Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/3ZOWUjyTYE_3SgBj9D9RHj5abjg.roa
File: 3ZOWUjyTYE_3SgBj9D9RHj5abjg.roa (raw, json)
Hash identifier: rejxDu6X8irp//XSWNOEmXzG3nOSQ4Z256HGaUZ6tqc=
Subject key identifier: DD:93:96:52:3C:93:60:4F:F7:4A:00:63:F4:3F:51:1E:3E:5A:6E:38
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 01857115296BD89CC179983F231E31BA796A
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/3ZOWUjyTYE_3SgBj9D9RHj5abjg.roa
Signing time: Mon 02 Jan 2023 06:04:50 +0000
ROA not before: Mon 02 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212989
IP address blocks: 194.156.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:29:6b:d8:9c:c1:79:98:3f:23:1e:31:ba:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Jan 2 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9396523c93604ff74a0063f43f511e3e5a6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:8f:99:3f:28:bc:46:f9:f8:6b:67:66:ed:
64:53:27:b1:b2:ea:44:87:0d:3f:fd:35:48:a8:10:
bd:77:55:af:da:a6:aa:f5:be:b8:ad:12:32:ce:7e:
58:79:17:6d:1f:f8:d7:3c:50:6e:69:82:94:63:80:
e1:84:a6:a3:88:ef:07:1c:8d:41:65:fa:53:ff:9d:
a5:65:ea:88:bd:a4:f3:e9:c4:92:fc:6a:f3:36:fb:
47:ed:34:d0:81:3e:65:45:b5:4b:08:82:c9:20:53:
a0:18:a4:b2:ce:24:8e:a7:5a:3a:c6:64:96:98:ec:
9b:8a:36:dc:85:b7:9f:32:f9:cd:b0:2b:0f:38:ae:
e9:74:2e:f8:5d:f7:9c:98:30:37:a5:1a:c4:ed:f8:
7c:dd:db:0a:51:65:71:85:24:f1:51:02:90:58:0d:
6f:43:bf:b6:32:8e:7d:08:9c:df:87:c2:bf:14:35:
6e:c5:63:19:0e:11:68:c6:c4:c7:d9:fc:59:7b:52:
ba:b6:2e:7d:d6:14:39:51:2c:57:9f:16:06:62:63:
83:dc:f7:79:45:d3:0a:af:37:63:45:9c:6d:8a:ad:
87:87:c1:d1:65:2a:ab:0e:a4:89:57:bc:5a:10:b3:
1f:65:30:5e:0b:9d:df:66:d5:57:53:06:2e:79:d2:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:96:52:3C:93:60:4F:F7:4A:00:63:F4:3F:51:1E:3E:5A:6E:38
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/3ZOWUjyTYE_3SgBj9D9RHj5abjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:17:91:ee:f6:b0:81:3d:4a:62:b7:ed:88:c5:a7:6e:73:89:
a7:e8:f7:f2:89:6e:25:f5:47:e2:04:35:ce:11:0c:c1:59:52:
58:42:fb:f5:e1:17:6f:68:2c:7d:1e:c4:d0:8b:40:38:c2:e5:
c8:7c:a3:f3:6a:de:68:17:d9:21:62:a3:78:b0:da:45:4b:a9:
ac:1c:12:cc:8a:bc:28:15:c2:71:64:39:38:e9:6e:1f:02:55:
25:6e:77:e8:53:84:29:2a:ca:4e:81:70:e5:8b:36:9f:e4:38:
c4:20:d9:30:80:bd:34:17:e3:bb:1a:09:31:cd:33:72:80:da:
80:af:3e:de:41:92:45:a0:10:58:b4:e7:35:d4:30:06:d5:09:
e2:c0:5d:c5:ae:77:fb:4a:37:08:4f:26:c7:15:ce:30:46:0a:
b9:9a:71:1c:92:c2:6e:db:99:19:67:4a:89:21:34:60:1a:4a:
ba:de:0c:d5:a8:57:85:3a:16:a8:c8:5c:b5:b9:48:96:db:df:
76:c9:84:3f:a7:59:1d:1c:f6:9c:6c:b9:2a:c1:0a:6b:a6:99:
ba:ef:a3:b4:58:0d:3f:04:a1:af:b1:ef:84:01:00:db:bb:ac:
98:76:66:59:61:37:76:eb:c7:6b:bf:79:62:20:f3:16:f9:94:
db:23:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:54 2024 by rpki-client on console-fra.rpki-client.org