Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/hufQ9gWZqHuXZ2GDCNI8N8BjK7k.roa
File: hufQ9gWZqHuXZ2GDCNI8N8BjK7k.roa (raw, json)
Hash identifier: 9GXW5vi1c+MYEhRR2BbfbJo71/2pc2+/IQ5JZwLytYE=
Subject key identifier: 86:E7:D0:F6:05:99:A8:7B:97:67:61:83:08:D2:3C:37:C0:63:2B:B9
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B2A3EDB12C063ED27B331ACCF08AE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/hufQ9gWZqHuXZ2GDCNI8N8BjK7k.roa
Signing time: Sun 01 Jan 2023 18:14:51 +0000
ROA not before: Sun 01 Jan 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 193.38.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:2a:3e:db:12:c0:63:ed:27:b3:31:ac:cf:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e7d0f60599a87b9767618308d23c37c0632bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:b1:c1:f1:90:a2:a9:1f:7b:6e:51:72:27:
46:01:46:cb:be:10:3b:a9:ed:3f:d1:79:7b:59:13:
10:4f:db:a1:90:46:f1:5e:fb:30:b6:43:1d:37:f4:
47:83:67:6d:9d:86:0d:31:55:f3:79:b1:df:62:1f:
54:94:cb:8c:fc:1d:c1:b8:f9:7a:8b:19:7a:77:b7:
b7:0b:77:12:be:54:5c:6a:c4:1a:b0:7a:cc:d9:8c:
72:5d:74:7d:86:c7:ce:d5:3c:92:6d:1b:1f:b2:ca:
fd:9e:16:4b:a8:ac:65:5d:07:76:25:41:dc:f8:90:
6e:98:64:6e:52:6b:13:b8:9b:ba:d5:3b:bc:ba:12:
45:46:ad:af:e8:76:75:8f:07:55:82:08:97:17:c1:
97:c2:08:ed:df:57:f8:88:f3:1c:64:3d:eb:6d:ec:
7e:c4:c1:59:f7:43:6d:28:93:be:bb:bd:50:6f:fd:
dd:c3:c5:00:e4:68:9b:6a:fb:d2:c7:8a:84:7c:26:
b0:93:2d:81:69:3b:b9:df:86:d5:93:13:08:bd:03:
90:fe:e5:fb:17:8b:14:30:56:7b:13:df:28:33:05:
6c:12:c0:9d:3b:b6:74:fe:56:05:a7:b9:e3:3b:36:
a1:f6:93:79:fb:f5:4f:46:c4:2e:e9:21:f9:fd:a0:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:D0:F6:05:99:A8:7B:97:67:61:83:08:D2:3C:37:C0:63:2B:B9
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/hufQ9gWZqHuXZ2GDCNI8N8BjK7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4f:73:33:b6:dd:d5:ad:13:bc:07:74:b1:3a:9f:2c:38:f2:
9d:ae:dd:1f:e7:5c:72:d0:e4:31:72:36:ad:f0:04:6a:8b:a6:
5f:e5:fd:5f:0e:b2:1d:9e:5c:db:46:5b:cd:c4:81:4e:0f:7d:
1d:96:c9:f7:f4:3c:56:d1:18:4f:98:b9:e1:74:82:3a:73:d5:
36:53:cf:85:7d:9f:b4:a6:f3:7c:35:b6:1f:c6:77:ea:d9:6f:
41:65:01:51:a4:bd:73:52:79:2b:cc:31:8c:38:9b:10:21:67:
b3:ec:22:b7:1e:80:f5:10:6d:40:1c:b0:1f:1b:73:34:7a:13:
9f:0f:1f:a0:9e:0d:9a:9d:40:98:9d:5c:ac:d4:c3:5b:1b:79:
fa:d1:1e:cd:46:84:e7:4f:23:fe:90:e9:4d:4a:4f:4c:5f:36:
a8:0d:bf:bd:d4:a4:ad:2b:2a:8e:51:4c:e8:4e:3a:ff:0c:4c:
7c:8a:a0:2f:1a:85:55:df:2a:48:8d:a8:5d:91:c8:56:6e:36:
78:21:cb:6c:dd:55:d9:d7:04:92:f8:dc:6b:6d:d9:25:93:b2:
28:4e:4c:85:98:d3:77:29:5f:72:de:65:3b:88:bb:ee:7a:2c:
bc:b9:ac:85:44:52:2b:a3:a9:c1:06:22:79:8c:84:3c:71:eb:
7c:d4:50:82
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 20:31:13 2023 by rpki-client on console-fra.rpki-client.org