Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/jeG4znyTXEmVebPjr9PvM5MNgck.roa
File: jeG4znyTXEmVebPjr9PvM5MNgck.roa (raw, json)
Hash identifier: sUi+IzGpdHoTtYCZvNXY+WPtgmmdsZssAsWAl9zrT/E=
Subject key identifier: 8D:E1:B8:CE:7C:93:5C:49:95:79:B3:E3:AF:D3:EF:33:93:0D:81:C9
Certificate issuer: /CN=fba0a564634f42e82cf38388991c9e7e40052a20
Certificate serial: 0186A42230A48259F5FC6C3D3E9EB25564CC
Authority key identifier: FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/jeG4znyTXEmVebPjr9PvM5MNgck.roa
Signing time: Thu 02 Mar 2023 21:02:29 +0000
ROA not before: Thu 02 Mar 2023 21:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 193.3.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a4:22:30:a4:82:59:f5:fc:6c:3d:3e:9e:b2:55:64:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0a564634f42e82cf38388991c9e7e40052a20
Validity
Not Before: Mar 2 21:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de1b8ce7c935c499579b3e3afd3ef33930d81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:7b:9f:ff:49:52:79:dd:54:07:6f:85:cb:
e1:c2:e5:4c:2c:31:1f:8f:6d:75:ad:57:1b:01:cf:
59:fc:f0:de:b8:e7:30:6a:bf:19:91:15:24:07:83:
8b:25:8c:10:5f:51:cb:be:d3:b5:e7:bd:38:ee:4a:
58:39:7a:9b:54:5d:a2:cc:53:b8:40:ef:e0:d7:e0:
b3:36:80:70:33:e3:20:57:7f:b7:6d:6c:7d:73:37:
c3:72:89:a8:63:ed:59:3b:c9:de:a1:26:85:f1:db:
fc:24:4e:83:3d:a5:1e:b8:42:56:09:c4:2d:6a:a0:
bb:e7:2a:e7:3b:8b:6d:2f:a4:b6:c1:6f:3e:e1:e2:
d7:16:97:c9:dd:b5:3f:dc:9f:be:9b:cc:1f:6b:2c:
76:d2:ac:19:99:34:4f:75:e0:bd:f8:1d:d4:cb:70:
b8:47:c1:36:44:8c:71:e0:76:bb:09:17:1f:1f:0f:
e6:c2:60:67:64:ba:0d:0e:66:1d:23:5e:a3:1e:b9:
94:89:27:02:68:63:b8:5b:95:7c:e2:77:d3:38:d0:
81:23:cd:e9:f6:dd:90:84:f2:9e:59:60:3b:b8:da:
f6:81:67:88:43:52:c2:01:bf:24:e3:6b:99:de:0a:
5c:6a:16:88:e4:f6:67:7d:0d:98:3c:69:74:16:c0:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:B8:CE:7C:93:5C:49:95:79:B3:E3:AF:D3:EF:33:93:0D:81:C9
X509v3 Authority Key Identifier:
keyid:FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/jeG4znyTXEmVebPjr9PvM5MNgck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:81:7b:bc:95:a1:df:a5:b3:b7:f7:24:76:f7:8f:68:5c:c8:
b9:24:9c:53:ee:52:dd:fe:bc:7b:3b:5d:2d:cf:7c:5b:56:05:
15:2c:84:11:d6:ad:e8:ab:c8:5a:6b:01:2e:65:ea:d4:42:2d:
80:47:a6:11:27:bc:a1:e6:96:8a:1b:6d:7f:e8:2a:03:f3:9e:
90:c6:a5:80:63:d4:52:99:14:a9:71:79:ec:96:54:d9:0d:7b:
bd:f8:d6:57:8a:c7:e3:ec:2a:ae:27:c4:0a:be:2b:79:b5:a2:
aa:9a:cd:85:5e:15:02:a8:e9:58:27:02:0a:b0:85:e0:7b:b8:
d9:c8:ce:71:e8:dd:31:c2:db:83:cd:f5:16:e7:2b:a7:11:6d:
4e:54:43:e1:a8:1e:1e:79:b8:ef:c3:f0:72:7a:cb:d4:54:78:
48:d6:a0:71:75:fc:55:49:84:ca:86:7c:96:bb:d1:68:cc:6a:
99:22:02:e1:46:45:f8:6a:bd:9e:9f:f9:bb:c8:bd:52:66:5f:
3d:c1:37:e8:d9:22:84:c5:75:77:60:b8:17:7e:0a:b4:08:8f:
14:9a:45:65:c8:49:b7:53:ce:e1:56:f5:d4:da:5a:b5:4d:a5:
74:f3:bf:06:59:84:b8:92:c0:6b:0d:dc:67:2f:92:5e:9d:32:
19:b1:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:05 2023 by rpki-client on console-fra.rpki-client.org