Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/laoF_aGA53eU1Ag1RbuSnhXnXe4.roa
File: laoF_aGA53eU1Ag1RbuSnhXnXe4.roa (raw, json)
Hash identifier: 9zmrV6WaN5oam5rpjY0BFJWmbBAcmabD9ERBIzWuxnM=
Subject key identifier: 95:AA:05:FD:A1:80:E7:77:94:D4:08:35:45:BB:92:9E:15:E7:5D:EE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185A1BEA7E4872115F136D9603DDEAB9032
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/laoF_aGA53eU1Ag1RbuSnhXnXe4.roa
Signing time: Wed 11 Jan 2023 16:51:44 +0000
ROA not before: Wed 11 Jan 2023 16:51:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7106
IP address blocks: 193.221.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:be:a7:e4:87:21:15:f1:36:d9:60:3d:de:ab:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 11 16:51:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95aa05fda180e77794d4083545bb929e15e75dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:6e:88:13:48:fc:da:f1:14:1a:4b:a1:28:
a9:a3:9b:bc:c8:b4:c1:4d:90:b3:f5:35:39:17:1b:
b2:aa:4c:0b:25:6b:78:dc:c7:ad:95:88:00:25:61:
5b:85:0f:2d:0f:1f:1b:4b:ca:ad:35:48:52:68:d1:
5d:4a:a3:05:cc:84:54:d6:03:4a:b1:f2:2b:ea:dc:
09:b0:6d:1c:3a:76:b2:e8:c2:b2:37:8e:58:d5:9d:
60:35:1b:7d:81:70:0b:36:18:ff:94:e1:e7:c3:b1:
88:d4:58:59:d9:3d:95:d0:7f:9c:dd:74:5c:b8:bc:
66:1a:59:9e:85:cb:ad:ce:51:49:5e:7f:64:5c:be:
23:cc:b2:ef:89:ba:f2:50:29:80:79:ba:f7:e3:45:
42:40:24:e2:2a:a4:76:6d:e1:f3:26:4c:f7:14:f4:
22:84:0a:cd:54:1a:67:1b:c5:b9:e1:7d:bb:de:7a:
79:9c:41:86:cd:e8:b4:f7:9c:d1:ff:35:58:03:9f:
c6:b6:52:bd:ff:d1:3d:69:8e:9f:06:99:a8:87:1e:
07:46:d3:61:35:f0:aa:8e:af:60:4e:cc:ab:a9:ae:
fe:72:0e:90:a7:ca:c6:76:8c:16:d8:2a:e4:9c:18:
e8:2c:1e:6e:7e:54:54:7b:ed:98:a7:00:29:18:78:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:05:FD:A1:80:E7:77:94:D4:08:35:45:BB:92:9E:15:E7:5D:EE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/laoF_aGA53eU1Ag1RbuSnhXnXe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5a:63:0e:54:7e:88:84:71:5b:6d:f8:3b:9c:12:27:d2:c0:
e2:02:f6:fa:52:02:d6:7e:af:ef:e0:70:97:57:c2:ed:81:e5:
4d:53:77:dd:13:5c:33:78:02:f0:3f:6b:af:e6:6e:92:75:03:
99:9b:65:a4:13:71:c6:12:2b:7b:d3:34:16:16:23:d2:c9:77:
42:09:2c:92:fa:df:da:77:cf:ed:94:c8:b5:3f:6a:d3:8d:dd:
43:d9:4d:80:1e:df:c7:5c:8f:56:35:e4:9c:30:90:0c:66:31:
87:40:7f:f0:57:cb:e3:39:87:fe:fd:c8:d7:6b:f2:8c:77:35:
e8:06:74:e4:dd:0f:8b:15:37:37:d9:b0:4d:75:a3:56:27:74:
ca:2e:30:44:5b:bb:bd:14:ec:7b:15:60:17:9e:ab:ed:35:ca:
9d:b9:3e:58:f5:df:f4:a7:25:5f:a0:fc:fa:33:7b:af:ec:55:
41:7a:40:ba:95:13:e1:24:96:db:22:75:82:e4:3f:9a:02:6e:
2a:03:f8:30:7f:b6:9a:b2:71:3b:bd:01:e2:b8:07:a7:8b:66:
dc:6a:11:46:6f:27:84:00:00:5f:ac:dd:94:f8:45:85:fb:ce:
37:35:b4:cc:67:09:e6:0e:f4:8b:66:66:09:48:e0:9d:0e:b4:
e8:3d:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org