Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/khHJiBb8piSZHYxp4fj0ZJ8sI8s.roa
File: khHJiBb8piSZHYxp4fj0ZJ8sI8s.roa (raw, json)
Hash identifier: kJ0WqJLBDccX+WIsqYSyD5w9iUhcsXTiZ42HK+T5Qbw=
Subject key identifier: 92:11:C9:88:16:FC:A6:24:99:1D:8C:69:E1:F8:F4:64:9F:2C:23:CB
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 0185704BA1D914FD818B2A95AE7CF58FB270
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/khHJiBb8piSZHYxp4fj0ZJ8sI8s.roa
Signing time: Mon 02 Jan 2023 02:24:42 +0000
ROA not before: Mon 02 Jan 2023 02:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35500
IP address blocks: 193.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:a1:d9:14:fd:81:8b:2a:95:ae:7c:f5:8f:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jan 2 02:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9211c98816fca624991d8c69e1f8f4649f2c23cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:52:57:8a:38:b7:3d:8a:67:a1:7e:3e:c0:
2f:9a:ba:df:31:90:44:16:c4:61:98:58:c2:5f:f5:
87:4b:69:5d:2a:fe:06:a8:f5:02:43:c4:23:24:07:
46:21:18:66:ce:fc:b6:70:40:aa:e4:6f:24:81:24:
26:25:47:5b:0e:61:6b:e1:3f:c1:7c:5a:c7:ee:6b:
05:ff:64:c2:57:87:9e:95:a9:49:c9:8c:73:0e:d7:
86:c1:42:dc:43:90:3d:21:8c:45:9c:9b:a7:5a:bc:
fb:5e:d1:8f:9a:af:dd:49:50:43:0d:d8:91:11:41:
bf:be:0c:82:05:2d:56:cc:c6:ae:83:1a:9b:fb:97:
a9:10:c6:98:f7:92:1b:50:00:18:25:5e:fa:e6:55:
46:0d:0e:a5:35:36:c6:af:cc:62:d7:1b:f8:0e:2f:
ef:1e:bc:07:cb:74:61:2c:5f:f7:87:52:46:27:5a:
e1:00:fc:6b:06:0f:5a:0d:a9:44:c3:19:91:1e:42:
79:6a:4a:19:2a:ab:b3:38:27:27:70:25:bd:ba:c7:
d7:da:fc:91:40:01:cd:8d:9b:7c:22:0c:bc:f0:d6:
e0:1c:5b:12:2f:0c:47:89:9f:27:53:bf:7b:41:08:
97:bc:b9:a1:24:32:3b:71:c8:b4:90:0f:a0:90:de:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:C9:88:16:FC:A6:24:99:1D:8C:69:E1:F8:F4:64:9F:2C:23:CB
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/khHJiBb8piSZHYxp4fj0ZJ8sI8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cd:59:38:da:dd:2c:46:75:32:86:86:94:31:7e:ad:32:c3:
ac:3d:9e:02:b3:85:82:a8:5e:09:7a:dd:fa:27:ad:5e:db:b5:
29:55:8e:06:f0:03:7d:85:28:0e:5d:5c:a8:a0:0c:53:8a:8b:
11:75:3d:96:50:6c:b1:8e:92:59:0b:d2:c9:47:47:ea:c5:c3:
de:37:84:90:ed:11:62:b1:30:e7:b4:13:56:12:cc:5a:58:56:
6f:f6:b1:86:a0:05:e5:48:12:37:c7:bd:c6:68:95:b0:2b:f6:
08:82:0c:28:da:ef:3a:92:0d:13:dc:9d:4b:e6:f0:3b:c6:ed:
9d:46:e0:60:b0:ae:70:f1:d4:46:a0:e5:fb:bd:67:ce:b0:7b:
4f:ca:09:f3:61:50:85:95:50:d9:e0:ec:9a:ed:d5:60:bc:54:
47:3b:07:b1:e4:2d:1c:3e:f2:26:59:ac:48:38:37:f1:31:ec:
41:46:2f:39:54:10:2b:37:57:ce:f0:d5:17:ef:be:ed:5e:17:
53:cb:cf:df:13:03:9c:73:25:07:b1:06:0c:fa:93:2a:0e:6d:
7c:15:a3:c6:fb:1b:7d:0b:c8:6e:2e:89:66:7b:ea:fb:57:e0:
4c:e4:cb:89:6e:57:47:ec:4e:44:e8:2e:a3:02:59:b1:dd:e7:
94:ae:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:07 2024 by rpki-client on console-fra.rpki-client.org