Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zEJTZq0a4mw06bBTEpHXQ9ZWgw.roa
File: 1zEJTZq0a4mw06bBTEpHXQ9ZWgw.roa (raw, json)
Hash identifier: cyNiO0xG7GWw6HVZWxSCg+Wq3Tobyql1HAl0pxGacXI=
Subject key identifier: D7:31:09:4D:9A:B4:6B:89:B0:D3:A6:C1:4C:4A:47:5D:0F:59:5A:0C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14EED082F46244C20CAE78647C277A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zEJTZq0a4mw06bBTEpHXQ9ZWgw.roa
Signing time: Sun 01 Jan 2023 20:45:20 +0000
ROA not before: Sun 01 Jan 2023 20:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13059
IP address blocks: 193.231.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ee:d0:82:f4:62:44:c2:0c:ae:78:64:7c:27:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d731094d9ab46b89b0d3a6c14c4a475d0f595a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:50:37:ec:b0:a0:90:1a:ca:b2:89:a2:71:
9f:96:2c:27:b6:8c:9c:e0:46:af:de:e4:e0:15:7c:
9c:59:52:6a:44:72:3e:76:6d:6d:67:20:8c:59:fa:
fd:e1:52:41:4c:85:aa:a8:71:a8:5d:52:78:6c:d4:
6c:01:3a:3a:9f:fe:f5:fa:31:61:b1:1d:ea:a9:80:
6b:96:ae:93:f8:81:2a:a2:dd:1c:3a:8a:77:06:21:
ef:97:ac:99:6b:3a:c0:c2:1a:f1:2b:00:de:78:e7:
12:75:4d:3d:13:ce:02:44:b9:57:2e:cd:35:b5:bb:
4b:fe:4b:07:39:50:29:d8:30:46:a3:07:5b:a2:03:
d0:8f:a8:e8:42:e7:4c:bf:51:72:d8:00:39:a2:6c:
ff:0a:81:c3:23:f1:3a:ba:5c:e7:34:e5:22:c1:69:
67:f8:25:ed:85:f5:a9:e3:05:c4:aa:1c:40:f6:4c:
5c:b3:71:68:29:04:7b:a0:c0:1e:6d:0d:78:71:48:
0f:5a:87:6b:78:5c:7f:03:e9:45:ba:66:be:ec:76:
57:28:05:83:0f:ff:0a:32:83:6d:8e:68:9e:ad:e5:
50:e1:3e:e9:e5:58:f3:84:6d:5e:8a:32:b9:84:29:
61:73:09:c0:05:43:70:43:be:ee:20:7a:02:33:c9:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:09:4D:9A:B4:6B:89:B0:D3:A6:C1:4C:4A:47:5D:0F:59:5A:0C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zEJTZq0a4mw06bBTEpHXQ9ZWgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.83.0/24
Signature Algorithm: sha256WithRSAEncryption
59:35:7c:5b:2e:c7:55:4b:22:9e:67:f8:a3:fd:7a:d9:5f:ee:
be:a9:23:ac:7a:b9:fa:d0:78:a1:d1:0d:55:7d:6a:4e:b6:80:
06:12:6a:44:42:44:44:48:78:48:15:00:ea:0c:b1:73:2c:a6:
93:d2:f8:76:0b:1d:7f:2a:e8:b2:2c:a6:54:42:f9:f4:c8:e8:
90:f4:be:0b:73:6f:9c:8c:48:90:b3:eb:00:c3:20:7b:ba:b3:
c3:e0:d9:f4:17:9b:40:dc:83:fe:23:c6:b5:7a:f9:46:d6:1a:
be:a7:4f:f2:23:68:47:f9:20:f9:76:ae:5d:f4:8d:52:a2:a4:
c4:96:48:a2:a4:ef:bf:3b:3d:0d:9a:e0:1d:38:c9:ab:1b:31:
91:d3:f6:46:ad:20:d6:22:2f:6d:94:87:9e:75:ac:8b:31:b4:
b1:7c:e4:25:ad:93:37:1a:49:70:ec:e5:e8:47:78:6b:af:e0:
bd:32:3f:bb:18:3a:ec:76:7c:85:42:1d:df:e9:fa:4a:a9:33:
cc:97:ae:4e:9a:58:55:f4:90:a1:c9:81:c8:aa:df:37:1f:96:
bb:a5:ba:b9:54:16:61:2b:f5:7e:ab:64:1f:26:a7:4b:0d:7d:
26:32:d2:72:3a:9b:f1:bb:9e:99:16:da:1d:bd:7d:c5:92:c6:
cf:59:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org