Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/PmB0QuF9H9sA5dqDF4RYEIB_foE.roa
File: PmB0QuF9H9sA5dqDF4RYEIB_foE.roa (raw, json)
Hash identifier: p25jBacu2sqfqotaR+CtmcqFuFem63HzEAYt3p38Tcg=
Subject key identifier: 3E:60:74:42:E1:7D:1F:DB:00:E5:DA:83:17:84:58:10:80:7F:7E:81
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 018572F13B46D4B8CA6845EDDFD1BA8D48F0
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/PmB0QuF9H9sA5dqDF4RYEIB_foE.roa
Signing time: Mon 02 Jan 2023 14:44:50 +0000
ROA not before: Mon 02 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213146
IP address blocks: 94.158.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:3b:46:d4:b8:ca:68:45:ed:df:d1:ba:8d:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Jan 2 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e607442e17d1fdb00e5da8317845810807f7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:03:ad:7a:fb:2a:0f:08:4e:54:f7:86:3d:
8c:6a:49:04:04:db:d5:fb:8c:de:07:e7:bd:48:67:
95:c9:0e:bb:46:c1:c2:32:12:8b:f6:75:c8:64:6b:
f0:82:08:db:f0:b4:52:20:a1:fa:79:80:f1:8b:ad:
d2:bf:7a:36:43:db:9e:cb:c8:03:29:f8:25:85:e5:
27:98:91:78:c6:c1:5d:03:f1:e3:00:12:77:43:ee:
2a:50:a9:6c:d9:88:dd:f6:c7:a6:2f:f7:ce:cb:22:
21:1f:cd:16:11:ac:b2:ca:85:84:3c:8c:e7:b7:a3:
2b:59:4e:f7:88:65:79:d2:55:93:f8:7c:0c:41:0b:
ec:e2:65:18:ca:fa:70:11:cb:a7:73:f4:df:bd:ef:
5c:1d:02:8c:da:96:e5:4c:08:ae:de:53:c1:46:f4:
2e:9b:ce:08:2c:6d:7e:97:da:f9:12:e3:59:1d:d8:
b2:7d:9a:a6:e9:52:9e:47:da:84:ef:64:61:84:3e:
d9:01:6b:a9:20:26:a5:4a:9c:32:f1:c4:3c:01:e2:
cc:1b:8f:01:83:38:81:34:71:32:66:fc:50:a3:45:
9e:07:fb:28:6a:1c:7a:79:6a:9a:c5:03:22:c6:90:
5f:c5:a9:42:bc:46:6b:14:22:31:5c:57:65:17:a8:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:74:42:E1:7D:1F:DB:00:E5:DA:83:17:84:58:10:80:7F:7E:81
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/PmB0QuF9H9sA5dqDF4RYEIB_foE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:95:7a:0c:2a:50:d3:aa:a8:43:3b:18:5f:be:3f:92:02:
ec:93:84:98:cf:04:67:44:25:04:68:91:65:15:2b:04:b3:84:
96:85:1b:8c:d2:d1:8f:f2:2e:7e:db:e1:49:3e:8e:ce:92:13:
2c:ac:94:a9:0e:ba:db:c5:31:77:e9:4e:66:16:bf:8f:0f:86:
9c:49:4c:06:0f:7d:5f:e0:2d:a5:5e:90:02:c9:43:c1:41:c7:
0d:b3:4d:77:e7:82:b8:64:f8:fe:98:45:48:21:a8:4e:30:c2:
13:35:c9:e1:03:68:ad:01:fa:1a:54:fe:8c:1b:86:7e:34:64:
1b:10:4b:e2:7c:32:7a:5f:c6:ed:e3:8f:9a:9c:93:bd:5e:fb:
0e:7f:0d:3c:35:10:6d:ca:23:d7:e2:ed:82:59:9a:18:57:6d:
d3:8c:00:c3:48:07:33:2a:33:21:a5:99:8c:14:7f:a4:db:91:
6c:0b:d1:ee:74:7c:79:11:11:cc:e6:84:d5:40:bb:50:7c:68:
c3:88:45:a0:e8:0d:09:33:b0:41:bd:8a:cb:2e:d4:7e:96:81:
6f:61:7e:2d:f3:41:05:f9:c1:a0:02:da:e6:7f:cc:cd:36:66:
e3:05:4a:af:c9:0a:13:a4:15:14:8b:4c:9c:03:4a:87:75:37:
e7:96:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org