Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/w7n6aEiB5K7_nIWlfZLSGU7yVuk.roa
File: w7n6aEiB5K7_nIWlfZLSGU7yVuk.roa (raw, json)
Hash identifier: 0xUjemNvd/zROiQ+eAiHZ9VRfJ7rc8kN/A+eoeDqYIE=
Subject key identifier: C3:B9:FA:68:48:81:E4:AE:FF:9C:85:A5:7D:92:D2:19:4E:F2:56:E9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0186B920D199DE91EEA804C6FA45AB7F20ED
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/w7n6aEiB5K7_nIWlfZLSGU7yVuk.roa
Signing time: Mon 06 Mar 2023 22:53:01 +0000
ROA not before: Mon 06 Mar 2023 22:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19318
IP address blocks: 193.34.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:20:d1:99:de:91:ee:a8:04:c6:fa:45:ab:7f:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 6 22:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3b9fa684881e4aeff9c85a57d92d2194ef256e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:77:e0:7d:2a:02:00:27:8f:8b:21:54:f2:
45:e4:13:0d:22:8f:79:e0:f6:f3:7b:c7:9b:f9:54:
31:32:fa:ff:56:5c:99:48:28:d3:b9:df:38:1f:8f:
b0:1c:51:f0:2c:e6:82:ce:01:c8:e4:6b:96:4a:f6:
ad:13:aa:db:40:78:0b:61:da:87:f9:ed:5b:1b:2d:
2d:d8:9d:9b:c0:30:68:d9:4c:fb:5e:83:58:2e:2b:
be:87:21:d9:37:f7:9d:11:37:0b:19:f7:07:d5:93:
4c:75:ee:bf:ca:50:21:44:d4:29:51:48:d7:c8:91:
71:b5:76:e5:49:12:14:17:5f:0f:5f:93:f2:8f:16:
49:82:ed:f1:d9:e6:2b:6d:ad:ef:8b:46:a3:d2:7e:
18:4a:9d:dc:0a:ac:93:b7:10:fa:18:2f:74:f6:8c:
76:f0:a9:88:9c:eb:74:fa:e9:c4:cc:3d:be:eb:82:
2f:56:a0:9e:f1:ed:b2:52:78:fe:8f:89:a1:97:c4:
9a:d6:ae:7d:47:b1:8a:22:36:ba:48:0b:cd:2f:41:
c3:44:d7:6b:6d:23:ee:e8:47:e4:d4:d6:ab:de:d7:
64:88:8d:a2:7b:8b:94:44:2e:ea:9f:23:b7:ca:5e:
80:00:c8:8a:dd:71:88:56:f2:b5:9a:06:9b:a5:f6:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B9:FA:68:48:81:E4:AE:FF:9C:85:A5:7D:92:D2:19:4E:F2:56:E9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/w7n6aEiB5K7_nIWlfZLSGU7yVuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b7:ab:9d:8a:ec:c7:be:30:e2:31:4e:93:e0:f6:bd:85:50:
02:06:77:68:37:2d:95:e7:02:1c:ee:44:67:37:a7:dc:88:1b:
2f:ae:54:57:44:ae:e9:f5:57:a1:0c:58:19:e6:9e:4c:05:4c:
20:70:32:54:cd:76:98:43:3f:3e:18:37:b0:3d:eb:21:11:0a:
c3:3a:99:d4:ba:63:ee:69:9f:57:c9:4b:a0:54:49:5d:75:97:
36:98:51:e1:a9:8a:39:df:00:8f:c1:ac:fd:93:37:ca:77:b2:
9c:b6:08:46:ad:28:1b:70:bf:20:ce:34:e2:96:5d:1b:9f:54:
f0:72:e3:e1:2d:1c:5e:fe:68:fe:4a:3c:5d:75:c2:6e:4c:1e:
53:79:0c:8b:f3:c1:32:70:6b:88:e6:7c:4d:8b:74:af:7d:cf:
87:89:c3:76:8f:e1:ca:bc:7a:bd:dd:11:bf:18:ab:2c:7d:6d:
96:30:37:ac:26:e7:34:d8:bc:b7:10:7f:f0:03:62:13:45:e2:
81:b3:38:27:0d:cc:a1:0b:01:55:e9:d0:88:93:0b:0a:36:41:
99:ae:83:04:69:bb:4c:79:d5:a4:fc:31:b6:67:eb:7a:66:31:
bf:3a:b6:b0:c0:84:fd:16:1c:b4:b7:27:1d:6f:01:07:77:61:
fd:49:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org