Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52ejzY9SBxhj793yWasXYy22HkA.roa
File: 52ejzY9SBxhj793yWasXYy22HkA.roa (raw, json)
Hash identifier: gIh11DKXdkDH9YcaRUxe3s8vTFSadpOPKW8u12gj1JM=
Subject key identifier: E7:67:A3:CD:8F:52:07:18:63:EF:DD:F2:59:AB:17:63:2D:B6:1E:40
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14FA46D63123678CA1787A6919AB76
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52ejzY9SBxhj793yWasXYy22HkA.roa
Signing time: Sun 01 Jan 2023 20:45:23 +0000
ROA not before: Sun 01 Jan 2023 20:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42280
IP address blocks: 194.102.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:fa:46:d6:31:23:67:8c:a1:78:7a:69:19:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e767a3cd8f52071863efddf259ab17632db61e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:91:1f:11:9b:21:48:48:e4:6d:c2:5a:d5:
da:ec:f0:ac:13:94:2b:62:f5:18:4f:49:87:c4:56:
4f:77:f9:74:3c:0e:e8:5c:2f:78:86:95:07:cd:0d:
e6:58:83:7d:0b:d0:ba:8b:8e:0a:51:6d:ea:c1:84:
20:f9:f1:8b:48:56:17:0f:38:9c:22:ea:54:72:99:
b6:b5:11:c7:07:2d:b1:fb:69:b4:e4:56:77:49:92:
6e:cf:41:9d:b3:12:d8:62:ea:b9:67:71:40:61:8a:
6f:56:a6:3f:66:b8:06:01:25:c9:ae:d9:64:31:a6:
8c:3e:3a:ea:e9:07:3c:cc:7d:e4:8e:b9:94:c3:02:
1b:fc:f4:19:a7:4a:b2:dc:6c:4b:b6:af:16:11:26:
74:40:9e:ab:52:5b:53:f3:c0:b2:55:0f:08:b4:35:
38:60:3d:58:cc:4b:c1:b6:92:8d:1d:2a:0b:3d:94:
23:4a:2a:7a:a7:29:8d:98:08:b9:c4:02:24:a7:96:
02:a0:3b:fa:da:f2:77:33:8d:16:9d:88:d8:29:97:
d0:ba:64:1f:1d:fd:a0:62:24:cc:bd:ff:72:da:97:
de:2b:ad:db:00:fc:8e:c8:f2:99:bb:81:61:52:08:
38:03:4a:45:9a:bc:f3:eb:52:71:64:36:f3:29:a5:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:A3:CD:8F:52:07:18:63:EF:DD:F2:59:AB:17:63:2D:B6:1E:40
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/52ejzY9SBxhj793yWasXYy22HkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.193.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1c:cd:50:4c:5d:f6:51:cc:c9:a2:e3:a2:e6:77:22:c5:81:
82:e2:a6:30:6a:9c:0f:6a:2c:98:a0:56:b3:6a:ef:e7:d0:76:
7d:09:58:0d:d0:17:99:c6:7e:a3:38:4a:25:73:6b:b7:22:d2:
1e:22:c8:da:2d:f7:f7:29:f1:dc:9f:f7:2f:3a:a6:aa:0d:52:
8d:45:ff:d3:a9:52:d4:be:f0:58:0d:47:a0:06:49:62:96:8d:
b7:4c:e0:fe:bb:7e:88:ae:55:31:13:dc:90:e2:b3:a2:65:1d:
a8:b6:1a:86:88:3f:d8:37:7d:00:9b:a1:aa:06:6b:83:39:89:
22:55:80:0d:b3:ea:3e:5a:ed:33:5e:f1:e8:12:ef:be:d2:38:
88:7f:26:f8:9b:83:a0:90:09:3e:bc:45:ec:1a:fb:57:eb:41:
3d:49:31:c5:10:be:1c:9d:05:9d:ef:2a:ca:21:3c:d0:30:1b:
9a:d7:20:78:90:14:f6:c4:29:9b:bb:12:80:6e:b7:22:4c:fc:
2e:e1:38:00:97:ce:73:fa:17:84:7c:f1:5a:f6:ee:94:76:df:
36:8b:5f:c2:a7:ca:af:a5:e7:fe:c4:14:cb:c6:ba:81:8e:c1:
d0:f4:6a:ca:ed:22:44:8a:a2:0b:d2:56:b9:4e:1f:77:87:08:
59:ad:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org