Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0rskb7Osgu5-uihHpEgyh6eL_OE.roa
File: 0rskb7Osgu5-uihHpEgyh6eL_OE.roa (raw, json)
Hash identifier: d1a0kQG0y5ZJQqSvLpKgcs+VXqnFvtJbiyQq2oPCnjA=
Subject key identifier: D2:BB:24:6F:B3:AC:82:EE:7E:BA:28:47:A4:48:32:87:A7:8B:FC:E1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DAF0AAC9DF64AB1DAFEBD8E8F706
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0rskb7Osgu5-uihHpEgyh6eL_OE.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 09:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:da:f0:aa:c9:df:64:ab:1d:af:eb:d8:e8:f7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bb246fb3ac82ee7eba2847a4483287a78bfce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:50:5b:e2:18:67:17:54:6c:55:ec:39:fa:
a3:45:37:28:29:3f:3b:e3:99:9f:cc:ca:de:09:b4:
0b:b8:22:11:43:ec:dc:f4:af:4e:e9:cb:ad:85:1d:
cc:6d:4c:1d:61:63:06:13:02:fa:f8:54:23:b0:06:
84:57:77:6b:dd:1a:7c:5a:b2:9b:fd:af:1b:51:35:
e3:a4:a3:df:f5:46:90:d3:5e:c3:c5:f3:95:67:fa:
63:26:d9:0a:7e:1e:f3:64:b8:cd:6f:2e:1b:a1:13:
27:05:12:07:a0:d7:94:a9:9a:c3:f1:15:cc:6a:3d:
0a:0c:4e:fa:47:85:29:7b:3f:a5:1c:cb:a4:04:ca:
7d:d4:97:94:41:d4:20:2a:2a:80:2b:e7:90:d5:74:
52:b6:16:84:24:46:71:1d:d2:d3:52:16:ea:b2:ed:
ea:8b:56:fa:87:34:09:c6:e9:fc:e9:d8:cd:91:da:
27:47:6a:54:93:fd:f2:e7:75:58:6a:98:f6:d1:22:
99:b7:bd:05:d6:e9:4a:d1:d4:fe:5b:cd:8f:47:e6:
9b:ff:d7:79:aa:dd:73:de:01:65:30:94:9a:99:73:
26:51:5c:32:4d:14:8a:21:ae:a6:2b:87:0d:b7:ef:
ab:55:6f:21:c0:2e:58:f9:af:f3:9d:a0:4d:85:3b:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:24:6F:B3:AC:82:EE:7E:BA:28:47:A4:48:32:87:A7:8B:FC:E1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0rskb7Osgu5-uihHpEgyh6eL_OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:51:b8:a1:bf:f3:46:9b:cd:a4:3e:bc:0e:c7:0e:1c:63:5b:
3c:89:8b:12:8a:4a:5d:4c:90:d7:66:2a:56:7a:dc:08:3d:6d:
bc:11:d6:ab:88:90:b1:47:d2:bd:c5:73:d4:b1:15:29:23:ba:
f5:1d:4b:2c:b2:79:8d:b1:11:84:8c:2c:7d:70:3c:b2:cb:e7:
38:84:5e:05:24:34:27:3a:f4:92:9b:a3:9a:2c:9c:69:c5:13:
95:b9:e6:13:29:bf:13:61:b4:5b:0d:9a:14:45:a9:af:3c:40:
b6:bb:67:ae:9f:f0:5e:8d:cb:5e:c7:1d:6e:1b:d2:5c:2b:a0:
e1:41:d5:e6:c6:6c:5f:8c:dd:24:06:40:d0:ac:87:60:03:0d:
b0:64:9b:33:d9:32:30:19:b7:77:9e:1a:78:bf:50:64:5b:b1:
1b:b0:a6:3f:53:76:62:5b:b9:55:45:5c:58:9c:fc:d2:34:2e:
05:2f:48:4b:b5:5d:78:5b:76:f3:70:37:e7:56:ec:ea:a4:b7:
ac:a7:30:4e:b0:fc:cb:9d:31:de:75:10:5e:8a:96:0c:68:9a:
1e:bc:41:3a:55:40:df:74:d9:b3:f9:66:ef:61:38:3e:5f:0f:
4a:ce:e3:31:ad:67:dc:61:07:fe:d1:4c:1d:02:5c:d5:7c:86:
f4:2e:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org