Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/SbgvC3N85AnuKJ8_eAziOKDzVUI.roa
File: SbgvC3N85AnuKJ8_eAziOKDzVUI.roa (raw, json)
Hash identifier: paPY7g0oejhd+pZWHFKg8ZM4o6uuptZDQP6ENglxcWc=
Subject key identifier: 49:B8:2F:0B:73:7C:E4:09:EE:28:9F:3F:78:0C:E2:38:A0:F3:55:42
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 0185738FB79C986BD19076A6D0016488B3BA
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/SbgvC3N85AnuKJ8_eAziOKDzVUI.roa
Signing time: Mon 02 Jan 2023 17:37:56 +0000
ROA not before: Mon 02 Jan 2023 17:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.223.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:b7:9c:98:6b:d1:90:76:a6:d0:01:64:88:b3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Jan 2 17:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b82f0b737ce409ee289f3f780ce238a0f35542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:f3:9e:74:f1:e2:03:0e:84:60:e0:90:e9:
dc:da:28:7a:8c:ae:f4:41:96:28:cb:fd:bf:de:e4:
f6:fe:b9:51:10:fe:7b:33:bd:85:1f:67:53:2e:0a:
7b:9c:c1:cd:40:f1:44:e9:fa:cc:69:0f:3b:7c:ce:
60:21:fd:05:42:1d:be:4a:d0:9b:a6:30:57:1e:87:
1e:0c:55:6e:ae:84:63:59:4e:37:d6:ce:c9:6a:b2:
b6:68:90:e1:04:58:1c:1f:e6:ec:5f:b4:60:28:91:
d5:ef:7c:a4:05:4f:c1:0a:15:fc:f9:4f:ca:80:b6:
4a:4a:15:a0:c5:00:41:9c:a0:c8:fb:8c:ef:07:a0:
33:03:72:d5:74:ca:63:64:33:f4:a9:fa:1d:37:06:
8f:32:7a:98:98:83:d4:50:98:fb:d3:5b:fb:dc:65:
70:fb:e4:a9:f6:e1:23:44:06:00:8f:a8:81:2e:1c:
25:64:af:f4:96:67:8d:30:2f:0f:e4:10:92:08:00:
d3:5c:08:31:97:45:7d:1c:b2:3f:6c:25:81:a2:30:
83:07:2b:a1:6d:40:6a:e6:30:7d:db:af:f0:96:ae:
1a:d6:2e:df:e4:2d:02:43:af:2b:f6:63:00:4f:48:
cd:f6:4b:1d:8e:26:ef:c8:97:4e:80:b0:82:23:9b:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:2F:0B:73:7C:E4:09:EE:28:9F:3F:78:0C:E2:38:A0:F3:55:42
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/SbgvC3N85AnuKJ8_eAziOKDzVUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.102.0/24
Signature Algorithm: sha256WithRSAEncryption
32:25:6e:24:cd:1e:30:ef:d3:c9:e4:b1:a0:6e:86:53:13:2e:
8c:7a:f9:ed:68:56:6f:50:bc:5b:cc:9c:5a:d1:1b:13:8a:44:
88:81:d0:83:ce:65:da:a3:49:d9:8e:c8:41:f2:a1:f0:f5:e0:
ef:01:91:d8:29:0b:68:79:c0:61:81:00:d8:03:a9:27:fc:cb:
5f:30:62:53:32:d2:fe:ae:a7:bd:ef:6c:3b:1d:47:2e:c1:7e:
01:ef:eb:ec:11:8d:7f:98:69:6d:8d:bc:7d:3b:33:5b:8e:55:
cd:cb:7a:54:6a:b6:da:27:03:b2:11:b0:2a:65:5f:61:34:b0:
29:a2:f1:71:8b:6f:27:ff:9b:be:e4:6c:a2:75:73:34:f7:47:
8c:3b:54:fd:6a:ae:2d:ca:df:5c:85:a1:ab:b2:f3:c4:47:b4:
ac:ad:97:69:c7:8a:db:2e:50:28:21:6e:b5:bd:db:d1:34:45:
6b:b8:06:52:c0:ec:e4:93:e0:19:9a:b2:cb:8e:cf:16:28:39:
77:a5:95:fa:be:14:a4:39:64:8e:34:0e:9b:00:c1:8f:dc:92:
fc:db:11:26:3a:ba:61:be:77:8a:2a:5a:1b:c4:a7:3a:16:07:
16:02:dc:0f:e3:35:12:05:6d:78:7a:6c:df:31:8e:d3:e3:3d:
58:82:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org