Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/Xr7iIFKdu9BVdHyj5dTxsB1qrrU.roa
File: Xr7iIFKdu9BVdHyj5dTxsB1qrrU.roa (raw, json)
Hash identifier: syU6mz8OZtF7viOjcRqLXgnVasbX8Q1Hl7osAPPf2ro=
Subject key identifier: 5E:BE:E2:20:52:9D:BB:D0:55:74:7C:A3:E5:D4:F1:B0:1D:6A:AE:B5
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 018AFEB7E160E2B9EAF23726A9E6EE1EFA0C
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/Xr7iIFKdu9BVdHyj5dTxsB1qrrU.roa
Signing time: Thu 05 Oct 2023 07:22:58 +0000
ROA not before: Thu 05 Oct 2023 07:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212368
IP address blocks: 193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:b7:e1:60:e2:b9:ea:f2:37:26:a9:e6:ee:1e:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Oct 5 07:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ebee220529dbbd055747ca3e5d4f1b01d6aaeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:d5:1a:8e:fe:d7:0a:d0:0a:53:c4:af:f2:
f7:a6:fa:c3:2f:6c:4c:47:4a:a4:c5:98:21:95:b8:
31:26:68:e8:a9:17:86:d0:e1:0d:be:5e:da:07:46:
e7:e2:7b:c4:29:dc:60:d4:38:87:94:2c:ce:24:93:
79:f0:8d:7a:b5:09:87:c0:2d:76:07:c2:59:7d:06:
a4:77:b7:3c:b4:ea:fb:5a:30:f1:0c:16:e3:07:2e:
09:39:fa:b2:f0:b3:66:e8:ed:26:c0:a5:4c:01:5c:
c9:e4:35:3d:3c:80:a7:a9:e5:32:91:4a:3b:09:2e:
73:03:b5:36:2e:e4:45:42:f2:fb:34:ea:7b:5a:eb:
7a:7a:48:7f:9f:30:e4:9b:06:95:39:28:1b:26:3a:
78:36:e8:3b:ec:3f:0b:a3:95:d8:b8:75:22:44:ac:
c5:f3:72:c4:51:8c:b4:b9:35:89:9f:04:11:67:61:
a7:fb:fb:00:82:72:40:24:99:64:db:d6:f6:59:a6:
73:e1:bf:81:50:17:e1:39:f4:29:5e:f7:9b:1c:0f:
b6:79:9c:3a:e6:74:3c:9c:a0:9e:86:ae:ed:45:4a:
0c:00:33:3f:64:b7:cc:ca:94:20:3a:91:11:a7:dc:
9b:39:b1:d3:64:3d:a7:3a:83:95:a4:1c:43:99:f0:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:E2:20:52:9D:BB:D0:55:74:7C:A3:E5:D4:F1:B0:1D:6A:AE:B5
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/Xr7iIFKdu9BVdHyj5dTxsB1qrrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7e:8f:6f:d7:d7:75:42:cc:3c:b5:77:96:26:eb:b2:f1:0f:
fc:85:2a:06:dd:01:aa:ad:e7:90:63:a4:32:d9:8e:95:b4:2a:
74:17:51:b5:94:76:04:fe:e9:e1:35:a5:00:6b:8c:6a:3e:ba:
fb:58:01:77:9c:31:a7:51:66:b6:23:d1:7b:5e:9a:10:41:b8:
1a:dc:ee:89:d9:0d:f9:a2:4e:7d:da:81:18:20:ef:28:10:fd:
16:49:ca:6a:42:df:9f:1f:c2:7c:f1:44:d4:f2:db:ee:bb:19:
60:b3:d7:a3:07:81:7a:70:92:9a:54:0f:5c:5f:fb:b0:a7:86:
f8:dc:a1:db:c1:45:74:c7:8b:e5:15:04:ac:09:9c:b3:a2:c3:
fb:01:60:13:1f:a7:d1:f8:2d:bb:e0:e2:71:b0:ae:ae:a9:c6:
8a:4a:13:64:e7:22:d8:e8:02:c8:b1:1f:89:8a:da:7a:17:41:
24:ea:ad:54:d9:a2:c7:fc:ef:eb:d3:60:9f:51:5a:33:f3:ba:
ab:4a:27:a6:13:18:15:15:b0:5c:b1:7e:62:38:af:7c:73:f4:
c6:22:23:88:bc:c1:5d:70:d1:94:b2:51:b8:d2:d1:00:6e:6c:
af:60:b4:6d:0a:57:82:da:de:5b:e9:08:97:47:a7:78:70:9a:
12:d3:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:59:05 2023 by rpki-client on console-fra.rpki-client.org