Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/q7zXV1cvwn5CFuTraSxYdge-72c.roa
File: q7zXV1cvwn5CFuTraSxYdge-72c.roa (raw, json)
Hash identifier: vJbQCPWQG+EjfaiX28/nFjV1hZEZKq59+qtVYatbpDE=
Subject key identifier: AB:BC:D7:57:57:2F:C2:7E:42:16:E4:EB:69:2C:58:76:07:BE:EF:67
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 0185708CB5CCA1FB6F70EFB5C2A6CFD46A2D
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/q7zXV1cvwn5CFuTraSxYdge-72c.roa
Signing time: Mon 02 Jan 2023 03:35:47 +0000
ROA not before: Mon 02 Jan 2023 03:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207794
IP address blocks: 194.113.139.0/24 maxlen: 24
194.113.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 14:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b5:cc:a1:fb:6f:70:ef:b5:c2:a6:cf:d4:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 2 03:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abbcd757572fc27e4216e4eb692c587607beef67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:5b:43:ae:5b:df:af:b5:f9:94:4a:9e:26:
56:11:46:c5:94:9d:86:0a:d0:37:95:47:5f:f4:aa:
c0:2a:37:80:6a:01:77:7d:8c:d1:7c:d7:df:f5:c1:
ee:d8:70:2c:df:c3:e3:81:1b:9b:f4:96:97:1e:d4:
a4:05:9f:21:11:80:11:5c:2b:2f:f9:27:96:be:d7:
4c:52:8b:a3:20:ce:f0:c5:e6:02:af:a9:7d:4d:df:
9e:3f:70:b6:10:21:64:70:21:ee:45:89:6d:2f:b3:
c8:d3:ae:68:90:3f:42:4e:ed:8e:65:8b:b4:34:9d:
f5:a8:a4:b0:74:9f:12:d7:e6:1e:b1:b2:c4:b6:25:
12:7d:12:f3:99:8b:81:07:0c:36:54:6e:a0:97:79:
b8:58:96:74:c4:4e:06:fa:b6:90:18:86:79:7a:8e:
6b:43:a0:a1:9e:a3:3d:f6:66:ab:fe:c8:bd:ca:a8:
92:19:27:24:38:fe:2e:63:03:c0:8d:a7:c1:9d:b7:
47:b2:a3:39:4b:86:d8:be:4e:8f:65:a9:01:de:b2:
74:d3:2b:cd:32:4a:6d:99:a0:8e:5a:0b:74:f8:0a:
a6:53:96:7b:f6:c6:53:6a:54:e2:4b:49:c3:ae:d8:
e5:e3:53:cd:88:05:b2:53:74:9b:f9:45:4b:30:7c:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:D7:57:57:2F:C2:7E:42:16:E4:EB:69:2C:58:76:07:BE:EF:67
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/q7zXV1cvwn5CFuTraSxYdge-72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.139.0-194.113.140.255
Signature Algorithm: sha256WithRSAEncryption
af:ef:5e:21:44:b3:22:5d:2d:72:f6:ef:0b:2d:8d:21:99:44:
c8:76:7d:27:ee:00:18:00:bc:68:3d:f4:3e:b2:d9:2f:e8:b9:
a7:78:c2:fd:0b:49:55:f9:f4:f4:01:39:ff:bf:00:ba:d8:8f:
51:98:a4:78:11:0e:e3:ef:db:d2:c8:93:c7:46:eb:a0:69:39:
14:b8:77:4f:b0:ff:ea:58:f7:ac:19:35:73:80:d9:46:21:4c:
3f:be:a7:0f:82:ed:b7:86:04:7a:43:57:dc:a1:fe:e3:8c:0f:
03:ff:a6:9c:f0:79:9e:a4:d0:f4:46:26:fb:88:08:09:f2:05:
63:a9:a7:86:ed:a4:ce:cd:c7:fc:93:02:fb:7e:14:5d:87:5b:
e1:bf:df:ae:8e:68:04:28:2f:2b:07:8b:ba:d3:90:f9:dd:62:
36:53:c2:db:83:57:53:15:c7:07:9c:1b:11:ca:0c:72:c0:ba:
ca:a4:82:18:a4:a6:cf:f5:2f:0b:53:47:3f:f6:4f:97:e1:4d:
09:9a:69:2f:a8:de:e6:c4:30:4e:6e:35:6c:b4:7b:68:dc:f6:
85:c2:15:25:b9:0a:0f:4d:f8:f7:18:c0:1c:61:7c:1c:85:61:
21:b6:6f:c4:2a:93:98:1c:14:5b:e6:d4:67:24:c8:4e:4b:ae:
83:72:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org