Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/1-CuMUIdGy62EJoSCGasb2fo30ik.roa
File: 1-CuMUIdGy62EJoSCGasb2fo30ik.roa (raw, json)
Hash identifier: UEJazIqTcAfyp0ZvbNDPCxW0EQdOjSQOgT4QcXh8BXw=
Subject key identifier: F8:2B:8C:50:87:46:CB:AD:84:26:84:82:19:AB:1B:D9:FA:37:D2:29
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 01856F2FDBCA514FCA0EA0FDF2F9DE31FEF4
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/1-CuMUIdGy62EJoSCGasb2fo30ik.roa
Signing time: Sun 01 Jan 2023 21:14:45 +0000
ROA not before: Sun 01 Jan 2023 21:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197742
IP address blocks: 193.105.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:db:ca:51:4f:ca:0e:a0:fd:f2:f9:de:31:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Jan 1 21:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f82b8c508746cbad8426848219ab1bd9fa37d229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:99:88:17:f8:59:59:57:01:4d:f1:bc:36:
b3:d8:88:32:76:4d:cd:40:8f:01:fe:6d:01:d6:97:
f3:25:56:32:89:18:9e:7c:02:e1:44:f8:86:eb:5a:
34:15:65:dd:4f:b3:b9:d0:0f:d9:b4:ad:7e:3b:b0:
a0:a0:58:6b:6e:fc:8c:1c:a2:50:05:3b:58:0c:fb:
61:4c:d4:bf:47:44:3a:5a:44:8d:c0:02:03:e0:a5:
a8:e2:8b:1d:3c:ff:5f:7e:5f:f0:2e:f6:42:62:51:
33:b2:c5:58:fc:6f:51:83:6d:9a:a6:13:b0:88:63:
9d:95:ad:c3:b6:e6:ea:e0:e6:22:1d:19:98:c3:76:
2a:fb:48:e1:25:9d:f6:5a:87:b0:1f:92:8e:68:d5:
fe:e2:5e:a0:ae:4b:f3:11:6c:68:6f:68:a5:d5:24:
2d:1b:b0:73:e2:a3:2e:1c:a2:6d:99:46:21:0f:61:
42:7a:62:42:75:94:43:c4:42:8a:67:3a:d5:77:41:
66:89:34:09:24:9d:53:dc:d7:a3:30:cc:ff:05:7a:
97:43:14:3c:a7:8a:ca:5e:c1:cb:73:10:e3:e9:be:
7d:bc:1b:b0:6c:b8:f5:12:82:47:cd:fb:64:3c:ee:
4c:6b:9a:66:d7:29:7a:83:00:87:b0:c2:c5:71:c6:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:8C:50:87:46:CB:AD:84:26:84:82:19:AB:1B:D9:FA:37:D2:29
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/1-CuMUIdGy62EJoSCGasb2fo30ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:28:71:fc:74:2d:69:a1:6d:3c:6b:21:0f:84:28:de:5e:64:
ff:c0:15:0a:35:be:35:05:73:df:a0:0b:1a:e3:92:b2:b4:ec:
af:82:70:91:40:d1:4f:4d:ca:90:86:d2:77:cc:e3:2c:43:6f:
cc:e1:c6:36:75:f8:fc:83:19:9b:aa:72:32:5c:11:f6:ef:a3:
be:21:96:d7:15:68:7b:7e:1c:a8:59:6b:f9:a5:62:9a:b4:f7:
5f:8b:28:4a:e0:ba:2c:73:d7:76:2b:ef:99:21:08:7e:c0:74:
5a:59:0e:cc:cd:31:4e:4e:47:fe:28:06:da:30:f6:9b:56:11:
02:d3:69:4a:32:e8:f0:41:0c:52:f3:49:aa:92:fd:69:a4:92:
98:a5:e3:47:eb:5c:34:35:02:cd:9e:f4:ce:64:f7:d4:b2:94:
c1:4b:59:76:35:f8:b0:0f:d6:11:15:0a:48:52:7c:ff:e1:d0:
66:a0:86:a9:69:fc:20:92:20:0f:04:04:fa:72:b8:4e:68:3b:
59:c1:91:89:ef:c5:4e:8c:e6:a6:e8:54:c5:fe:6e:69:0a:6c:
9d:fe:b0:4b:d5:7e:36:a8:5b:b8:9b:8c:83:5a:ae:01:a6:ec:
f3:74:ea:16:f0:69:73:32:7e:f8:14:2a:5b:bd:6f:93:43:e1:
da:f1:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:09 2024 by rpki-client on console-fra.rpki-client.org