Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/X-owqfzy0xg9fY-V-wyLluoW0k4.roa
File: X-owqfzy0xg9fY-V-wyLluoW0k4.roa (raw, json)
Hash identifier: SwCNeqRTmeQd+Or8JkAw9rQ+D0E5aRVECZRwp7Tsj34=
Subject key identifier: 5F:EA:30:A9:FC:F2:D3:18:3D:7D:8F:95:FB:0C:8B:96:EA:16:D2:4E
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 018571A7B6E7DA07663AF4BFE6A973863B1B
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/X-owqfzy0xg9fY-V-wyLluoW0k4.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12509
IP address blocks: 194.153.79.0/24 maxlen: 24
91.194.176.0/24 maxlen: 24
2001:67c:368::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b6:e7:da:07:66:3a:f4:bf:e6:a9:73:86:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fea30a9fcf2d3183d7d8f95fb0c8b96ea16d24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:35:c6:4a:80:15:fe:f6:b4:86:77:43:4d:
d9:b0:d5:a2:74:fe:4c:d3:13:7a:4f:b6:ce:ea:0b:
67:d7:7e:b9:1b:d8:c6:ee:b6:b2:5d:e1:b0:65:18:
c6:f5:9a:0c:00:36:78:85:8a:21:a0:e9:dc:e3:a5:
78:ba:9c:2a:69:ef:a5:61:f8:be:9b:b0:2a:9c:25:
4b:d4:00:a1:ec:56:54:84:72:17:32:26:f2:94:59:
a5:48:08:36:15:60:0c:dd:f9:23:cb:20:fc:a0:32:
bb:36:9d:43:d7:2f:bb:52:1e:81:06:a9:f6:51:33:
79:f5:58:92:37:9e:00:ff:36:18:ae:5e:b9:63:88:
4e:aa:df:93:3d:25:0e:b2:67:7d:e8:c6:e2:3c:27:
37:03:42:e5:3d:dd:18:ac:5f:11:8b:78:3e:a7:13:
df:f9:d2:d5:51:f6:53:48:c1:07:1a:c6:58:7e:66:
4e:b0:00:f4:00:15:e9:ec:f2:a0:de:39:11:5b:4d:
2b:78:27:27:ab:91:da:6f:87:67:7b:8f:f8:33:db:
87:b4:54:c2:40:0e:f1:9d:2e:ad:75:54:01:50:20:
66:fd:4c:4f:08:a9:9f:8d:1e:53:8a:f7:fb:79:20:
61:94:03:f6:67:8b:15:60:66:d5:85:0f:9a:91:67:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:30:A9:FC:F2:D3:18:3D:7D:8F:95:FB:0C:8B:96:EA:16:D2:4E
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/X-owqfzy0xg9fY-V-wyLluoW0k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.176.0/24
194.153.79.0/24
IPv6:
2001:67c:368::/48
Signature Algorithm: sha256WithRSAEncryption
5b:13:d1:30:58:be:11:8f:17:f6:af:0a:17:b5:60:25:10:44:
e5:92:98:40:8b:bd:3b:0d:c6:2f:8b:12:3c:bd:7b:28:6d:64:
eb:64:45:ee:e0:3c:3a:21:90:94:58:8d:09:9d:d2:d4:8a:3b:
d2:42:89:6f:4f:20:89:28:1c:33:ec:f2:83:63:a8:77:d1:7a:
52:2a:b5:e9:60:9b:db:75:9a:65:96:b7:fe:0b:01:d1:57:ea:
20:8e:82:1a:56:5b:f2:fe:e8:a5:93:a2:40:24:ae:d1:5f:c0:
bf:5f:45:11:e8:53:20:32:d6:5e:5f:24:e3:75:08:2b:6e:48:
cf:dc:34:e9:af:0e:c6:2d:57:1b:4f:1f:b2:d6:9c:8d:de:0e:
53:b7:2a:6a:c6:34:f8:88:03:41:e4:ba:ca:87:e4:d4:47:b9:
f7:6b:fe:93:4c:19:78:56:9c:cc:2d:07:6d:c9:d4:b4:e2:ef:
63:82:8f:6a:18:9d:66:8f:5c:dd:53:46:47:52:6a:d3:99:0d:
f7:0a:08:2c:94:7a:91:89:38:5a:07:71:fe:f1:77:9a:2e:1f:
1d:12:9c:c8:a6:21:b7:64:44:b3:65:3e:c9:bb:d6:27:88:51:
7d:cb:00:fb:36:56:64:53:1f:9e:a8:43:76:98:3c:c8:70:64:
a3:a2:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:39 2024 by rpki-client on console-fra.rpki-client.org