Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/oFwpFdCRFgQ_7I6b_e7hGrNWcgc.roa
File: oFwpFdCRFgQ_7I6b_e7hGrNWcgc.roa (raw, json)
Hash identifier: cB7Bwtx9oE7xGRWm3OQN1nYf/EegeoRJ/HMI3EKNjro=
Subject key identifier: A0:5C:29:15:D0:91:16:04:3F:EC:8E:9B:FD:EE:E1:1A:B3:56:72:07
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 01856F26C076F4D2868B004EFC9093892AEB
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/oFwpFdCRFgQ_7I6b_e7hGrNWcgc.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 193.104.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c0:76:f4:d2:86:8b:00:4e:fc:90:93:89:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a05c2915d09116043fec8e9bfdeee11ab3567207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:cb:70:9a:dd:1b:a6:16:80:7d:6f:3f:d2:
88:fa:e3:cd:95:f9:e9:e8:59:fd:57:bf:ac:cf:3a:
52:9e:fe:3c:c1:d5:8a:3e:a9:81:84:34:4a:84:c8:
73:e0:b9:03:96:bd:8a:be:af:ec:7f:94:46:d6:86:
72:0d:e6:c2:ac:d0:7b:d3:8f:ad:50:25:97:71:9a:
93:f9:76:aa:ea:6c:c9:47:54:0e:f9:8b:54:9b:ec:
dd:fb:67:2e:11:d4:e7:81:dc:c1:4d:fd:07:6b:af:
57:cd:1f:da:b8:32:c8:92:c1:f9:c8:26:2a:e3:13:
77:6f:d0:13:93:c8:79:c4:a3:fa:e3:df:0d:fd:53:
2c:7a:18:44:f9:11:9f:a7:8d:3f:ca:6c:c9:e2:8c:
35:ab:0a:e2:1c:2e:b2:17:c8:43:b9:0d:0b:61:ab:
40:28:7f:22:fc:39:73:50:b3:1a:60:a9:79:89:01:
40:79:07:3c:77:e2:cd:59:f8:46:44:f8:c7:c4:02:
f4:91:a6:eb:ff:7c:e0:1e:e9:4c:f2:28:16:35:25:
6e:5a:60:07:45:6f:e0:f7:1b:b7:b6:c9:4e:cc:92:
b6:ba:f0:e2:8b:e1:3a:e5:a6:a2:ee:43:b5:3e:c0:
b8:e6:7c:8e:d2:f2:e7:2e:47:8e:c6:02:06:8b:8f:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5C:29:15:D0:91:16:04:3F:EC:8E:9B:FD:EE:E1:1A:B3:56:72:07
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/oFwpFdCRFgQ_7I6b_e7hGrNWcgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.1.0/24
Signature Algorithm: sha256WithRSAEncryption
76:40:45:d8:18:3e:ee:b5:89:72:2d:f6:3c:b2:89:e5:e4:74:
50:e4:16:fd:ef:c0:f8:4b:b6:bf:bd:86:a6:e5:a9:36:65:35:
71:ed:6f:67:18:1a:21:e1:dc:a6:ce:dd:f2:02:2a:85:ce:49:
ce:f0:ac:88:09:41:83:73:a6:a4:bd:1b:e6:5b:6e:46:94:95:
7a:d5:fa:33:56:0c:93:99:b3:de:50:2a:01:31:04:fe:8c:75:
76:9b:85:39:4a:cb:2c:8b:5a:d8:9e:8b:6d:4f:5b:9f:2c:8e:
3e:8b:cc:45:dd:76:9f:c9:1c:2d:72:48:d5:46:de:89:35:e5:
53:1e:b8:ca:d8:5e:95:9f:99:ad:c9:04:53:3e:5e:08:9d:31:
68:7d:d1:fe:8b:6b:8b:b7:38:5e:16:5d:12:b8:df:49:8d:d3:
e1:b2:c4:28:cb:57:6a:dd:6d:ee:3b:1a:ed:74:0d:af:e6:ed:
48:c4:50:33:c5:5b:77:d6:19:a1:5e:95:88:5d:05:56:ff:e4:
07:32:b2:67:3b:80:56:68:c8:0a:89:2a:7f:07:a8:b4:69:15:
81:31:7a:92:6d:7a:1e:17:11:2d:6e:b5:83:a1:c1:ff:66:53:
a1:81:02:f7:1b:82:27:12:48:59:75:40:87:30:10:8f:ea:31:
5c:c0:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:22 2024 by rpki-client on console-fra.rpki-client.org