Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/slN9nbfanC9wuSE3ORSH9K41NU4.roa
File: slN9nbfanC9wuSE3ORSH9K41NU4.roa (raw, json)
Hash identifier: VAiFseqsRw0ORimYyxdeLTA3FTYc4hZafhK2nhS+mNU=
Subject key identifier: B2:53:7D:9D:B7:DA:9C:2F:70:B9:21:37:39:14:87:F4:AE:35:35:4E
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 018A8B28524FBB835DCC57BF1C2FE6F56797
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/slN9nbfanC9wuSE3ORSH9K41NU4.roa
Signing time: Tue 12 Sep 2023 20:49:50 +0000
ROA not before: Tue 12 Sep 2023 20:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208344
IP address blocks: 194.110.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8b:28:52:4f:bb:83:5d:cc:57:bf:1c:2f:e6:f5:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Sep 12 20:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2537d9db7da9c2f70b92137391487f4ae35354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:0e:24:fa:38:80:6a:d3:9a:4e:08:ae:e1:
bb:55:85:45:99:5e:d7:bc:3e:ec:47:59:7b:31:d7:
cf:9a:cb:be:31:21:bd:36:86:08:fe:8d:3b:c0:3c:
d0:66:c1:e3:9f:0c:be:b8:e6:22:ec:1c:fd:60:6a:
dc:40:68:ef:de:fa:ea:d5:6b:49:77:46:9b:db:b1:
f8:9e:f2:fc:41:d4:f3:65:f6:0b:1a:15:3f:3d:bb:
30:a1:db:74:1d:7b:fd:bf:83:c2:c5:32:21:d7:c4:
99:b4:e4:5e:39:a8:10:f3:8b:1c:7b:ca:7c:99:34:
84:dd:fe:02:92:80:af:cb:cb:61:ff:41:b1:70:98:
fe:ce:0c:2f:94:c1:21:65:5a:5a:b9:7b:84:ba:e7:
de:fe:f7:ff:ed:b9:3a:02:11:40:9c:64:fd:96:d8:
1c:7e:d8:aa:27:e3:1b:6a:f8:e8:c2:b5:ef:01:f4:
de:af:12:59:df:fb:cb:e0:cb:1e:a2:da:48:2c:41:
89:0b:e5:cf:50:98:a2:94:d5:be:cf:ab:7d:97:37:
97:72:a1:38:21:39:97:da:1c:66:64:2d:4c:bb:25:
b6:61:79:ce:fc:da:4b:64:16:ee:6c:33:6d:06:d6:
0b:5a:25:e5:cb:8a:f3:db:3f:e3:3f:db:dc:c1:78:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:7D:9D:B7:DA:9C:2F:70:B9:21:37:39:14:87:F4:AE:35:35:4E
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/slN9nbfanC9wuSE3ORSH9K41NU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e0:0a:80:67:02:a5:2e:09:6e:64:64:2a:e1:f7:f9:d9:df:
12:7c:0b:63:be:07:d9:96:1b:33:7e:f2:d9:42:a4:43:3a:13:
f3:a7:d1:9d:3e:2b:c7:e4:a9:53:cb:16:3e:b5:c4:6c:02:6e:
bb:63:26:87:85:c2:ee:93:dc:4a:1e:43:0d:89:56:a7:03:2d:
96:6f:1c:7e:9e:9d:1f:1e:7f:b5:40:e7:aa:9d:6e:96:42:8d:
bf:03:b7:23:cc:e3:f4:58:be:9a:4f:da:65:c1:98:ab:c8:7e:
c2:04:49:25:3c:a6:20:5a:66:91:eb:5f:06:f8:b9:d6:65:58:
eb:12:e8:e4:af:35:7d:18:72:9d:01:d9:99:d2:2c:47:68:73:
6a:7a:e3:de:17:1e:8c:8c:91:6b:4c:42:b5:77:de:e0:e0:1e:
59:d0:5e:4b:57:64:fb:10:3d:5e:c2:20:e4:d0:28:a5:9c:64:
00:1b:d9:52:ef:9f:98:c9:cd:a2:de:47:e3:f2:82:ed:65:1d:
7e:43:4b:06:f0:10:00:17:c8:08:f6:78:65:8b:88:8f:73:e5:
60:44:c2:aa:cc:2b:1f:c8:fd:ba:26:4a:bf:08:d0:a2:5c:29:
b9:7d:cb:b2:e5:8c:81:7a:c8:f9:a0:17:76:d0:86:41:28:20:
d6:b2:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:04 2024 by rpki-client on console-ams.rpki-client.org