28:80:d1:a1:70:5c:f7:f7:6b:24:a9:8e:cb:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:9F:B3:F2:67:FE:1B:CA:19:44:70:4D:D7:47:05:2D:C6:78:72
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2J6fs_Jn_hvKGURwTddHBS3GeHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9f:35:67:e9:92:59:bf:bd:20:82:f5:e7:c7:0d:53:a2:c6:
d8:4d:09:c6:03:0a:e2:6d:b0:f0:24:45:a5:66:9e:03:50:82:
4f:4f:08:b7:a3:b1:75:bd:0f:32:69:cf:8f:59:c4:68:d8:ad:
6d:93:d6:83:3e:42:06:de:c3:c0:82:9f:ea:8f:e8:33:b1:64:
4f:3d:bd:d9:9a:c6:2d:0e:b6:b2:f4:cb:d0:5c:03:ca:c9:d7:
eb:62:bc:2e:f1:07:c0:92:b5:f2:8e:6a:e9:ba:61:12:10:bb:
8e:5a:76:d6:72:2c:26:ce:db:a0:fb:55:b9:f4:21:0b:67:12:
e0:d5:54:a9:9f:33:f2:75:06:ef:a1:6e:e5:7d:01:49:6c:14:
93:08:db:7a:1f:2d:6e:9b:1b:bc:54:62:b5:6f:df:df:0e:00:
5f:19:84:73:74:e9:ff:62:4b:52:72:50:0b:c3:ac:9f:a5:4b:
3f:64:69:ba:80:bb:24:a7:6c:26:c1:1e:5c:da:2e:55:29:d8:
2c:e1:df:06:be:67:58:db:fd:04:1b:d4:97:7e:f5:1d:01:3a:
31:51:1e:0b:7f:86:39:77:cf:e2:ac:45:26:a6:d7:d8:9b:96:
b6:5a:17:00:77:be:fe:54:95:9e:96:ed:8e:9e:61:56:6e:2c:
6d:cc:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:48 2024 by rpki-client on console-ams.rpki-client.org