Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/wIjZhmTOWxe5jbA-B9ktLu1peLo.roa
File: wIjZhmTOWxe5jbA-B9ktLu1peLo.roa (raw, json)
Hash identifier: 5JbvNGfK0k4ZEcS9256xbXaUPao7XjMZ593MfRoeRcY=
Subject key identifier: C0:88:D9:86:64:CE:5B:17:B9:8D:B0:3E:07:D9:2D:2E:ED:69:78:BA
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 018571F0DC0CCF3F2B82643E39BBFC6EC89C
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/wIjZhmTOWxe5jbA-B9ktLu1peLo.roa
Signing time: Mon 02 Jan 2023 10:04:48 +0000
ROA not before: Mon 02 Jan 2023 10:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 194.38.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:dc:0c:cf:3f:2b:82:64:3e:39:bb:fc:6e:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Jan 2 10:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c088d98664ce5b17b98db03e07d92d2eed6978ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:7a:88:8a:d1:9f:ad:98:bd:55:c9:4c:93:
c0:27:2a:4a:7b:19:6d:36:6c:c2:49:09:f8:1e:b3:
2c:33:4f:b7:84:1c:6f:c4:e6:7d:77:73:6d:75:4d:
47:e9:e0:28:72:c8:09:91:25:9b:50:0e:20:a8:cb:
f4:8d:49:0a:bd:db:ac:b2:f9:30:53:1a:ac:9f:1b:
9e:ed:9b:c4:cd:a7:0d:24:09:40:e6:e0:43:22:a2:
75:01:ba:14:ac:c0:f9:99:2f:17:c7:3e:c6:b4:63:
8f:00:4a:f5:3e:b4:a3:98:84:d4:6b:3c:d5:bf:68:
bf:9d:c0:67:ef:4c:50:02:19:f2:d1:30:c4:88:32:
78:51:e5:48:cb:2b:f2:5c:34:f0:21:ec:ae:f4:a1:
ef:6c:30:22:0a:52:41:e2:61:df:2c:51:c1:6a:27:
57:e0:3c:d7:4f:50:5b:71:16:61:32:be:b4:8b:76:
b1:e7:59:58:bd:c8:c3:3c:a2:8e:d3:90:12:74:49:
69:4c:05:42:d1:b8:fd:61:65:dc:68:02:ae:29:d4:
f2:86:21:74:ec:be:39:47:a8:96:c6:1f:ea:f6:97:
f5:66:d3:20:bf:aa:15:a2:43:e6:6f:f5:b8:97:70:
7e:9c:eb:20:4f:cb:43:a2:88:dc:8f:1b:fb:91:c9:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:D9:86:64:CE:5B:17:B9:8D:B0:3E:07:D9:2D:2E:ED:69:78:BA
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/wIjZhmTOWxe5jbA-B9ktLu1peLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.4.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b9:e1:8e:e2:cb:57:13:9c:6f:34:27:dd:c2:c3:60:8d:e6:
39:67:0d:66:e9:2a:d0:bf:78:66:39:15:ed:c3:19:59:d3:82:
e3:70:37:2f:74:8d:d6:de:8e:89:7f:da:65:13:14:b8:ad:b2:
7a:d6:51:72:75:2a:b7:91:79:92:e9:86:75:95:26:60:f2:8c:
cf:83:39:c6:d4:8e:a6:1d:de:ab:f0:80:29:37:79:1f:09:7f:
c4:30:19:95:66:49:43:4b:50:d7:50:9c:5e:79:06:41:28:8b:
1a:8b:6d:8a:c1:8f:91:c2:c4:59:d1:34:c2:12:8c:12:b6:35:
70:57:61:77:e4:7b:7b:d3:da:16:72:4d:e2:84:3d:21:2a:b8:
db:c2:b2:88:79:a4:c1:64:f1:f1:7e:ad:c6:a8:a4:87:7f:3e:
e7:2c:9a:2b:57:dc:6c:75:b5:82:2e:aa:8f:7a:70:97:27:21:
76:a8:f6:a7:60:92:f9:73:fe:73:7d:ac:73:07:1a:57:42:8d:
da:8e:22:73:bf:5a:1a:1e:d1:6b:0d:c4:99:1c:11:de:2f:98:
46:c7:c0:f0:d6:25:b1:63:9c:b4:d4:3c:26:ae:89:7f:79:47:
f0:15:da:f3:6b:1d:41:94:40:e9:5a:18:67:af:0b:11:14:74:
94:06:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org