Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_TBKe5Sqm5BSlAx0xooNpdEUg8Q.roa
File: _TBKe5Sqm5BSlAx0xooNpdEUg8Q.roa (raw, json)
Hash identifier: /kaXizgTanQJfmcK5fZEj8kd2/6tfChC4FFSUEo65eY=
Subject key identifier: FD:30:4A:7B:94:AA:9B:90:52:94:0C:74:C6:8A:0D:A5:D1:14:83:C4
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018872E46A887160C415A3DD3ACF365DF957
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_TBKe5Sqm5BSlAx0xooNpdEUg8Q.roa
Signing time: Wed 31 May 2023 17:39:12 +0000
ROA not before: Wed 31 May 2023 17:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.30.101.0/24 maxlen: 24
193.30.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:e4:6a:88:71:60:c4:15:a3:dd:3a:cf:36:5d:f9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: May 31 17:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd304a7b94aa9b9052940c74c68a0da5d11483c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:74:b7:19:99:86:f1:19:e2:2a:5d:1c:47:
7a:bc:31:e4:3a:06:8b:9e:c2:93:7f:ad:66:17:a9:
a0:a7:7b:86:12:92:ed:da:96:33:b1:2c:ef:19:8f:
ce:eb:23:62:1b:00:33:5f:fe:dd:23:ec:19:5a:04:
e4:32:a0:1c:9c:e3:d7:4c:31:8b:aa:32:4e:2d:2c:
fa:09:53:34:e2:a5:db:f5:51:44:b4:80:c9:b4:30:
cf:e5:a4:86:ee:e0:4c:94:d1:dc:e6:d9:0a:84:ef:
ea:2d:9d:96:54:8d:fa:e4:8f:c1:92:60:d3:22:0b:
a1:01:2c:ce:a3:72:f5:71:5b:13:01:98:af:ae:13:
43:c9:bf:9f:5b:c2:a2:81:44:30:03:87:22:d4:af:
56:cc:8c:2a:5e:9f:10:4d:a5:62:14:e7:9f:2c:b3:
fa:94:4e:6b:8a:e3:fe:68:9c:0b:32:44:c5:d5:dc:
6c:94:c6:f0:d5:7e:a1:c2:bb:db:df:99:9f:60:d4:
47:33:c4:54:cb:89:62:34:0a:11:56:10:69:8d:65:
4f:e9:a1:37:33:34:ce:a0:cc:78:44:91:3a:3b:7a:
30:aa:70:23:f8:63:40:1a:8e:f1:fd:1f:b4:82:e0:
b1:78:a8:fc:b6:3f:50:dc:2b:bc:d0:10:41:30:a1:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:4A:7B:94:AA:9B:90:52:94:0C:74:C6:8A:0D:A5:D1:14:83:C4
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_TBKe5Sqm5BSlAx0xooNpdEUg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0-193.30.102.255
Signature Algorithm: sha256WithRSAEncryption
98:33:7a:a8:51:6b:ef:9b:9d:1f:c4:0a:f3:1c:b3:7c:a8:d0:
44:83:a9:88:10:29:45:6c:be:52:77:5c:49:b6:61:64:2e:c9:
01:3d:15:81:68:6a:69:51:7a:5b:c6:12:23:44:24:74:e1:9e:
1e:84:aa:a6:2f:f0:08:00:df:93:6e:ff:54:44:92:e2:1d:fe:
b0:ed:b5:ee:6c:92:f8:40:a1:55:57:0c:02:7b:ab:fe:69:cf:
ee:2a:70:a8:f5:ae:60:85:e1:14:75:f9:79:43:9a:34:e9:36:
75:45:ea:f5:19:5e:ac:3b:90:a0:90:56:d4:02:a7:e3:74:a6:
65:a3:b0:cf:9b:f4:a5:71:92:32:d9:b7:97:0d:07:81:a0:5c:
95:c9:c6:5a:ff:62:f3:10:65:be:39:76:73:93:42:ba:f6:e8:
c5:b0:88:4b:43:73:51:66:51:3b:ac:ed:0e:b3:9d:92:9c:6c:
59:dd:ff:e1:c6:7e:f9:a1:33:75:b3:01:ff:41:35:80:0c:b9:
c4:0c:80:93:9b:51:07:9b:3f:57:71:40:50:e5:af:76:2c:3d:
58:be:ba:2c:c6:e5:b0:19:83:b6:8e:65:00:86:b9:f5:d0:ca:
91:58:08:d2:31:a1:53:d5:04:6f:cf:bc:5b:1c:8e:5f:ab:59:
78:ed:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org