Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mUyadh36PFTIulmY6_JMwfGrEmI.roa
File: mUyadh36PFTIulmY6_JMwfGrEmI.roa (raw, json)
Hash identifier: ARxhcTOp3RX8EkAnMFhHOG54xAGAzSFrrCWhL2sZmQw=
Subject key identifier: 99:4C:9A:76:1D:FA:3C:54:C8:BA:59:98:EB:F2:4C:C1:F1:AB:12:62
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018570B9867A339EA3CC16003235D794E0F3
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mUyadh36PFTIulmY6_JMwfGrEmI.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1267
IP address blocks: 194.20.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:86:7a:33:9e:a3:cc:16:00:32:35:d7:94:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=994c9a761dfa3c54c8ba5998ebf24cc1f1ab1262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:18:b5:2b:2f:1d:08:7e:05:fa:c3:95:12:
9c:a4:d8:e1:f5:1e:b9:19:39:d4:69:6e:3f:bb:54:
4b:76:2f:59:ba:0c:2f:50:c7:e9:b9:e7:06:d0:e7:
1d:c7:7c:b7:e6:cb:00:5a:1a:4e:59:a0:d7:7e:c9:
5b:f2:a2:e1:40:cf:22:04:98:98:40:ec:aa:e7:f7:
61:fc:2f:a4:15:ec:88:64:84:2d:56:0d:68:be:12:
3c:95:84:15:9d:0f:2d:12:80:49:b0:d3:fe:0b:e4:
11:0a:3c:d9:d4:bd:c1:d9:f8:b5:9c:51:bb:37:a9:
da:34:84:db:d7:d8:ae:eb:7b:b7:a1:15:83:46:93:
85:59:16:31:95:48:ba:eb:23:b7:29:1e:14:b5:3a:
31:38:b5:5c:60:57:12:17:8b:4d:02:9f:50:f7:22:
2f:ac:06:15:a3:35:94:46:7c:5c:d7:44:5d:8a:23:
e7:bf:b6:f0:f4:a2:e0:68:74:e0:cd:90:6e:26:40:
4c:7d:ed:68:b1:3b:ec:fe:4d:b9:2d:69:99:fe:63:
40:15:a7:0c:bc:d7:57:d6:d6:9a:71:dd:9e:9b:1d:
10:d5:e0:3a:1a:84:e8:c1:53:cb:43:32:5b:5a:c2:
bc:0d:2a:6d:c2:d3:e5:95:2d:b0:8c:50:8d:e5:01:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:9A:76:1D:FA:3C:54:C8:BA:59:98:EB:F2:4C:C1:F1:AB:12:62
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mUyadh36PFTIulmY6_JMwfGrEmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:25:c2:63:65:90:23:03:09:69:3a:31:84:8f:76:1a:9b:
50:44:f6:fa:67:de:cf:fc:ef:1c:44:59:38:2c:34:31:97:47:
4d:bd:80:dc:73:d4:ae:b9:1a:f1:8a:ec:3f:01:50:bd:e5:fd:
7c:d3:93:bf:ea:d7:03:38:1c:d8:2b:c0:e3:a3:14:81:a0:21:
d5:52:97:29:5b:82:2f:6f:f6:bc:5e:18:82:9b:91:4c:8b:1f:
af:4d:62:e0:f1:56:fc:64:1b:7b:ba:38:96:a3:97:f3:95:9c:
02:66:0d:f3:85:a0:36:03:0b:4e:43:1e:b6:f1:52:2e:d3:04:
70:7d:c6:07:fa:85:c7:36:aa:a2:93:61:a3:07:b2:d7:a4:5f:
8f:2f:66:2f:ba:6a:b3:72:c6:fa:dc:f1:56:28:35:7a:c5:bc:
a3:6f:a4:47:08:53:30:98:2d:e2:2f:b3:26:ac:a8:57:c6:af:
03:23:92:f1:21:06:f8:b5:9a:f9:b7:86:9d:03:ac:1e:7e:ca:
63:24:88:d3:65:cd:3b:97:f2:8d:49:73:5b:84:32:bc:86:6a:
b9:60:11:ac:46:d5:8e:19:53:1b:d8:4f:0a:ba:4e:9b:3b:6c:
d9:eb:a6:b5:0b:04:a5:96:c5:b1:a5:2f:58:2e:8a:fd:ff:78:
24:f5:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net