Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/g5rDVl-RiozasLgaJwX5Ny5ch9M.roa
File: g5rDVl-RiozasLgaJwX5Ny5ch9M.roa (raw, json)
Hash identifier: iGv7IhhGcBkylTkPZZ3aDexZoOt8E9cnAaJtsO/Fuo4=
Subject key identifier: 83:9A:C3:56:5F:91:8A:8C:DA:B0:B8:1A:27:05:F9:37:2E:5C:87:D3
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 018B04EED8C6E03E07F99C59ED1D9D95794C
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/g5rDVl-RiozasLgaJwX5Ny5ch9M.roa
Signing time: Fri 06 Oct 2023 12:20:43 +0000
ROA not before: Fri 06 Oct 2023 12:20:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:ee:d8:c6:e0:3e:07:f9:9c:59:ed:1d:9d:95:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Oct 6 12:20:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839ac3565f918a8cdab0b81a2705f9372e5c87d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:11:01:31:18:ea:5a:c0:ee:67:44:6e:e5:
89:be:d6:c2:0e:2e:f5:fa:87:80:e5:65:66:ca:7f:
53:30:f9:a2:c4:c8:16:79:ec:f7:0d:c7:0b:8e:74:
87:3d:7d:fb:69:18:ef:ee:54:54:4b:43:69:7d:77:
e3:64:d0:cf:41:74:72:f5:38:06:9d:a1:be:8c:32:
0e:2f:38:6b:a0:c0:6c:99:3c:8b:92:53:ed:75:9a:
a6:be:fe:d5:95:9e:fb:9f:66:1f:d2:15:70:ae:25:
04:b2:94:4d:55:f2:e9:6f:d0:96:53:fd:7f:3e:cb:
93:ff:d1:20:9c:02:c6:1b:9b:70:b4:11:16:8b:44:
12:b6:e2:af:4a:62:24:34:ca:8c:63:6a:20:3e:73:
ef:ac:b7:42:90:d9:f8:cf:a5:b4:fc:ae:3f:4b:27:
61:db:c5:27:d3:ac:68:f2:b1:c1:e4:cc:31:22:77:
72:95:ec:96:8f:f5:d1:bc:6b:4c:ca:80:b2:af:8e:
53:b8:33:ae:24:aa:f0:08:1e:eb:07:24:9d:26:19:
93:f5:02:c2:7e:0e:ee:a1:ca:13:6c:3a:15:63:c6:
f0:8a:a0:48:5e:01:f4:d7:df:b4:0c:46:46:1e:02:
88:36:3a:b7:bb:ec:a4:a5:c5:70:2c:80:e4:4e:a0:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:C3:56:5F:91:8A:8C:DA:B0:B8:1A:27:05:F9:37:2E:5C:87:D3
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/g5rDVl-RiozasLgaJwX5Ny5ch9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ac:5b:82:c7:c0:35:7a:1c:2f:c0:70:10:7a:9c:5f:48:53:
8f:45:d2:e1:d7:66:ce:28:b9:99:3e:f0:2c:a2:a4:c9:fa:8f:
e0:e2:a1:8a:ef:2a:16:d6:1c:d8:c6:a4:ec:f0:9b:13:4b:20:
70:57:1b:14:ef:18:de:35:66:6a:86:54:23:21:ca:86:3e:53:
62:5c:92:59:bc:ae:4a:bc:14:13:80:61:a0:be:6d:98:7b:da:
9f:28:be:27:22:8a:6e:7c:f3:a9:4f:e2:88:0d:a1:08:17:48:
a9:10:af:ce:b0:29:14:18:b9:b5:ed:74:8d:1a:35:5f:f7:29:
25:46:80:fe:82:91:9e:4d:9d:fb:a5:04:d2:b0:61:ab:bf:c0:
a8:73:14:87:52:13:90:52:19:c6:96:64:7d:31:7c:51:13:7a:
ae:55:02:8c:e6:d4:f3:2a:94:f6:d8:24:05:28:48:30:ec:38:
d1:d0:d0:7a:e9:c6:dd:97:ae:1f:10:96:c9:60:81:94:1b:25:
c0:07:22:8b:28:9c:3a:e4:82:72:60:21:97:1b:e8:ce:8d:9e:
de:77:46:9d:7a:fd:27:d9:1e:6b:b0:0a:17:c4:87:72:9c:a5:
fb:be:55:f3:59:e6:c6:97:56:e2:b9:26:18:5e:6d:b0:62:bf:
17:40:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:26 2024 by rpki-client on console-fra.rpki-client.org