Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/c3j9R5YcQQq706RDV4H6CTXM9ZQ.roa
File: c3j9R5YcQQq706RDV4H6CTXM9ZQ.roa (raw, json)
Hash identifier: SayBb7FRG8iA+fQS+bTqpxbWpKi3h3+YvlZcptmlS4Y=
Subject key identifier: 73:78:FD:47:96:1C:41:0A:BB:D3:A4:43:57:81:FA:09:35:CC:F5:94
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 01856EA6B19732587412B3B9FCBC5776E370
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/c3j9R5YcQQq706RDV4H6CTXM9ZQ.roa
Signing time: Sun 01 Jan 2023 18:44:56 +0000
ROA not before: Sun 01 Jan 2023 18:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15925
IP address blocks: 193.41.124.0/23 maxlen: 23
195.110.26.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b1:97:32:58:74:12:b3:b9:fc:bc:57:76:e3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Jan 1 18:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7378fd47961c410abbd3a4435781fa0935ccf594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:84:d5:86:66:ed:4e:81:76:92:e6:d6:f2:
39:a9:91:c2:9a:13:66:de:54:3d:4d:5e:a9:0e:2d:
15:67:9a:40:0b:1d:61:eb:64:08:20:1a:2e:c5:0d:
19:7d:d6:ee:01:65:41:a8:da:64:3a:21:5b:11:90:
c4:95:fd:0d:d1:bf:a2:73:36:04:72:0c:cd:1b:4f:
7e:35:80:e1:2c:55:4d:6d:83:fd:13:f0:79:3c:05:
23:bc:b7:e0:9d:a4:87:ca:d2:74:f6:a9:cd:97:f1:
38:c8:f7:c6:43:b4:08:bc:2f:62:d5:69:c9:78:06:
cf:54:a3:6f:7f:30:47:a6:cd:e1:6f:c0:cc:d0:1c:
66:36:ce:23:61:c3:48:2f:13:6c:e8:18:32:d6:43:
2e:e2:60:55:60:13:18:a6:d4:05:90:88:ae:b8:7f:
19:87:23:71:a6:3b:8b:a2:43:6a:38:cc:a9:de:5f:
2a:1b:41:7a:71:b2:97:b1:d7:62:f7:22:18:58:aa:
3d:28:b7:a5:50:6f:e8:f1:fc:68:f2:02:b9:6c:db:
18:3a:4c:f0:94:da:80:3d:c9:49:b4:54:de:14:4e:
8a:6e:76:78:86:e6:ec:62:65:0f:9f:96:41:e0:56:
e4:97:96:e2:18:c4:53:3a:af:91:96:cc:13:f0:90:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:FD:47:96:1C:41:0A:BB:D3:A4:43:57:81:FA:09:35:CC:F5:94
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/c3j9R5YcQQq706RDV4H6CTXM9ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.124.0/23
195.110.26.0/23
Signature Algorithm: sha256WithRSAEncryption
69:82:dd:6f:16:13:08:84:82:57:9a:46:b1:26:fe:22:54:a9:
70:2e:2e:9f:42:ca:80:cb:c4:3d:e6:84:12:5f:d4:82:c2:d4:
77:4e:8d:45:8d:11:08:fb:32:13:63:1a:b2:d5:b5:6d:9c:74:
68:fd:74:e9:5e:ad:a5:31:b3:c9:30:67:4a:b3:b7:5d:cd:21:
48:fb:96:6a:36:6f:d3:dd:82:89:81:8a:78:f8:88:1a:ee:5b:
21:19:51:ef:a1:e6:d7:9f:02:43:64:18:37:6f:a7:be:e6:fe:
ca:2e:f0:99:6f:2b:ca:b8:5e:b4:49:15:b4:6d:1a:77:87:08:
64:ca:c5:78:90:3c:12:ae:05:48:ee:1a:b4:fd:db:a8:f9:56:
ba:98:2d:19:07:4a:d1:7f:77:c0:aa:d3:1d:21:33:c9:99:08:
e4:92:e8:01:05:05:d4:8c:5c:da:e1:dd:59:52:f3:42:e8:da:
5f:36:5d:9c:d8:7c:94:51:08:ba:6f:07:eb:61:ad:73:84:0e:
dc:4e:04:82:aa:14:95:cd:cc:50:c6:17:21:22:04:ca:45:90:
40:a7:d2:30:0d:37:e2:cb:97:5e:91:3b:6b:35:84:86:3b:a0:
c1:7e:b0:3f:c4:10:70:d0:c8:47:00:fe:e7:6f:c0:c3:3b:ea:
4b:d2:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:30 2024 by rpki-client on console-fra.rpki-client.org