Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Qj75pt4zADjBvSC2d9QyOVcbul8.roa
File: Qj75pt4zADjBvSC2d9QyOVcbul8.roa (raw, json)
Hash identifier: Haugryr+zCHGfkBVWydmGHDdAn+sEAwUWRh6gFE3cu4=
Subject key identifier: 42:3E:F9:A6:DE:33:00:38:C1:BD:20:B6:77:D4:32:39:57:1B:BA:5F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573900436661336C79A679F39DB7BF0C1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Qj75pt4zADjBvSC2d9QyOVcbul8.roa
Signing time: Mon 02 Jan 2023 17:38:16 +0000
ROA not before: Mon 02 Jan 2023 17:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208393
IP address blocks: 193.221.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:04:36:66:13:36:c7:9a:67:9f:39:db:7b:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=423ef9a6de330038c1bd20b677d43239571bba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:cb:82:4a:a3:41:2e:9b:d3:d8:1b:6c:28:
95:e5:f6:18:60:bf:13:a7:e9:35:c2:e6:1b:b7:1b:
fc:a0:af:c6:46:78:fb:89:42:04:2c:8d:3c:e2:6d:
6d:d6:90:31:a4:97:cf:49:a5:8a:ae:a4:33:9b:af:
34:31:10:b8:26:e7:f7:79:be:b6:cb:68:18:14:86:
52:c5:94:ba:94:5e:b4:48:9f:29:0b:6c:e8:6e:e5:
98:ac:d1:bb:c0:68:43:62:43:21:71:8d:84:5d:3a:
d1:57:c1:53:51:ed:92:28:35:ec:61:07:65:95:88:
67:d1:8d:8b:80:e8:0e:0f:c5:08:e6:ef:1f:a0:fe:
a7:75:c9:d8:28:a8:e5:7b:3c:0a:34:e9:45:bc:7b:
15:fd:e1:54:d9:0a:3b:02:10:14:c5:a0:69:40:7d:
60:91:21:53:9c:2e:3c:a8:46:2b:87:bd:15:b3:a5:
27:63:d0:20:9e:8b:e3:9b:0d:99:bd:d2:08:4a:fa:
44:06:d2:91:ad:62:85:b9:76:bc:f4:b3:c9:98:86:
ef:0b:8d:98:57:10:c7:4d:7f:c7:12:af:fe:cf:2a:
c3:82:44:94:f5:24:3d:cc:d3:b6:71:04:9b:6d:04:
b3:f0:67:ca:7c:de:8d:5b:ac:13:8d:81:ab:0d:68:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:F9:A6:DE:33:00:38:C1:BD:20:B6:77:D4:32:39:57:1B:BA:5F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Qj75pt4zADjBvSC2d9QyOVcbul8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.192.0/24
Signature Algorithm: sha256WithRSAEncryption
41:35:3d:87:8b:8f:b1:42:34:a6:48:2b:86:47:57:84:d7:37:
9f:fb:be:c9:53:64:ea:07:04:d2:9f:87:29:62:f9:3c:31:23:
c1:31:9a:79:75:d5:29:47:8a:0f:c5:06:aa:a7:bb:70:14:19:
da:14:4d:a0:c8:62:46:e7:c4:a7:0b:c2:f9:26:b1:5b:0f:3d:
c5:a0:8e:46:0c:f6:1a:f2:2b:1f:19:5a:f1:35:e8:8e:36:4a:
a1:4c:39:97:5d:3d:19:e9:bf:27:a5:df:e7:7d:0e:14:55:d0:
0f:89:1e:bc:f8:73:ef:fd:9b:df:bc:0e:9e:c8:da:66:ac:32:
ed:c6:92:40:ec:80:82:f6:f6:d0:4a:17:60:ab:95:da:ce:a3:
2a:08:ac:03:0f:e1:3d:ed:5a:bc:6c:86:6f:09:72:65:1d:eb:
e8:e6:2f:48:20:68:39:49:b8:f4:49:08:0f:c0:bf:31:24:19:
0f:2c:a1:f2:a9:31:b8:ae:3c:de:83:0f:21:52:ab:4f:a3:49:
a5:bd:57:04:cf:5e:b4:65:e4:9c:c6:15:83:19:15:e6:c4:bb:
2c:a2:c8:bf:0f:a5:ef:aa:78:12:c1:bf:38:f1:57:de:d9:e9:
d7:3a:f0:b0:51:e9:3a:7f:55:1a:5a:b0:56:7d:8c:fc:d1:94:
3c:79:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org