Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/c-mTrK422u6cDS8_T2KRmT5TrLg.roa
File: c-mTrK422u6cDS8_T2KRmT5TrLg.roa (raw, json)
Hash identifier: 9sOC2b3hlIoVZEWOMNTg7O4Es2Li4jFybfX+v6V8rwc=
Subject key identifier: 73:E9:93:AC:AE:36:DA:EE:9C:0D:2F:3F:4F:62:91:99:3E:53:AC:B8
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FFDFF6767A48A7EB671677E20B19A
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/c-mTrK422u6cDS8_T2KRmT5TrLg.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399486
IP address blocks: 194.180.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fd:ff:67:67:a4:8a:7e:b6:71:67:7e:20:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e993acae36daee9c0d2f3f4f6291993e53acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:11:7a:4c:79:d9:02:16:b7:8d:fe:76:41:
40:84:ca:12:96:17:db:d0:7f:27:38:4b:c9:7b:55:
e3:c2:ca:29:61:28:3b:d6:61:65:56:b9:58:c1:20:
4d:93:66:1c:21:71:b3:8d:72:2a:98:8b:2f:5a:72:
56:e2:40:eb:1b:08:3b:f4:42:dd:1a:18:87:28:59:
12:fc:b2:63:3b:7e:c0:d5:8d:98:d6:30:f5:44:e9:
42:50:49:ea:06:f1:d5:3b:e6:35:5f:1a:9c:60:8c:
ac:8c:d6:28:88:04:51:28:8c:5b:31:76:c5:bf:0f:
25:64:ec:b6:3b:24:1e:fc:d8:88:b3:80:20:a8:18:
7f:45:8f:dd:5c:74:7b:11:01:cc:3f:da:e6:ba:da:
7b:61:d2:51:0c:76:5a:10:b4:43:b0:c0:35:1d:39:
ff:54:58:e2:69:64:9c:9e:40:a7:10:6f:fc:a8:8a:
84:4c:41:19:38:d6:f2:52:1e:ad:6d:6e:3b:80:f7:
b5:b4:e9:a5:71:7a:aa:ca:c3:f4:5e:02:62:75:6d:
1b:a8:ad:ca:3b:75:05:55:4f:ae:d9:b3:e3:4c:53:
3f:8b:9d:c2:10:ba:ea:a5:21:3b:d0:c4:9b:44:63:
9b:e3:15:09:1a:bf:3b:cb:d0:a1:42:44:13:5c:57:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:93:AC:AE:36:DA:EE:9C:0D:2F:3F:4F:62:91:99:3E:53:AC:B8
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/c-mTrK422u6cDS8_T2KRmT5TrLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cc:9d:ad:91:e9:65:72:03:4f:34:e3:57:e1:bd:79:80:1a:
02:ef:53:36:77:37:eb:ff:6f:e9:1a:bc:eb:7d:a7:64:4a:1c:
87:5b:95:15:52:3c:b5:40:ea:ae:55:73:44:a1:86:43:90:f9:
67:27:64:6f:52:aa:2a:b0:cd:dd:98:d6:a1:9f:6f:06:8e:61:
e0:e0:87:b9:23:cc:f3:21:55:e8:8f:9a:e8:57:de:e6:32:7c:
24:4d:85:d3:69:9d:b2:29:9d:6e:19:57:90:11:ca:e2:33:33:
b1:57:63:b8:37:42:4b:81:93:89:44:f8:cc:37:db:45:d6:7c:
17:a4:f9:03:97:6c:a8:eb:f4:d0:27:f4:30:d7:3c:06:cd:91:
92:fa:cc:e8:64:98:0c:0f:b6:c1:e5:9b:88:65:06:6a:ce:4e:
5e:a2:a7:0b:60:e0:16:2c:23:63:84:de:7e:5a:64:53:23:fa:
dd:17:62:df:3e:36:c9:57:64:1e:dc:b7:55:e2:c9:ad:0b:06:
6c:8f:ad:ac:1a:4a:d9:99:dd:07:ec:06:24:9e:8f:dd:c0:be:
65:55:da:d3:72:75:c6:28:85:c8:cb:e3:29:de:54:d4:63:12:
ae:f5:34:e2:4e:50:14:d3:93:f3:0b:51:76:6f:09:3b:c8:ae:
75:58:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org