Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i3BMJLoqWdJdNELwqMzKvxByX6k.roa
File: i3BMJLoqWdJdNELwqMzKvxByX6k.roa (raw, json)
Hash identifier: Aw6Ksxi54Ynww4Cv20u5JRCWoHeRuVnQEMvt+5dr+Ww=
Subject key identifier: 8B:70:4C:24:BA:2A:59:D2:5D:34:42:F0:A8:CC:CA:BF:10:72:5F:A9
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0188D2741974AA6134E8BC2358506D0DB01F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i3BMJLoqWdJdNELwqMzKvxByX6k.roa
Signing time: Mon 19 Jun 2023 07:00:03 +0000
ROA not before: Mon 19 Jun 2023 07:00:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212396
IP address blocks: 193.228.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:74:19:74:aa:61:34:e8:bc:23:58:50:6d:0d:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jun 19 07:00:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b704c24ba2a59d25d3442f0a8cccabf10725fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:80:35:7a:03:a7:98:34:a4:50:7a:68:3a:
eb:a4:9b:62:05:ed:8a:7c:f4:30:16:54:69:f9:4b:
44:2b:a7:13:d9:fd:6e:01:04:36:f9:67:1f:09:23:
0e:a9:cf:f8:7e:53:68:8a:e6:63:5d:6e:5f:c1:57:
b7:d2:61:18:84:5d:6b:cc:23:60:53:d4:85:49:b3:
cf:6d:14:b8:37:98:96:b9:12:8a:9d:e5:2f:c3:ce:
be:ff:55:51:eb:04:f6:0b:8a:9e:3b:cf:8c:c3:68:
d9:8c:93:66:c4:62:ea:33:40:2a:d7:e0:30:13:9d:
27:9d:a6:5b:4b:6f:35:26:81:e4:4f:69:d7:a8:d0:
ec:31:b0:23:df:0b:43:83:22:1a:3d:d9:65:5e:0d:
cb:13:cc:ae:67:66:91:2c:14:0d:e1:d0:65:19:59:
5a:76:76:a6:65:71:f6:c7:d2:05:24:7d:85:50:84:
43:68:c5:7c:27:5f:77:ca:ca:90:88:56:17:77:81:
8e:29:6a:a7:d7:05:9e:04:34:b1:93:4d:58:4c:ef:
06:bf:12:1b:02:b7:99:6c:c8:00:56:86:ee:2b:bb:
9c:f6:50:8a:04:60:6e:13:80:42:e7:eb:48:17:67:
a4:e1:1f:b3:0d:85:ac:ab:eb:9a:94:ae:92:6a:0a:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:4C:24:BA:2A:59:D2:5D:34:42:F0:A8:CC:CA:BF:10:72:5F:A9
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i3BMJLoqWdJdNELwqMzKvxByX6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.225.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7b:1a:d1:8f:b8:ad:f1:34:18:80:1b:a1:2c:52:ae:37:b3:
de:dd:2f:e6:bb:86:91:c1:f3:cb:3b:a3:64:d3:46:ef:45:07:
47:e6:a7:31:b3:46:1a:bd:28:a0:9d:ff:b6:ac:8c:4d:e5:52:
f3:d8:27:11:b4:7d:8a:3c:05:89:0a:64:ff:63:73:cf:0c:e9:
f8:70:01:91:f8:08:0f:00:9c:d4:4f:ac:03:ba:e6:68:33:5a:
a5:96:eb:98:da:a3:2f:a5:5e:68:c5:f5:7b:96:51:b0:36:ce:
7e:ff:0c:9d:ae:c3:a9:e4:eb:02:a3:59:9e:76:5f:48:f7:6e:
02:55:88:b4:1d:16:89:c4:64:0b:d7:38:c6:6c:0f:34:d9:d2:
5c:1d:24:c7:4d:3b:f7:01:d9:a7:ce:dd:39:a8:bd:d0:98:c0:
9c:1a:b0:af:f0:f6:f7:6a:19:e3:94:c6:0d:72:b3:9b:80:91:
73:5b:05:76:31:1a:7b:5d:a9:12:4e:dd:20:95:d3:79:0c:be:
91:a6:da:6d:ed:40:3c:40:0e:1a:47:54:58:a7:96:05:bd:f1:
6e:e4:9e:41:0d:21:01:09:48:37:8b:08:b2:d2:5b:93:27:d0:
21:6d:0c:94:ed:bd:63:91:b2:2f:81:ae:cd:f0:e9:8c:1d:36:
ff:12:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:24 2024 by rpki-client on console-ams.rpki-client.org