Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/q_oxrHeJXle7lUQrcUPqHzkKOwg.roa
File: q_oxrHeJXle7lUQrcUPqHzkKOwg.roa (raw, json)
Hash identifier: VWhAtyJKSrnsqlHcmoEq1QXL+HqxuGbosvnI8CJFwxY=
Subject key identifier: AB:FA:31:AC:77:89:5E:57:BB:95:44:2B:71:43:EA:1F:39:0A:3B:08
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739015D95F089D776D1EA79DEF8C621E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/q_oxrHeJXle7lUQrcUPqHzkKOwg.roa
Signing time: Mon 02 Jan 2023 17:38:20 +0000
ROA not before: Mon 02 Jan 2023 17:38:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212912
IP address blocks: 193.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:15:d9:5f:08:9d:77:6d:1e:a7:9d:ef:8c:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abfa31ac77895e57bb95442b7143ea1f390a3b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:e3:13:33:6f:d1:be:77:25:59:24:14:97:
05:02:c5:b4:de:7f:b0:d0:de:e6:a3:a4:bc:e0:60:
0c:f2:5b:69:70:c9:c0:15:13:5c:78:11:d1:d8:0c:
7b:51:e2:1f:9e:72:f3:e1:a5:d1:2b:fc:c3:7a:8c:
79:0a:7e:b2:39:f8:cc:c8:9b:d2:ad:26:7e:33:a3:
d5:c0:72:ea:08:e3:a2:da:5b:d0:3c:5d:94:a1:86:
a2:06:4b:cc:56:dd:55:5a:9e:b7:02:bb:fe:ac:00:
58:63:1b:e4:d6:47:92:b7:39:8d:91:ae:e3:b1:5d:
17:e3:94:e2:e5:24:6a:01:3a:eb:54:c7:2f:93:bc:
b2:1a:4c:9e:f4:af:a7:a7:d0:dc:d7:3a:ea:20:4c:
aa:f3:a3:4f:ba:58:5e:d6:57:b8:77:63:4d:7d:5c:
d6:1d:cb:b0:08:e5:12:2e:f2:05:51:12:4e:d7:41:
65:4a:75:4e:0c:3c:01:e2:01:12:d8:9e:ef:13:d6:
b0:ce:25:f1:fa:d6:19:37:0d:4e:86:00:3c:ad:08:
be:e9:92:45:2c:b6:c0:20:69:51:27:e7:a2:c1:5e:
da:ec:f7:e3:87:a3:59:e0:e1:fb:ff:17:8e:bb:86:
4f:43:24:dd:41:14:c9:68:34:b9:9a:44:90:f8:3d:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:31:AC:77:89:5E:57:BB:95:44:2B:71:43:EA:1F:39:0A:3B:08
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/q_oxrHeJXle7lUQrcUPqHzkKOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:ad:8d:91:6b:73:cb:6e:51:d3:e4:89:f9:a3:4c:8b:ab:
df:d1:81:00:01:c4:d4:e7:67:e0:63:6e:ea:53:5b:3a:e0:93:
a3:09:89:ed:a8:36:c9:b3:37:61:98:1c:f7:78:8e:7a:ec:5f:
fc:b3:13:79:03:26:9a:7d:8f:51:30:f2:f7:b0:85:93:93:d8:
08:2d:40:da:d4:90:ae:1a:de:49:29:39:4f:f6:75:31:b7:2a:
5a:96:44:93:e1:c3:ac:37:ac:dd:4a:fd:23:aa:42:50:e8:d3:
e4:34:9f:5b:23:34:09:71:f3:8d:6c:a0:45:7c:49:20:83:6a:
45:1e:8d:cb:b0:b1:aa:ed:eb:db:b6:22:3f:2d:09:2a:ee:6a:
7b:a9:25:05:f5:37:a7:a0:f4:82:af:a0:94:15:fb:77:a2:5a:
04:a0:a9:8e:85:52:37:f4:a0:81:46:75:8e:b8:79:e2:d1:c2:
35:23:8f:6f:96:d2:e2:06:a8:e8:7c:fe:29:4b:b2:12:3f:d6:
ca:52:01:83:d8:67:55:f4:74:8c:d7:ed:7b:02:0e:7a:7f:76:
af:be:21:f4:a1:7f:76:cb:01:ae:ce:e4:6c:45:b1:44:25:94:
00:52:c7:49:da:98:4f:fb:58:71:e9:a9:c5:c7:55:6b:f4:93:
71:f7:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org