Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/P43uiMfyiVdUx37-KxHHO0iUDec.roa
File: P43uiMfyiVdUx37-KxHHO0iUDec.roa (raw, json)
Hash identifier: FEQ2p8xrVSdrkwHPu8nhhD7CfLAeU7w+c9rt8mDDLtc=
Subject key identifier: 3F:8D:EE:88:C7:F2:89:57:54:C7:7E:FE:2B:11:C7:3B:48:94:0D:E7
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01856C25CE783BD1B4E700C8CAA5A718E0B1
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/P43uiMfyiVdUx37-KxHHO0iUDec.roa
Signing time: Sun 01 Jan 2023 07:04:55 +0000
ROA not before: Sun 01 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51242
IP address blocks: 193.239.162.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:ce:78:3b:d1:b4:e7:00:c8:ca:a5:a7:18:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8dee88c7f2895754c77efe2b11c73b48940de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:bc:b3:d0:7d:6c:5c:40:93:60:a3:69:ad:
33:44:59:f9:eb:95:4a:89:82:32:8d:47:44:75:41:
60:54:78:95:8e:30:fa:6d:18:ca:04:b6:19:63:8f:
84:d5:83:04:bb:79:20:48:a4:76:55:78:07:12:08:
59:8c:af:b7:bb:14:4d:9f:7f:54:35:9c:39:bf:2f:
1b:2d:10:7a:b9:9a:05:ec:e1:6a:ce:ff:93:1a:6c:
55:b1:94:45:bd:b9:ef:a4:4d:bc:6a:46:9a:c1:9d:
77:06:3d:12:58:9d:b0:83:9e:b7:39:32:57:c2:3a:
91:f7:5a:2c:35:4b:3d:38:a1:86:73:dd:75:da:99:
7e:ed:b6:7b:fd:a8:99:fd:02:92:5a:26:e8:9c:16:
06:ed:ac:7c:fd:8a:a2:df:75:3f:7b:34:e1:54:53:
8e:ca:9f:24:2f:97:a3:3a:f1:76:50:75:b8:7d:dd:
95:0e:d4:1b:9f:e9:0d:ba:39:2a:92:17:ee:08:27:
4c:ad:b5:7b:6f:40:be:3e:46:1a:46:59:65:10:e1:
fe:0e:51:61:96:2b:30:41:4f:da:43:e3:be:5d:d8:
60:bd:5c:c4:f9:2b:b2:21:15:19:b7:81:72:b2:5b:
ad:d2:71:00:13:76:f6:d7:24:df:2d:5e:e3:12:5e:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:EE:88:C7:F2:89:57:54:C7:7E:FE:2B:11:C7:3B:48:94:0D:E7
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/P43uiMfyiVdUx37-KxHHO0iUDec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:cf:7f:99:bd:bd:e1:7f:b4:2b:bd:ce:4c:01:13:98:c1:9e:
5b:c1:4f:bf:1d:4b:e7:2d:64:70:a7:5c:5c:14:bc:bc:67:e1:
bd:26:df:d3:99:f1:2b:b9:eb:51:73:15:20:a7:0e:66:30:2f:
c4:d9:4a:35:5c:7c:1b:81:67:9b:8f:56:42:a1:6b:9b:a6:c4:
29:b3:68:4c:ed:a8:74:46:05:34:d7:e9:06:3f:1e:a0:7f:21:
8c:98:70:8f:bd:4b:d0:e2:55:84:70:6e:6c:f1:08:ac:4e:82:
63:b6:58:9e:5e:ea:42:5e:d4:e0:dc:b6:1c:d8:a7:de:fe:15:
a6:34:24:6e:28:c1:af:7f:3b:48:4f:ae:e5:75:36:5f:42:da:
52:5e:ff:37:22:0d:da:ee:ef:0a:6a:0f:9d:2b:18:77:dc:6b:
13:a6:7a:ca:46:c2:59:f6:f8:bb:33:fb:7e:8f:07:56:65:e3:
cf:21:cf:10:4f:03:86:4b:33:76:7f:7d:c3:0d:31:b5:e1:e3:
e3:73:3b:2c:fd:cd:74:49:1f:ff:48:6c:0f:5d:65:40:41:34:
f8:56:c9:ac:0a:b7:bc:3f:94:3f:3b:41:d3:6c:2b:70:6b:18:
a4:62:21:d0:4c:35:18:ad:e2:4b:3a:bb:c2:2a:27:ab:89:cb:
f8:e8:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:52 2024 by rpki-client on console-fra.rpki-client.org