Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/briSUsznxXfK3dM91FqRYNaiL5g.roa
File: briSUsznxXfK3dM91FqRYNaiL5g.roa (raw, json)
Hash identifier: 51rP8piV1gVz6At/jibNXtm9BVQJx8BzDlQv4WNpkQA=
Subject key identifier: 6E:B8:92:52:CC:E7:C5:77:CA:DD:D3:3D:D4:5A:91:60:D6:A2:2F:98
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018AA978562444AF421A6F8EE40FE2A78FCB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/briSUsznxXfK3dM91FqRYNaiL5g.roa
Signing time: Mon 18 Sep 2023 18:05:50 +0000
ROA not before: Mon 18 Sep 2023 18:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13181
IP address blocks: 193.230.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:78:56:24:44:af:42:1a:6f:8e:e4:0f:e2:a7:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 18 18:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb89252cce7c577caddd33dd45a9160d6a22f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:8f:25:dd:10:b9:13:3c:3f:f2:11:3b:d9:
7c:91:3d:fa:9a:29:89:f1:51:ab:d5:d3:d1:1d:00:
f2:89:9b:3d:9c:a0:f1:60:16:06:30:55:ba:22:46:
c4:b7:52:e7:6f:65:db:c3:b2:91:ae:09:e9:d3:a5:
16:8f:c8:95:cf:04:3f:e0:55:21:c2:4e:22:c4:8c:
ce:ff:82:67:b2:c6:de:3d:de:aa:12:49:bf:dc:9c:
1b:9f:6a:a5:3a:5a:94:c0:1a:83:0e:fc:4f:88:99:
f8:38:63:39:bb:dd:be:1f:14:71:50:f8:42:91:a4:
ec:70:d4:0c:5e:65:fd:d8:a1:e7:89:45:b5:5a:85:
ff:74:bc:08:5c:26:41:a5:84:3d:83:3f:b2:55:c3:
00:d3:8e:bc:eb:9e:cc:87:09:ef:b9:50:f7:92:6e:
06:37:7c:63:3f:f4:39:69:d7:f9:25:a6:d7:59:fe:
10:2c:5c:a4:bf:d1:65:63:6b:58:62:f9:76:4e:cd:
b2:78:37:73:4e:6c:f5:8b:49:33:68:6b:f7:7c:60:
8e:42:25:a1:75:e4:59:15:8d:f4:2b:72:40:7d:c2:
1d:eb:54:90:9c:48:d3:0f:39:a1:fd:bf:ef:bd:a4:
01:d5:96:4f:ef:d8:0f:50:d1:07:0d:2c:dc:38:03:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:92:52:CC:E7:C5:77:CA:DD:D3:3D:D4:5A:91:60:D6:A2:2F:98
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/briSUsznxXfK3dM91FqRYNaiL5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a1:c5:6d:1e:e0:40:25:25:bb:f2:65:3c:96:a5:2e:12:2d:
f2:df:08:c3:39:86:1d:bf:e4:8a:75:ca:26:94:14:33:ff:63:
a4:8a:a2:52:ff:51:0c:3a:69:8d:2a:f4:4f:a9:81:31:22:62:
0d:54:dc:5d:b4:02:cb:d0:ca:60:e2:a5:d8:a4:c9:63:3d:31:
a8:47:10:c8:ef:e7:d9:5c:6c:fe:b3:28:c4:06:60:03:26:de:
2e:e5:3d:58:1e:30:3b:92:37:bc:b5:c8:4d:13:e0:e0:10:45:
00:41:90:62:0a:27:15:9f:f2:b6:f0:d3:57:98:fb:2c:f1:1c:
f2:a0:84:da:15:8e:4e:9c:c0:0e:6d:12:47:cd:f8:88:04:da:
81:71:91:f3:e9:78:85:ad:fc:b7:d3:a9:5f:c8:18:62:3e:89:
44:a2:e1:b8:a3:b8:80:32:86:f3:d8:7a:23:41:6a:dc:ba:bb:
27:50:cb:0b:90:14:c7:ff:ca:9b:ca:fd:71:fa:76:15:34:03:
8c:c3:7d:48:c4:35:a5:e5:1a:81:e2:c2:09:58:2c:3b:d9:7a:
c0:bd:49:c0:6b:68:10:f8:64:a1:4f:11:d8:eb:2c:bd:9a:12:
a0:12:5e:66:76:8c:90:91:82:04:32:8b:32:8e:cd:17:84:ee:
84:bd:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org