Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1E_v4wlnClMO4BlFxTM7pasatOI.roa
File: 1E_v4wlnClMO4BlFxTM7pasatOI.roa (raw, json)
Hash identifier: m9OXDex/K1T3XaFkk6gn0ESGKZrcq3BKCNNE1rhvhzQ=
Subject key identifier: D4:4F:EF:E3:09:67:0A:53:0E:E0:19:45:C5:33:3B:A5:AB:1A:B4:E2
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01889842C617E1A7E14109ECBB2EE4F89634
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1E_v4wlnClMO4BlFxTM7pasatOI.roa
Signing time: Wed 07 Jun 2023 23:48:12 +0000
ROA not before: Wed 07 Jun 2023 23:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 193.160.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:42:c6:17:e1:a7:e1:41:09:ec:bb:2e:e4:f8:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jun 7 23:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44fefe309670a530ee01945c5333ba5ab1ab4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:b7:10:09:d9:73:f8:1d:39:44:4b:72:8c:
63:5c:b0:c1:69:9d:60:1f:e4:de:77:7a:57:11:98:
61:1f:f2:8c:bf:fe:51:f4:00:0e:60:7d:c2:dc:03:
5d:27:47:8c:0b:7c:dd:a0:c8:7c:6e:e9:ee:a5:6b:
58:09:4c:a8:c8:13:b2:d9:6f:0d:3a:1c:6d:ff:dd:
bf:4f:8e:b2:00:38:a2:81:17:3c:51:06:89:c1:7f:
54:1e:5d:f8:de:f9:3f:ff:cf:2e:a2:6d:aa:59:d3:
c0:b2:33:c6:56:e6:84:42:9c:eb:c8:b2:bd:f9:e6:
81:39:2b:29:9d:0b:a9:eb:ad:57:7f:15:92:d0:cb:
f6:fb:59:fa:1f:2e:49:93:44:47:5d:93:d0:d8:01:
1b:6b:f4:4a:94:fa:2f:00:6a:f4:c2:2e:c7:b3:86:
ee:f0:27:11:e5:15:8d:33:d0:59:23:a0:79:4c:42:
a6:79:8b:48:fb:91:ff:bd:3a:b0:1a:1c:e8:73:03:
1f:00:62:15:d5:a6:db:ef:ea:92:4f:cb:2c:e7:42:
b4:a2:78:69:78:c2:cb:b2:67:0a:d3:34:71:fd:4b:
6b:d6:b2:be:87:9b:ca:4b:a0:ca:10:01:4a:35:f1:
90:bc:e3:8d:3a:5d:71:23:0f:f1:fa:87:52:f5:5d:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:EF:E3:09:67:0A:53:0E:E0:19:45:C5:33:3B:A5:AB:1A:B4:E2
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1E_v4wlnClMO4BlFxTM7pasatOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:94:db:0d:cb:04:24:08:08:34:37:0c:f7:35:aa:f0:fa:81:
8e:97:52:63:c1:e1:3b:16:b3:06:22:cc:f2:62:cd:3a:e4:3b:
10:21:b6:c6:8a:e4:9c:1a:e8:25:48:41:bf:28:07:eb:e8:d4:
a7:19:a3:0a:e1:b3:ed:c3:32:c8:50:84:56:4d:e5:eb:96:39:
0f:3a:2b:66:2a:81:4d:8e:c5:bc:e3:e9:c6:e4:32:7f:70:50:
46:de:99:3b:ea:1e:c3:ad:0c:0e:b6:3c:27:6d:e9:db:c4:c6:
0f:e9:75:a8:27:53:82:36:24:dd:4e:ba:fa:f4:b0:f9:27:2e:
1a:fe:9e:0d:ba:11:86:7a:37:45:e5:c1:48:7a:00:4d:b6:c0:
e3:6a:f7:2b:25:d5:12:ca:1d:2c:55:92:18:11:70:26:1a:06:
34:bd:21:aa:57:80:bb:f4:fd:5d:11:f3:b7:37:be:b2:31:22:
bc:8d:46:7c:ab:a8:95:e8:8b:91:96:51:46:58:f6:e7:04:af:
e5:4d:4f:e7:cd:ff:c8:b9:73:2b:75:ac:fe:6f:45:1f:de:d9:
d7:d2:0a:2f:d7:67:ab:f7:2c:f2:11:42:44:94:63:0e:9b:d3:
0f:e6:2c:2f:2c:f2:f6:87:3b:c4:15:cc:52:66:61:07:3c:85:
bd:4f:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:06 2024 by rpki-client on console-fra.rpki-client.org