Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kHYSppN1CeTZEbWSJUolJX3Vc18.roa
File: kHYSppN1CeTZEbWSJUolJX3Vc18.roa (raw, json)
Hash identifier: PhBSm5FmolwxhvXlL+7gauDvf80DHjJ+GqILua0QLCw=
Subject key identifier: 90:76:12:A6:93:75:09:E4:D9:11:B5:92:25:4A:25:25:7D:D5:73:5F
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 01856E2FA33E0CD0EC8727F8267662DE8B0A
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kHYSppN1CeTZEbWSJUolJX3Vc18.roa
Signing time: Sun 01 Jan 2023 16:34:53 +0000
ROA not before: Sun 01 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15946
IP address blocks: 193.41.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a3:3e:0c:d0:ec:87:27:f8:26:76:62:de:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Jan 1 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=907612a6937509e4d911b592254a25257dd5735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:ba:76:6c:06:18:17:00:9c:bf:22:6b:09:
66:c2:e5:62:d0:a7:27:f1:db:59:4e:a9:54:50:3d:
0e:21:60:83:2e:b8:75:9f:00:47:13:3a:bc:d1:51:
95:0c:51:93:f8:ea:0d:0a:4e:b4:b6:39:1e:e6:b7:
d3:6c:f2:2d:e5:08:05:aa:ec:8b:e5:8b:25:96:4b:
f1:26:14:7b:f4:c4:16:2d:ec:9d:69:be:5d:96:20:
9c:20:77:9e:58:40:2c:4c:2f:94:00:46:8d:9b:11:
d0:1f:6a:be:a1:4f:09:a5:c7:9c:e2:a5:d3:be:f9:
89:d5:67:80:2b:ad:fc:2d:73:76:c8:c3:80:e9:99:
aa:34:05:c0:45:86:3a:92:16:bc:6d:06:f1:88:78:
8d:82:13:30:70:d2:b2:70:c7:e5:5a:13:3d:d4:64:
9d:33:18:c1:80:a0:34:bb:5a:32:98:24:3f:9e:4c:
86:6f:66:fa:fa:58:07:ed:18:7c:8c:c9:d4:36:1c:
da:28:26:22:44:a6:4b:7d:81:d4:ad:ac:a6:6f:81:
63:28:b4:8d:46:f2:bd:3b:00:27:f1:99:ee:ce:98:
77:f1:72:df:b0:86:6c:a3:04:6f:b8:ee:69:5e:95:
2b:b0:b5:10:49:f0:ee:2f:17:22:c2:f9:f8:60:1a:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:12:A6:93:75:09:E4:D9:11:B5:92:25:4A:25:25:7D:D5:73:5F
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kHYSppN1CeTZEbWSJUolJX3Vc18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:30:b2:fc:c3:56:ee:ce:f2:63:b3:44:27:7a:0c:25:9e:
4d:d1:37:06:87:e5:93:9a:c4:b5:70:a8:15:24:7e:2e:c5:ea:
37:57:13:02:c9:fc:91:a2:96:8a:d3:10:d0:35:40:9d:67:cd:
68:4d:b8:cc:8e:a8:c1:0f:8f:82:a7:f9:7f:33:d6:23:93:dc:
3f:3e:da:ed:1d:4c:a7:bb:37:23:36:74:05:c7:26:0b:51:4f:
4d:e4:67:8c:92:d8:38:b4:be:9b:1d:cb:fa:82:51:c3:e9:8c:
d1:8a:26:45:0d:8e:a7:43:ec:85:bf:c7:8e:c5:16:7c:77:c9:
50:16:c7:97:7b:0d:24:61:a1:1b:8e:46:14:7f:bc:ad:75:f7:
d6:93:ee:bd:ff:85:07:10:2d:99:61:3f:99:61:ae:e3:36:8c:
c4:44:0d:5e:93:79:1c:38:50:c2:d5:93:d7:a7:ed:79:bc:89:
fa:f2:fc:13:da:52:8e:97:2b:f2:77:e0:4c:5b:70:0d:06:34:
02:bc:4a:9b:fa:61:b8:16:78:8d:20:1d:56:26:5b:13:71:f9:
4b:a5:33:57:2b:ea:0e:ef:2f:1a:ff:d6:eb:0a:b4:eb:44:c2:
25:b9:dc:4c:84:c0:8e:9e:e5:00:5e:84:cd:3b:e7:39:0b:06:
82:5c:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:42 2024 by rpki-client on console-fra.rpki-client.org