Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/icZ3xbwZ8nPP6j3ssFQadvPMbxQ.roa
File: icZ3xbwZ8nPP6j3ssFQadvPMbxQ.roa (raw, json)
Hash identifier: w8O+SP00uDHZNSdEA1a4MRLkQYZFRLMab5gWqVeeZ8A=
Subject key identifier: 89:C6:77:C5:BC:19:F2:73:CF:EA:3D:EC:B0:54:1A:76:F3:CC:6F:14
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 0185708CB4C5CFD5CD587CFFE8B6076D7533
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/icZ3xbwZ8nPP6j3ssFQadvPMbxQ.roa
Signing time: Mon 02 Jan 2023 03:35:47 +0000
ROA not before: Mon 02 Jan 2023 03:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 194.113.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 14:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b4:c5:cf:d5:cd:58:7c:ff:e8:b6:07:6d:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 2 03:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c677c5bc19f273cfea3decb0541a76f3cc6f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:25:9c:ec:75:37:59:63:2e:fd:96:80:b0:
50:42:0a:ff:ff:4d:88:77:cd:52:9f:ee:75:45:20:
98:58:fd:8f:35:5c:78:08:99:45:f7:7e:7f:1b:30:
f0:26:36:14:36:51:bd:90:da:32:6e:db:c6:19:80:
c8:bf:29:a9:05:07:10:33:9f:9f:91:a5:62:47:77:
d3:4c:e7:b8:62:c6:09:f4:25:8e:57:0e:78:55:f1:
98:9b:97:3a:66:8b:ba:83:ef:15:16:9b:ae:41:5a:
b1:fe:7c:ad:f1:d4:1c:5d:08:76:9d:76:21:eb:f3:
f7:7e:e9:c6:ca:0c:40:55:2f:15:06:db:67:5d:ce:
f3:fa:5f:19:df:a5:df:ff:52:c0:f1:76:60:ff:63:
52:b7:a5:af:27:73:54:7a:3d:b9:d0:46:13:c4:2b:
41:da:62:ef:19:0f:b7:de:40:c4:32:c9:56:1f:19:
9c:63:47:8e:58:02:08:ec:d3:8b:b2:7d:32:5b:57:
19:ed:d5:2f:6b:a0:01:43:5c:69:a7:81:67:49:fe:
51:e1:cd:47:45:82:a0:bf:9c:29:84:b8:4e:f2:94:
30:f1:ca:55:a9:9b:e8:04:9a:18:2b:f9:2f:f5:3b:
6f:e1:e3:c1:cb:d4:f8:23:97:3d:e9:ab:33:3e:f7:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:77:C5:BC:19:F2:73:CF:EA:3D:EC:B0:54:1A:76:F3:CC:6F:14
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/icZ3xbwZ8nPP6j3ssFQadvPMbxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:83:e0:5f:37:13:be:8c:11:ab:46:01:f7:27:48:43:4d:e1:
c3:0b:e0:59:61:4e:03:34:a4:50:21:fb:11:ce:42:04:24:c4:
2e:31:1f:c9:fa:82:a8:aa:19:b0:95:91:81:b4:1d:cd:90:8c:
2c:a2:cc:57:94:3a:77:89:fb:86:93:45:a3:5e:30:3d:f3:d6:
a3:54:14:0f:f7:21:f5:83:c5:09:a3:3a:bd:87:5f:c6:62:16:
61:9b:80:9d:33:b1:33:0a:52:48:48:df:34:1f:8b:c0:83:9b:
9f:4c:6e:5a:a3:aa:76:b4:3d:28:c3:de:f0:83:8b:6a:87:7a:
a5:c2:c7:89:53:32:c1:84:86:a3:cf:2b:1c:be:77:34:1b:fe:
c3:44:e8:05:fb:45:28:44:4d:19:b1:d7:95:05:16:ea:a9:e0:
e8:ee:ce:5c:73:50:b2:76:8e:74:01:a8:15:8e:1a:e6:04:59:
2a:db:2c:07:c9:9d:4f:f6:ef:1f:db:12:59:67:65:6c:f6:1a:
01:31:f6:23:3f:65:1f:ef:19:12:43:78:5a:e3:5c:1e:8c:d1:
cd:9a:b9:71:92:e7:68:2c:28:d9:de:c4:d8:98:37:a1:3d:55:
1a:62:c9:81:e5:01:0e:95:94:c3:f0:38:4d:00:98:de:f8:73:
ff:00:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org