Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7pV8gB_tmdBVx0TjiKN9eOjf46k.roa
File: 7pV8gB_tmdBVx0TjiKN9eOjf46k.roa (raw, json)
Hash identifier: a5oEzK8epgoJGP7M96gjnD4DgupnqnRMU7ua8J93iOE=
Subject key identifier: EE:95:7C:80:1F:ED:99:D0:55:C7:44:E3:88:A3:7D:78:E8:DF:E3:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B51EF06E6689BEFB8993ABC62FFBD216
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7pV8gB_tmdBVx0TjiKN9eOjf46k.roa
Signing time: Tue 13 Jun 2023 14:18:03 +0000
ROA not before: Tue 13 Jun 2023 14:18:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57097
IP address blocks: 193.42.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:1e:f0:6e:66:89:be:fb:89:93:ab:c6:2f:fb:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 14:18:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee957c801fed99d055c744e388a37d78e8dfe3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:77:06:95:12:43:d4:09:3a:7b:ab:4c:6e:5a:
8a:1e:cc:85:58:6d:da:44:9a:aa:fe:d9:b4:36:2e:
66:cf:fa:3b:a0:db:9a:aa:02:8e:f3:75:70:90:58:
28:be:e4:31:fc:37:25:9d:3e:b0:c1:e9:0d:42:b9:
ba:e0:b3:0e:f5:a0:89:73:20:b4:8f:60:e1:de:30:
e3:41:e2:9e:a2:4e:8e:83:e2:1f:f2:23:0a:cf:b4:
8f:d2:5f:cc:4b:6b:f8:8c:56:62:49:00:82:04:52:
53:b7:f6:51:80:62:b3:8e:30:6d:76:0c:b0:f2:95:
51:b0:80:fd:09:cd:b1:11:86:84:08:53:04:cb:65:
9b:24:0d:45:21:28:b3:62:29:40:23:9f:ff:f2:e6:
b3:70:26:15:58:c2:75:93:80:55:16:5a:a2:a0:d6:
8a:72:5b:61:05:7f:a0:d2:72:13:eb:32:76:b9:29:
d5:9e:6b:93:24:56:a9:41:d3:b1:aa:04:42:ae:e3:
8e:ad:97:7d:b9:8f:a5:05:97:ac:70:8a:a0:83:57:
a0:91:67:5a:4b:ba:66:af:43:8c:e8:37:48:2a:f5:
2e:d2:17:5a:77:65:c1:e4:99:89:03:17:a9:da:88:
7b:c4:55:69:0a:b8:9c:54:5d:16:79:e7:57:cc:7f:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:7C:80:1F:ED:99:D0:55:C7:44:E3:88:A3:7D:78:E8:DF:E3:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7pV8gB_tmdBVx0TjiKN9eOjf46k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:76:b3:57:57:1d:32:cd:68:e3:84:51:9f:5e:f5:ba:55:83:
99:14:9a:15:e4:2f:e1:a4:f9:01:e0:bc:5b:40:a2:42:74:2b:
fa:69:98:09:61:bd:86:c3:1e:ce:b4:c0:ca:4b:9e:47:f8:a1:
dc:79:56:1f:a3:34:80:d3:d0:8b:05:8e:f1:31:96:b9:be:f0:
de:4b:6d:66:97:24:4a:ad:98:f9:eb:f3:d7:a3:42:50:7b:5a:
9f:72:4a:04:00:bf:7c:88:6d:3a:7b:59:d7:f4:b6:94:33:f8:
44:5e:c4:bb:16:49:99:0f:f3:98:18:e6:2a:fb:dd:bb:e3:f8:
4a:8e:bc:12:1b:84:a1:01:53:4c:02:c7:a9:9a:dc:dd:19:88:
82:e9:81:9c:3e:65:4a:65:32:2a:9f:9e:b6:53:50:a6:64:ee:
58:96:80:16:2b:1f:6c:c5:2c:0e:9c:34:21:eb:c5:75:a1:d9:
cf:c1:23:cd:bc:b5:ac:d8:cb:41:2b:af:9b:25:7e:cc:79:37:
31:2c:a3:19:85:24:e2:0b:3f:fa:b4:53:45:0e:cc:cf:3a:34:
2a:86:b2:04:f6:6c:ba:5b:61:45:e3:be:43:8e:92:e3:e9:64:
19:56:f1:d4:dd:56:7b:d0:4f:72:22:26:11:20:17:06:a4:22:
8c:50:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 09:34:32 2023 by rpki-client on console-ams.rpki-client.org