Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Cat96POCrDh3hwdrWpHDXuX4tqE.roa
File: Cat96POCrDh3hwdrWpHDXuX4tqE.roa (raw, json)
Hash identifier: jpUy+XCX908n4PIidi+voomaA6hrrVTQSVEeRSRNFcA=
Subject key identifier: 09:AB:7D:E8:F3:82:AC:38:77:87:07:6B:5A:91:C3:5E:E5:F8:B6:A1
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 0189F97E8DB98E7DAE1C8EBA9F2C7A770AF3
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Cat96POCrDh3hwdrWpHDXuX4tqE.roa
Signing time: Tue 15 Aug 2023 13:59:27 +0000
ROA not before: Tue 15 Aug 2023 13:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62343
IP address blocks: 94.139.36.0/23 maxlen: 24
2a13:ac40::/29 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:7e:8d:b9:8e:7d:ae:1c:8e:ba:9f:2c:7a:77:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Aug 15 13:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ab7de8f382ac387787076b5a91c35ee5f8b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:bf:04:4b:e8:48:9b:7e:9e:f5:4a:4b:48:
b1:6b:09:7d:20:31:c1:38:86:13:87:2e:f1:a5:7a:
f2:00:84:90:5c:2a:1c:c2:d6:e5:3f:4a:f5:83:ff:
40:71:af:c0:bd:a0:5a:69:de:0e:69:57:d0:7a:21:
ba:f0:48:66:c6:33:98:c8:db:29:94:50:d2:66:60:
0b:88:84:58:f0:43:f0:6e:2c:9d:60:fd:85:42:e5:
b8:ec:89:15:01:f2:17:6b:bc:5f:6a:cf:ce:0f:f9:
83:0f:65:7f:c8:95:22:e9:c5:ed:18:5e:af:4d:29:
4c:55:a2:5e:75:3b:9b:42:7b:9b:33:3f:0f:78:e1:
de:9d:a9:78:e5:8a:28:0f:6c:c8:d2:5f:5b:79:9a:
a8:38:4c:32:81:82:6b:42:bb:07:76:f8:f9:1e:30:
85:99:f7:60:4f:3a:53:ec:70:8e:35:31:14:bc:97:
11:13:45:bc:0f:84:a2:17:02:0b:56:57:3e:18:d4:
e9:a8:f0:c1:e8:9f:7c:e3:05:8f:b3:75:b6:40:57:
bf:0c:4c:b7:ca:ee:df:d3:4d:77:5c:02:c7:5e:9c:
46:d8:53:8d:94:af:19:80:27:fa:a8:bb:1c:fe:1f:
65:59:be:b9:69:df:4d:81:4d:c1:98:0d:d7:21:72:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:7D:E8:F3:82:AC:38:77:87:07:6B:5A:91:C3:5E:E5:F8:B6:A1
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Cat96POCrDh3hwdrWpHDXuX4tqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.36.0/23
IPv6:
2a13:ac40::/29
Signature Algorithm: sha256WithRSAEncryption
12:77:e4:a4:b4:1e:8e:3f:98:fd:8c:07:8e:bf:9f:e0:fe:52:
0c:c9:29:5f:63:a9:ee:4e:8a:e8:85:71:7c:bc:f4:5c:d4:3f:
d9:90:2e:4a:3c:c7:ab:9e:1e:70:85:a4:bb:18:d9:79:c9:7a:
64:78:65:b4:31:71:60:8e:9b:52:55:60:60:7a:6b:06:96:6c:
6d:d2:61:78:bf:47:d1:4c:93:32:bf:5e:f6:bd:cc:12:c0:eb:
a0:fc:9f:8a:aa:49:57:6a:32:e5:88:fc:15:43:14:fe:26:dc:
e5:a9:a2:3f:eb:67:55:74:9b:46:c2:24:49:8d:55:ef:0d:60:
a9:db:70:ad:b4:0d:24:3e:57:8d:64:ac:16:78:6f:f4:fe:28:
28:ad:f2:98:1b:eb:65:8d:d0:1c:48:9d:7b:15:c5:0f:23:18:
62:9f:89:3f:53:b2:3a:14:09:88:fd:82:68:66:59:e6:53:91:
1a:f0:7d:9d:c1:c5:dc:d7:e1:11:f3:f7:d7:a4:d8:a8:31:1f:
28:f7:cd:84:7a:a1:21:c8:a3:b7:89:77:3d:d9:60:6a:ab:b2:
f1:ed:40:3f:d6:76:df:f6:b1:c0:26:36:73:52:26:4b:a4:e6:
61:28:0a:7b:a4:23:ee:ad:62:9e:af:c2:4c:13:0d:09:53:15:
7f:54:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org