Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/1yYRf7q-bT96dch-NhWDZRoSHvM.roa
File: 1yYRf7q-bT96dch-NhWDZRoSHvM.roa (raw, json)
Hash identifier: oOMcUZkJIEhFr6zAH8dkKcAwyhGpA9EjZT7L4QADHn8=
Subject key identifier: D7:26:11:7F:BA:BE:6D:3F:7A:75:C8:7E:36:15:83:65:1A:12:1E:F3
Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial: 01856FC2618A25671D9F6E2AC4075B64CCD6
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/1yYRf7q-bT96dch-NhWDZRoSHvM.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8767
IP address blocks: 194.246.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:61:8a:25:67:1d:9f:6e:2a:c4:07:5b:64:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d726117fbabe6d3f7a75c87e361583651a121ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:f6:85:05:56:05:c1:d0:ec:32:a3:33:0b:
8f:ff:d0:3e:a7:0f:34:ec:e5:83:ad:e4:b6:8f:38:
e6:ba:3a:1d:e9:f8:ab:f2:80:60:53:a8:74:d7:ce:
15:49:10:32:92:2c:08:3c:8b:58:02:57:e9:31:3d:
69:4e:ee:5a:dd:72:8b:b4:94:7d:cd:6b:4d:ab:f7:
2b:a5:49:e7:96:ce:4b:dc:37:65:94:13:71:78:46:
96:3b:b0:c1:ef:56:8f:d2:b7:8f:0e:c1:cc:18:7a:
7f:99:c2:11:56:75:53:33:97:08:e6:be:15:70:8a:
c3:ee:2c:4c:f9:57:dd:c8:dd:20:60:55:99:88:04:
c0:7e:cd:ea:8b:5f:75:21:fe:a0:7a:77:91:48:11:
7f:e2:9e:0c:6b:3d:b4:bd:84:39:3a:a7:ad:f3:ab:
56:59:d2:15:4a:2e:32:f9:bc:18:f2:d3:e5:19:a7:
24:f2:11:2f:d9:8c:44:21:26:41:7b:e8:19:17:5c:
6a:7e:a3:a3:e2:43:bf:bb:3d:2e:4e:61:a6:7a:73:
b3:b8:83:90:5b:26:d0:38:38:17:e6:77:28:a1:72:
32:73:d7:b2:ef:3f:86:38:fe:82:20:de:8e:5c:cc:
8b:cc:fc:de:bd:7d:5c:6a:5b:0d:0a:21:34:b6:00:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:11:7F:BA:BE:6D:3F:7A:75:C8:7E:36:15:83:65:1A:12:1E:F3
X509v3 Authority Key Identifier:
keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/1yYRf7q-bT96dch-NhWDZRoSHvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.16.0/24
Signature Algorithm: sha256WithRSAEncryption
60:82:6b:9b:94:c3:02:7c:52:bb:16:dd:be:34:8f:80:26:00:
d7:73:be:99:ce:ce:39:3c:91:29:71:a2:a4:d2:49:2b:55:03:
08:13:d1:b6:ab:05:34:1a:64:19:39:76:5e:f5:8b:6c:8d:06:
79:64:57:ad:9d:c7:e0:f0:4c:64:c8:ff:69:f0:4f:ae:cf:81:
43:46:2e:b6:54:9e:ea:32:5c:ce:89:5f:1b:3d:ae:05:59:53:
17:10:c2:1d:42:b8:1d:d4:2d:9c:82:64:b0:86:a6:c2:99:19:
9f:5c:d2:aa:90:0c:d8:98:3f:7c:c7:49:de:b7:37:1a:3f:52:
13:68:0b:87:35:fd:c0:fd:15:1f:bf:de:3b:75:2c:a6:b6:03:
d7:e6:f2:b5:2e:cf:37:08:7c:60:5e:75:6c:c8:5f:cf:b1:bf:
6d:c2:02:2e:8d:a5:7e:25:10:71:b9:6e:b2:0e:21:de:a5:ba:
fb:aa:44:9a:33:ed:89:8c:f1:da:fb:f5:3c:d5:b5:89:4b:b2:
02:b4:d9:ec:ab:ae:c0:a1:86:c5:38:08:c8:69:dd:1f:0c:07:
17:8f:f8:56:81:d5:99:b6:65:25:fc:a7:74:d1:cf:ba:b4:4b:
a5:a3:54:47:05:d0:c2:64:3e:ca:47:49:92:f0:f2:8d:12:a5:
31:61:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:09 2024 by rpki-client on console.sobornost.net