Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVaa4MSHu7WMZBB0sghGyMQyN_s.roa
File: rVaa4MSHu7WMZBB0sghGyMQyN_s.roa (raw, json)
Hash identifier: oT8ItPbBITkVz50hb/6eHaDAaynpqYnA1tEkc6cZnQg=
Subject key identifier: AD:56:9A:E0:C4:87:BB:B5:8C:64:10:74:B2:08:46:C8:C4:32:37:FB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018573283A37DE1BA74209235516F40D62AE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVaa4MSHu7WMZBB0sghGyMQyN_s.roa
Signing time: Mon 02 Jan 2023 15:44:54 +0000
ROA not before: Mon 02 Jan 2023 15:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.189.82.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:3a:37:de:1b:a7:42:09:23:55:16:f4:0d:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad569ae0c487bbb58c641074b20846c8c43237fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:19:71:05:00:e4:0e:24:b0:94:e3:69:14:
2b:80:43:a5:8b:d8:4b:13:e8:b0:c1:f2:d7:c6:b6:
6d:67:ef:1b:03:a3:f2:ce:16:2e:fc:ba:39:26:13:
7d:e7:b0:ba:15:cc:3c:3a:fa:72:90:54:d7:51:04:
e1:56:54:7b:ce:3c:3d:c1:12:89:99:ce:38:b5:6c:
a6:7d:65:67:f8:ea:75:9e:e7:14:4a:36:d4:3e:c5:
60:59:6b:9b:22:e1:4f:14:64:9e:29:3c:50:ec:d9:
8b:04:d8:bc:d9:73:20:a5:d1:a9:9f:fe:4d:a8:17:
2a:d0:95:1c:af:d8:5f:3f:c1:61:9f:59:26:ab:e7:
19:bb:29:c8:52:85:57:e4:e9:60:aa:b4:3a:c5:fb:
4b:fd:3b:03:42:b2:c5:97:a0:42:cb:0e:86:b7:a2:
95:aa:73:94:01:7b:b2:54:01:5a:33:40:9e:d7:32:
6a:25:79:95:d4:6b:1e:4e:3d:ce:df:5f:38:da:56:
87:69:d4:0c:1f:c0:9d:38:d1:c7:c0:94:49:7a:7d:
b2:dd:7e:bd:69:39:60:16:50:62:38:2e:db:1c:05:
17:68:dd:b0:e6:c8:83:27:0c:f2:3a:5c:a4:d5:bd:
aa:14:9e:b0:46:04:84:97:0c:4e:e4:7b:66:d0:ce:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:9A:E0:C4:87:BB:B5:8C:64:10:74:B2:08:46:C8:C4:32:37:FB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rVaa4MSHu7WMZBB0sghGyMQyN_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:b5:5e:9a:85:90:f8:c5:fd:54:f4:06:2a:4f:4f:5d:f5:e8:
a4:c1:5d:a8:7a:64:1b:f8:5e:76:db:e2:26:8b:03:b6:4b:94:
f3:ff:e1:31:2f:81:cd:a0:4f:b1:e7:d2:3c:02:8d:57:56:a0:
fe:fc:69:37:a7:37:6a:1a:01:eb:d5:77:40:38:94:87:8f:0a:
09:f0:e9:0a:d8:d6:91:2f:63:eb:f4:c8:63:8e:41:50:10:d4:
9b:76:dd:3f:a2:66:ad:ff:54:6c:af:59:de:06:00:fe:49:5a:
4a:c6:4f:96:77:8f:fa:76:18:f4:92:fc:1b:f9:48:eb:75:a6:
77:86:0f:78:23:31:34:36:26:d9:33:bc:7c:b3:f5:56:90:3b:
50:7f:e2:86:7c:e7:bc:e5:4f:44:21:8e:49:0c:c6:0b:50:68:
f7:23:b9:e3:0c:eb:ec:21:7c:8d:ae:4e:c5:f0:15:cd:49:4b:
50:1f:e3:98:4f:d1:19:70:a3:c4:81:a8:a0:d8:b0:e8:6b:fb:
c7:0d:80:22:ff:7f:4e:aa:cf:13:6b:f4:26:08:9c:a3:91:60:
5d:56:77:42:b9:b4:e6:2b:07:58:5d:92:e7:50:8b:d2:a4:a5:
d3:59:ff:e3:57:9b:89:9f:7e:95:28:1f:01:e6:4d:4a:9e:f0:
73:08:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:30 2024 by rpki-client on console-fra.rpki-client.org