Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/SpWzArBojrvCL-ZBMoVIrez7K9k.roa
File: SpWzArBojrvCL-ZBMoVIrez7K9k.roa (raw, json)
Hash identifier: ZupXuWdKTSWQcolEqapY4uw335OjD12wIu1Tco79qKo=
Subject key identifier: 4A:95:B3:02:B0:68:8E:BB:C2:2F:E6:41:32:85:48:AD:EC:FB:2B:D9
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0185711E3D186B0A6E4ECF7B9AFC5C667C81
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/SpWzArBojrvCL-ZBMoVIrez7K9k.roa
Signing time: Mon 02 Jan 2023 06:14:45 +0000
ROA not before: Mon 02 Jan 2023 06:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 193.28.240.0/24 maxlen: 24
193.28.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:3d:18:6b:0a:6e:4e:cf:7b:9a:fc:5c:66:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jan 2 06:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a95b302b0688ebbc22fe641328548adecfb2bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:5c:32:c6:8f:d6:cb:fa:43:3b:ee:97:88:
ad:12:10:81:ff:c4:77:7d:90:9e:a3:30:0b:74:bd:
df:9f:48:45:8e:93:3d:85:e3:db:40:d2:c5:3f:96:
6b:b2:07:83:06:15:44:1b:3a:da:99:ab:b8:c1:55:
2a:6f:25:18:46:cb:81:1f:08:67:e2:b9:6c:10:fc:
f1:22:e5:db:e1:f7:b9:25:1e:9a:b3:68:ad:7e:e6:
5c:9b:80:5b:40:e1:49:28:10:0e:30:c7:ee:ae:dd:
a7:d2:96:2a:6e:03:7a:0c:be:aa:a5:5d:b6:2b:a4:
2a:68:ea:68:4d:6b:6c:15:d7:e5:05:f0:b9:0d:03:
d2:5e:8e:7a:41:91:14:89:b6:b6:01:f3:b9:f3:ba:
cc:ae:38:d8:7f:33:3f:4f:6b:5b:d6:fa:35:1e:26:
bc:08:f4:ce:9e:cc:3a:3b:c7:21:af:ee:e9:a5:92:
8d:5f:43:b0:6b:4b:b7:da:59:ea:d4:d6:9c:85:64:
47:82:83:15:9f:11:dd:93:12:ce:4b:ef:2f:52:42:
37:4f:0d:f0:80:0d:6a:e3:8e:f5:60:05:bc:e6:da:
cf:a5:a3:53:84:01:94:38:a8:06:e6:e2:c5:e2:02:
26:a6:f1:3e:cf:21:09:1d:5d:1d:dc:18:ef:b8:fb:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:B3:02:B0:68:8E:BB:C2:2F:E6:41:32:85:48:AD:EC:FB:2B:D9
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/SpWzArBojrvCL-ZBMoVIrez7K9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.240.0/23
Signature Algorithm: sha256WithRSAEncryption
23:82:c9:26:b3:00:97:61:d9:6e:e2:85:4b:ba:3a:57:04:2e:
62:96:a8:00:2a:1e:15:2b:f9:32:3f:2e:99:1c:ae:f3:e0:b7:
00:34:3a:a7:2b:01:4d:8c:43:49:69:d5:50:1e:90:2d:17:32:
53:da:44:1f:bb:1f:2f:20:0e:78:6c:d2:a0:c9:58:d2:26:00:
8f:22:b5:c7:c4:40:69:e6:a8:67:94:33:15:dc:ed:3d:1c:45:
e7:80:81:4e:b5:1b:c6:cf:77:0c:d0:c8:f6:d9:fe:ec:82:8f:
89:a3:39:3f:21:0e:a8:c0:31:ec:27:8b:2b:02:16:d4:ca:22:
a6:30:7a:a2:97:d6:b5:f4:9a:aa:31:2c:ac:64:b0:80:8c:6c:
2b:5c:33:3f:58:a3:29:6d:dc:01:c7:cd:19:e0:52:c0:fb:41:
cb:77:6d:58:5e:6d:28:64:52:04:40:b8:ea:c5:b0:fd:9a:35:
af:d9:a7:d4:d3:df:a8:e3:db:4b:4a:76:ff:09:28:92:4e:d6:
0b:90:3b:71:5b:ea:ff:97:7f:8d:8c:c1:da:be:47:51:fd:f1:
74:37:52:02:8b:87:76:a0:06:97:d3:d6:a7:98:bf:b6:6e:54:
f2:26:24:c6:e6:a1:2f:f1:49:54:83:41:15:2f:f5:61:de:e9:
55:fc:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:30 2024 by rpki-client on console-fra.rpki-client.org