Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sz4_xrbM8LYjPBIF9I68dw2ifjQ.roa
File: Sz4_xrbM8LYjPBIF9I68dw2ifjQ.roa (raw, json)
Hash identifier: 1aklYhLAs3nZ3x9tbxtbUWa3P187QhRScxXtpbIi2rE=
Subject key identifier: 4B:3E:3F:C6:B6:CC:F0:B6:23:3C:12:05:F4:8E:BC:77:0D:A2:7E:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66EF3374B80AAA5FC6CE91E500E636
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sz4_xrbM8LYjPBIF9I68dw2ifjQ.roa
Signing time: Sun 01 Jan 2023 22:14:54 +0000
ROA not before: Sun 01 Jan 2023 22:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 193.124.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ef:33:74:b8:0a:aa:5f:c6:ce:91:e5:00:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b3e3fc6b6ccf0b6233c1205f48ebc770da27e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:ee:2f:ea:36:05:e7:6e:57:92:d2:0b:f6:
23:70:eb:b0:5a:5a:bd:2a:2d:07:3c:dd:37:77:b0:
8c:a0:99:b5:90:88:23:49:da:03:38:3e:7c:eb:9f:
dd:0c:e5:b9:8a:65:91:7e:4f:bb:a0:f0:5a:c6:32:
79:f4:d9:68:cb:89:88:9b:8c:73:79:b2:f1:8d:03:
23:6d:90:7d:97:ca:38:cc:70:55:41:d6:30:32:85:
9e:6a:e8:2d:b0:9c:cb:96:ad:09:43:8c:9f:c2:64:
14:1e:14:26:d1:4f:3e:72:91:3c:e4:03:e0:c1:28:
be:fc:a6:00:5a:b2:1f:01:cf:c8:a8:02:44:10:f2:
9b:2c:5c:88:58:bf:0f:3d:b2:20:35:13:0d:6d:4c:
c4:6a:c8:d0:7e:79:ac:77:70:82:91:8a:15:09:e4:
49:07:07:38:c2:95:63:3c:03:f0:ed:2c:4d:b3:18:
8b:42:c6:a3:52:7b:24:d4:1a:1d:36:89:6a:67:75:
33:16:77:e3:09:d1:ce:9a:5c:07:39:bd:5e:c2:b8:
31:ce:af:34:37:35:df:b0:8f:ab:73:d6:29:5b:52:
6d:b1:62:8c:ac:04:c9:ee:fd:cf:33:bc:43:5b:07:
ed:93:17:08:4d:72:90:e1:98:bf:df:02:e9:b4:63:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:3F:C6:B6:CC:F0:B6:23:3C:12:05:F4:8E:BC:77:0D:A2:7E:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sz4_xrbM8LYjPBIF9I68dw2ifjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0c:e5:f0:54:1c:3f:58:b5:e4:ee:cb:68:47:ca:09:4c:66:
47:84:2f:70:45:f5:d2:c5:99:26:0e:0a:f4:f2:85:79:f5:76:
63:03:b8:db:d6:a8:18:ea:9c:05:20:a0:23:e6:95:f3:12:4f:
42:5a:82:76:6a:a7:fc:03:94:8e:20:ad:5b:c3:4d:19:25:ca:
7a:54:c8:ba:e3:a6:2d:98:1a:51:cb:85:42:35:e7:08:3c:bc:
c5:bb:93:a6:50:d7:d7:8e:7f:9e:0b:1e:a2:dd:61:3d:8c:64:
58:6d:72:74:af:25:9f:05:e2:c8:50:f8:76:ea:86:3a:31:4f:
08:cd:44:c2:42:b1:3b:c2:62:bb:be:2d:6c:40:72:ca:21:b2:
3f:e2:40:1c:39:12:22:f5:aa:c2:e9:4d:27:5e:07:6e:6b:9d:
61:65:63:db:ef:a2:59:87:7c:58:ce:9a:58:38:b3:a0:d2:65:
a8:42:a2:69:8b:f6:7e:a7:a0:01:92:31:8b:44:9d:c5:7c:3c:
eb:5b:c8:1d:85:13:74:f5:a2:f6:6e:5d:06:5b:dc:67:9b:c5:
c0:00:84:4d:1d:df:21:e7:48:4b:73:c6:98:bc:2a:cf:cf:a6:
de:67:33:78:e6:3e:56:2f:d8:53:83:5d:3d:32:89:ff:97:51:
3e:90:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org