Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/1-FRZpn-6r-ZgHo5T1vR6J3lSqxE.roa
File: 1-FRZpn-6r-ZgHo5T1vR6J3lSqxE.roa (raw, json)
Hash identifier: AyMfKj84tVQo6Cgn1b4eOjuxupVXEM58j/OtRTj9CKI=
Subject key identifier: F8:54:59:A6:7F:BA:AF:E6:60:1E:8E:53:D6:F4:7A:27:79:52:AB:11
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018570DE4BBCEAE8C917C69EBC867F9C6AB8
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/1-FRZpn-6r-ZgHo5T1vR6J3lSqxE.roa
Signing time: Mon 02 Jan 2023 05:04:54 +0000
ROA not before: Mon 02 Jan 2023 05:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.30.101.0/24 maxlen: 24
193.30.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4b:bc:ea:e8:c9:17:c6:9e:bc:86:7f:9c:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 2 05:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85459a67fbaafe6601e8e53d6f47a277952ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:ba:10:e6:cc:3d:e0:39:6b:24:1c:55:20:
c1:f9:86:08:c1:34:bc:00:85:6c:8d:7f:05:53:8a:
eb:c7:b9:06:61:75:1a:72:87:71:42:bd:aa:97:c3:
64:9e:a3:17:ba:cd:be:38:30:a2:7c:da:2d:ec:0d:
b0:32:6a:c3:eb:70:6d:97:39:d9:1d:01:55:f3:0e:
49:87:32:d2:26:5b:c1:4f:1e:40:75:36:16:a5:0e:
55:95:b8:d7:67:1b:15:d2:7c:81:0e:2d:da:00:31:
6f:29:57:1b:d3:a2:8e:41:e5:7b:46:18:0b:c5:55:
73:6d:48:99:28:20:58:52:b3:20:37:53:2b:19:57:
e5:ef:31:29:ef:c3:2f:d3:1d:10:ab:37:4f:e4:30:
c6:b6:b9:5c:c8:c4:e7:d9:28:ae:28:97:62:0c:15:
f7:1d:dd:7e:89:5b:72:2b:fc:9d:62:29:14:de:8f:
b9:1a:58:3f:d9:b7:8d:eb:f0:38:30:23:38:cb:82:
8b:f6:bf:05:b7:17:15:b7:76:87:3f:7b:ec:b6:ad:
d7:ce:83:40:7f:9f:ef:fe:71:71:36:31:44:f2:11:
52:a9:6e:c4:37:a7:cd:75:58:e2:d5:c0:fd:d7:38:
0b:05:a6:51:a6:03:1b:60:ff:e1:56:3a:77:44:6a:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:59:A6:7F:BA:AF:E6:60:1E:8E:53:D6:F4:7A:27:79:52:AB:11
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/1-FRZpn-6r-ZgHo5T1vR6J3lSqxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0-193.30.102.255
Signature Algorithm: sha256WithRSAEncryption
8b:cb:37:fc:5d:98:38:67:22:ac:cc:39:00:1c:4e:2e:c0:68:
f2:2b:d3:ac:e1:dc:66:00:e6:b3:8e:f0:f1:53:d2:34:1e:aa:
53:1a:25:c3:07:d4:16:2f:a6:16:d3:3e:15:f5:e5:8a:e2:48:
4f:89:d7:68:92:90:da:70:61:ee:a3:06:e5:f8:19:16:97:d5:
67:d2:c9:3a:5f:3f:e3:8e:ce:80:10:e0:60:93:5f:a8:af:35:
33:7a:60:2b:9b:b2:76:42:fe:aa:cb:b8:79:c8:ce:ab:58:5b:
40:69:f9:ba:06:e2:09:c8:e0:46:f9:5f:dc:07:c1:16:98:da:
23:da:ee:fa:4b:c7:47:29:38:06:a0:6a:73:ed:51:7e:c5:3c:
89:6f:5c:2c:1a:40:bb:47:df:05:56:39:c4:a0:48:7d:2a:43:
2b:0f:fe:e5:fe:04:4f:7c:0f:4c:31:ee:1a:91:35:83:ea:12:
d9:3e:9d:f4:43:ef:c1:8f:b5:e4:a6:13:1c:68:26:38:70:2a:
dd:11:94:6b:d3:1c:a2:7c:0d:9b:a0:fc:04:23:a7:95:d1:3a:
90:f2:1a:76:b5:81:e9:f9:3c:23:14:93:f7:d8:71:9c:bc:0a:
d0:d0:18:c1:68:69:4b:bd:34:9d:82:1b:90:6c:b4:17:d0:55:
e5:72:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-ams.rpki-client.org