Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/DFrSOLxnvH2p84J6sJ7OnqWJBkY.roa
File: DFrSOLxnvH2p84J6sJ7OnqWJBkY.roa (raw, json)
Hash identifier: J7BKX3gM/prGEtYAxUxyc9H+0TFFLbKpL/ozBAiahbM=
Subject key identifier: 0C:5A:D2:38:BC:67:BC:7D:A9:F3:82:7A:B0:9E:CE:9E:A5:89:06:46
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018B5C1E10C2CA21422F25F3E0C2E5AECBA6
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/DFrSOLxnvH2p84J6sJ7OnqWJBkY.roa
Signing time: Mon 23 Oct 2023 10:39:16 +0000
ROA not before: Mon 23 Oct 2023 10:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 193.30.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:1e:10:c2:ca:21:42:2f:25:f3:e0:c2:e5:ae:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Oct 23 10:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c5ad238bc67bc7da9f3827ab09ece9ea5890646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:f8:f8:8e:cc:5c:2f:3b:64:19:a0:20:ca:
e4:96:fa:1c:92:5c:44:57:30:df:da:a4:77:a6:6f:
85:f5:5d:0a:29:34:27:a5:98:13:c0:92:a0:a7:01:
08:1c:30:66:f8:45:71:5c:cd:0b:88:fc:ea:19:6c:
05:3d:49:ec:bd:a6:33:d9:d4:52:0f:59:53:4c:46:
83:25:e3:6c:22:13:15:cd:f5:1f:a5:0c:46:0c:ab:
da:c3:94:d0:a0:9d:b1:4e:2a:c5:85:17:58:bc:2c:
29:6f:0c:39:2c:d2:27:e1:e7:78:a0:c0:23:f2:34:
45:63:14:48:50:4e:66:d4:ff:41:ad:01:71:a3:c2:
a8:93:a1:a7:95:f3:00:af:2f:71:9b:8d:5e:8d:ca:
27:51:f6:6c:ac:70:03:b8:b0:8b:ab:71:4c:f0:4e:
7a:dd:59:90:c4:85:28:89:81:4e:8b:07:46:2f:76:
0f:9b:3a:9a:6d:22:89:8b:3c:38:57:7c:ae:a6:0f:
c5:3c:22:df:6d:14:fa:11:a7:38:1d:e2:8a:4a:d6:
59:69:84:3f:2b:14:2e:c0:66:75:50:0f:48:68:77:
ce:50:c8:4a:82:ae:92:f7:7a:ac:21:95:92:fa:c9:
1e:ce:86:34:80:ff:a3:75:a2:17:dd:da:1b:e7:ee:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:D2:38:BC:67:BC:7D:A9:F3:82:7A:B0:9E:CE:9E:A5:89:06:46
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/DFrSOLxnvH2p84J6sJ7OnqWJBkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.102.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ff:90:f4:fd:3b:ce:1d:ac:af:d2:12:43:f7:2f:09:75:77:
d9:d9:42:55:e3:86:a3:3b:9b:c2:58:cc:30:71:a4:8a:ab:25:
c5:32:ce:00:74:8c:2d:a5:62:64:ca:f3:3a:8c:8f:c8:d2:a1:
fb:b3:2e:84:77:b7:97:ad:b3:59:cb:d5:85:5d:b5:8a:c5:dc:
c6:bc:40:af:78:20:03:04:8d:ee:82:7f:70:77:7b:2c:7a:42:
d2:14:4a:52:50:72:e5:24:21:b1:67:02:cd:64:1f:20:fe:52:
73:c0:11:f4:0e:0e:e2:e1:73:d7:50:03:43:3f:37:ec:62:8a:
07:54:39:85:3c:f1:3f:99:17:5d:bb:c5:75:db:b8:65:a4:bc:
8e:bc:e6:cb:4d:de:de:d8:5a:44:0b:28:8c:85:f5:ab:7e:9b:
9e:a0:4b:c5:9b:7c:f8:c8:df:a4:0f:4f:b0:33:37:d2:b9:0a:
1b:bb:e0:8d:b0:8e:38:42:5c:78:bd:3b:7d:5a:fd:d8:89:46:
39:2d:f5:12:d0:5d:98:a9:00:0f:f7:41:b0:c6:08:0f:60:66:
d2:f3:90:d6:ac:45:33:16:e6:b9:6e:54:2e:ec:06:7a:7f:1c:
92:0a:94:74:b5:9c:30:54:a7:2f:8a:2c:c4:45:af:dc:b4:24:
fa:80:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:02 2024 by rpki-client on console-fra.rpki-client.org