Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/CcHpN2ruNaHgNSV9-xHR7gvFp5Y.roa
File: CcHpN2ruNaHgNSV9-xHR7gvFp5Y.roa (raw, json)
Hash identifier: wDwCze6leFKU8xqTgATxdHLGdSw+tolv28refd7sOCE=
Subject key identifier: 09:C1:E9:37:6A:EE:35:A1:E0:35:25:7D:FB:11:D1:EE:0B:C5:A7:96
Certificate issuer: /CN=b4b4068b321f40232356de541bd68bd444906ba5
Certificate serial: 01856FF04D78FE36D1128581E05A155EB827
Authority key identifier: B4:B4:06:8B:32:1F:40:23:23:56:DE:54:1B:D6:8B:D4:44:90:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLQGizIfQCMjVt5UG9aL1ESQa6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/CcHpN2ruNaHgNSV9-xHR7gvFp5Y.roa
Signing time: Mon 02 Jan 2023 00:44:57 +0000
ROA not before: Mon 02 Jan 2023 00:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.62.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:4d:78:fe:36:d1:12:85:81:e0:5a:15:5e:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b4068b321f40232356de541bd68bd444906ba5
Validity
Not Before: Jan 2 00:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c1e9376aee35a1e035257dfb11d1ee0bc5a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:bf:f8:42:65:9a:98:66:d8:20:d6:cb:8b:
4c:a8:0e:44:cf:d6:25:e4:d2:b2:46:09:ad:d3:6d:
7b:26:dd:5c:30:09:f9:b6:40:f4:c6:53:d9:b6:db:
05:e8:f4:61:0f:18:93:26:0d:29:78:9e:65:06:f4:
45:81:e4:dc:80:86:fc:ca:22:6c:d1:fb:bd:88:81:
f6:f2:ad:24:10:18:0a:ad:38:73:10:2d:f8:96:ee:
d3:ef:b2:31:ad:c6:ef:68:14:a2:c7:d8:c6:d4:95:
3f:12:f8:03:a6:71:e8:6b:31:eb:15:e7:0f:25:ee:
fc:07:54:da:68:ba:29:3a:0a:11:85:10:a2:eb:91:
bc:93:6d:1a:ba:42:b6:fc:92:21:d4:72:5a:b5:9b:
65:b8:ee:d1:a2:6e:71:37:d7:03:82:4a:0f:fd:b2:
60:45:6a:c6:92:e9:a9:09:d3:91:96:89:57:1b:7b:
74:57:ce:9f:9a:42:56:4c:62:87:fb:f5:e2:26:f4:
72:fb:08:10:09:16:f8:42:f8:62:48:dd:ae:1b:d7:
90:80:52:c0:8e:b5:e4:8c:be:57:13:23:e7:8a:64:
f9:c6:ec:17:20:bb:9f:be:34:e8:eb:8e:15:a4:97:
30:7d:da:40:a7:01:18:70:6e:92:45:f0:af:eb:34:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:E9:37:6A:EE:35:A1:E0:35:25:7D:FB:11:D1:EE:0B:C5:A7:96
X509v3 Authority Key Identifier:
keyid:B4:B4:06:8B:32:1F:40:23:23:56:DE:54:1B:D6:8B:D4:44:90:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLQGizIfQCMjVt5UG9aL1ESQa6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/CcHpN2ruNaHgNSV9-xHR7gvFp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8e10ca-0fb5-4b61-8ae6-54b669258eb2/1/tLQGizIfQCMjVt5UG9aL1ESQa6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.104.0/24
Signature Algorithm: sha256WithRSAEncryption
46:90:7a:06:90:45:a5:8b:a0:ae:78:62:e9:40:25:eb:f9:9a:
70:f2:46:eb:a9:74:61:3e:80:6a:6c:f2:4b:c0:21:36:20:a0:
72:1d:bd:e3:de:d2:97:cf:e4:d2:08:a0:48:f2:ff:20:14:2f:
89:ca:c4:0a:15:de:fe:5c:65:96:ec:5e:fc:5d:e3:2b:1a:a7:
d1:85:f4:a1:55:78:13:52:1d:8c:ed:5d:3a:04:e8:c4:1d:3a:
e3:c5:dc:f2:25:d7:e3:55:db:37:b3:27:49:75:36:da:e4:60:
b4:80:04:7d:a6:b7:44:38:9a:95:bc:de:d6:84:78:f5:49:9a:
0a:93:35:d9:5a:e0:11:b2:07:f9:75:c7:00:08:1c:91:af:a7:
51:44:1e:15:08:62:e5:7d:97:9d:16:57:ec:ae:26:1e:b4:da:
55:e9:ee:9b:50:df:53:b7:a1:97:55:e3:9e:ad:4a:49:40:83:
e1:60:6b:29:a7:08:3e:73:b2:4f:7e:ff:6f:8a:64:fd:41:26:
b2:ad:e8:8c:0e:f2:71:11:c6:58:93:7b:f6:2a:b0:b9:ce:78:
ad:7e:9b:ce:4b:03:78:ad:68:6b:26:6b:b1:ee:35:ba:2f:5f:
e6:44:ce:32:68:6d:a9:c8:a1:0f:ae:91:77:55:a9:ad:8a:02:
4c:47:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org