Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/D8sYnoupK_TN9HG4qFDS7r7Dkq0.roa
File: D8sYnoupK_TN9HG4qFDS7r7Dkq0.roa (raw, json)
Hash identifier: 1LEUjlhjsFvj8vyEvHZXa4AUiZEM/qx+MTB//7gtr7I=
Subject key identifier: 0F:CB:18:9E:8B:A9:2B:F4:CD:F4:71:B8:A8:50:D2:EE:BE:C3:92:AD
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 018570C2B99AF9D741914097CFE8C5EAD394
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/D8sYnoupK_TN9HG4qFDS7r7Dkq0.roa
Signing time: Mon 02 Jan 2023 04:34:47 +0000
ROA not before: Mon 02 Jan 2023 04:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9153
IP address blocks: 193.168.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b9:9a:f9:d7:41:91:40:97:cf:e8:c5:ea:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jan 2 04:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fcb189e8ba92bf4cdf471b8a850d2eebec392ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:29:4c:c7:92:88:ec:02:b8:dc:2e:2d:ba:
85:a7:0f:26:96:91:c4:7f:03:98:a1:ec:d5:f6:3c:
72:ba:6f:a2:cf:03:9c:5d:e0:ea:07:87:9b:ff:bf:
c1:36:62:b2:2f:ba:1e:c9:8a:d5:cf:c8:9e:ad:6d:
ae:63:98:6b:fa:92:e9:9b:89:b5:71:b0:e1:59:d2:
98:d7:94:cd:51:c2:7c:bc:38:9e:72:c5:ed:68:ec:
60:9f:23:0f:d8:3f:67:90:8d:6d:7c:f0:b4:27:1e:
7d:72:7e:fb:ad:23:ec:46:3c:63:9f:cb:42:9e:a4:
f2:bd:55:3d:88:c1:5b:e6:1f:ac:51:e5:1e:24:16:
73:0a:f7:52:5c:d4:1f:8a:c5:97:dc:cb:57:72:59:
71:7e:7c:a7:bc:97:cd:24:24:a0:d4:88:0f:15:45:
66:d2:10:91:26:01:e2:bf:94:18:b8:65:c0:92:f4:
61:ab:85:b9:e1:02:67:06:dd:9e:c8:5a:cd:31:26:
c0:01:74:e8:db:44:90:df:3c:69:0e:f6:87:b8:c6:
70:c8:93:68:31:5c:1b:45:4c:4e:44:a7:7d:0c:30:
a2:1a:94:e6:92:b9:63:55:0e:29:6e:6a:5d:95:ac:
61:24:28:63:85:13:bc:0e:af:1c:25:12:be:97:59:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:18:9E:8B:A9:2B:F4:CD:F4:71:B8:A8:50:D2:EE:BE:C3:92:AD
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/D8sYnoupK_TN9HG4qFDS7r7Dkq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.132.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bf:b9:70:2e:c0:e1:e4:68:5c:01:e9:61:dd:f1:f3:94:29:
bd:20:29:c0:51:15:e9:52:3a:45:bd:17:f1:b9:56:bb:b3:43:
95:43:66:4b:28:e9:67:31:10:f3:53:f8:a1:91:a3:0d:62:f1:
b0:ce:cb:6e:43:50:f0:32:f2:9d:56:fc:97:0d:4d:87:01:6a:
58:43:25:7c:d2:11:14:e9:cf:2f:ec:11:c4:70:f8:28:cd:d5:
6c:04:bb:c2:26:de:97:86:69:b7:89:17:5b:0a:44:fb:55:c6:
43:5a:00:7f:fa:14:e1:cc:4a:2e:5a:7a:52:fa:04:78:59:64:
fd:ea:89:6b:12:13:93:33:4f:c6:91:54:7d:78:b5:73:a2:cf:
cc:f2:66:73:78:b3:d0:81:e2:2b:70:81:2a:57:9a:54:2b:75:
90:ba:37:5f:46:cd:d0:47:cd:d1:19:17:99:e1:09:70:22:90:
0c:d5:df:19:8e:8e:95:39:2f:96:2b:62:cf:50:a0:e7:41:2d:
2a:94:39:c1:c3:8f:ab:7c:7c:85:a0:51:0b:34:c5:5e:70:b0:
61:8b:c1:cc:61:9e:64:93:31:08:58:2c:0e:7c:0c:15:a0:40:
15:87:81:59:f2:4a:e5:de:1f:0e:9c:af:8a:1b:38:f1:33:81:
23:d7:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:11 2024 by rpki-client on console-fra.rpki-client.org