Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/2W8A2FRCJWSnzvlt7rFcR0ccXlI.roa
File: 2W8A2FRCJWSnzvlt7rFcR0ccXlI.roa (raw, json)
Hash identifier: iXBaebmg7XlUoORYCcKPUBbRx8W/p76P16Co1GGWepQ=
Subject key identifier: D9:6F:00:D8:54:42:25:64:A7:CE:F9:6D:EE:B1:5C:47:47:1C:5E:52
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0189C6AC73EB7FE4E5E5658D19BC6F2E4FFD
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/2W8A2FRCJWSnzvlt7rFcR0ccXlI.roa
Signing time: Sat 05 Aug 2023 17:08:57 +0000
ROA not before: Sat 05 Aug 2023 17:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 194.180.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:ac:73:eb:7f:e4:e5:e5:65:8d:19:bc:6f:2e:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Aug 5 17:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96f00d854422564a7cef96deeb15c47471c5e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:d6:47:4b:90:92:56:be:9f:f0:83:3b:8c:
66:d2:45:6a:b5:0a:bb:85:49:09:75:0f:27:eb:9e:
c5:ee:6d:90:19:0f:98:c6:19:f5:06:38:4d:fa:83:
0d:71:49:34:e6:06:18:41:3d:6f:02:05:96:6d:07:
46:d8:59:a0:e6:d7:f1:f8:39:d7:50:46:4e:b7:fa:
3e:0a:fb:b2:6b:bc:9f:5a:0e:cc:73:0c:21:8f:dd:
7e:8b:fc:00:4b:f4:cf:78:dd:13:62:0c:f1:fd:13:
35:2e:82:5b:fd:3f:a6:3a:ac:ee:0e:9c:7f:54:7c:
35:5f:fc:de:98:0b:7e:c8:bc:4d:d5:85:c5:74:45:
15:2f:96:c2:cb:c6:b0:6e:69:5b:4e:bd:5d:5a:a5:
df:13:ca:50:97:03:77:90:46:7e:d4:9e:fb:28:1b:
c9:63:4d:0b:65:e7:89:33:b2:ed:6b:5c:d6:00:ae:
4a:9d:e4:17:27:0a:ce:fa:65:69:33:26:a9:78:2f:
43:ca:08:d5:c8:5b:36:e2:c6:6b:73:c4:35:86:b4:
01:97:f0:36:ac:36:4c:87:fe:73:d7:a1:f1:6b:99:
71:55:aa:7b:1b:e9:3f:f2:5c:6c:0e:ea:dc:0c:0d:
84:9b:8c:fc:e4:c2:bb:79:40:ef:02:f6:35:d2:7a:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:00:D8:54:42:25:64:A7:CE:F9:6D:EE:B1:5C:47:47:1C:5E:52
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/2W8A2FRCJWSnzvlt7rFcR0ccXlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a6:f7:a4:d7:e2:cf:52:4b:89:8e:af:e1:85:48:10:25:50:
9b:7d:86:97:a2:c1:ca:83:2f:40:f4:3a:22:34:71:28:97:85:
df:93:fc:cf:a3:b2:13:36:ec:c1:67:77:41:d8:35:ef:63:4d:
8a:d8:80:81:68:76:45:6b:43:3e:56:9c:3b:76:cd:32:b4:6c:
c2:e8:96:ca:0a:bd:86:c2:ad:e7:6d:d1:f0:1b:d6:35:26:85:
f9:5d:f3:74:90:c7:2f:9a:a1:17:0a:f9:3d:8b:e8:8a:b9:12:
03:76:74:7b:c0:9f:ce:d2:6d:66:d3:68:b0:c8:22:4e:86:1f:
d2:81:0d:65:be:06:25:55:42:4d:23:33:07:71:b5:73:14:4b:
44:b5:db:9c:81:03:ae:68:3a:ec:36:11:02:1a:30:88:6d:91:
86:3d:ef:cd:6a:17:63:c6:8f:ba:9b:f4:f5:47:f9:7a:aa:6f:
c6:dc:03:3d:34:6a:5d:36:27:fe:6b:91:c0:46:b2:f4:7f:af:
0b:14:42:a4:58:26:57:81:cc:a1:e4:82:3a:8b:52:c7:9c:7b:
d0:84:46:48:a3:60:98:1c:dc:66:ab:d1:da:76:a2:5e:83:db:
3a:9d:6d:a9:6e:a5:64:88:e4:27:9d:4d:c2:13:b4:9b:79:ab:
bc:d8:50:12
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 3 22:47:06 2023 by rpki-client on console-fra.rpki-client.org