Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1--Gmeqb-CKMOHydWEQ9nc_g-aYM.roa
File: 1--Gmeqb-CKMOHydWEQ9nc_g-aYM.roa (raw, json)
Hash identifier: ZBci3dIp1Kufpt0f1xq/Xck8VX9nxZKWmnXOf/QwxX4=
Subject key identifier: FB:E1:A6:7A:A6:FE:08:A3:0E:1F:27:56:11:0F:67:73:F8:3E:69:83
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA2660F3D14F3F37783A40AEB4B70C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1--Gmeqb-CKMOHydWEQ9nc_g-aYM.roa
Signing time: Sun 01 Jan 2023 18:48:42 +0000
ROA not before: Sun 01 Jan 2023 18:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:26:60:f3:d1:4f:3f:37:78:3a:40:ae:b4:b7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbe1a67aa6fe08a30e1f2756110f6773f83e6983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:7f:38:10:53:b1:ab:68:48:e3:bd:d1:44:
33:5f:9a:2b:59:8f:f0:0e:67:79:31:9e:04:c3:90:
4c:32:ab:80:35:38:83:e3:90:59:98:07:2c:bc:fa:
87:60:7a:1d:45:75:5b:65:d9:c2:82:e0:f9:fc:28:
89:49:47:71:8e:a1:cb:25:11:42:ba:73:77:93:28:
ca:a9:bb:8a:cd:30:6c:eb:e2:a6:c6:97:14:8c:64:
09:bb:54:c0:69:87:cf:7d:d9:de:1a:9f:66:19:7d:
34:18:2c:d8:70:92:9f:3b:f6:84:5f:0a:7f:65:04:
40:b3:55:fd:73:d4:34:2c:34:d4:14:9a:56:21:e7:
8d:ea:8f:1f:f6:ae:c0:c5:7c:88:df:6e:db:b4:3a:
69:aa:ff:94:c6:ce:cb:5a:20:a2:4f:0e:8b:ab:bc:
f2:f4:81:6a:e5:a1:da:85:18:3d:d9:78:a5:08:0b:
9a:0a:52:7c:27:78:a5:b6:35:7d:a6:2b:d8:b7:a7:
8d:03:5b:37:bc:ee:e7:2e:ea:08:7c:3b:89:24:d6:
5c:58:93:ff:b2:0f:8f:7f:c4:dd:a9:1a:f4:95:5a:
d4:c6:fe:7b:a5:11:89:c3:4d:ce:7f:73:bd:ca:45:
d4:f3:b4:c2:3a:87:3c:4c:43:21:25:79:ba:52:2a:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E1:A6:7A:A6:FE:08:A3:0E:1F:27:56:11:0F:67:73:F8:3E:69:83
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1--Gmeqb-CKMOHydWEQ9nc_g-aYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bc:18:70:34:51:ef:28:f5:41:67:f5:04:de:73:b5:a5:46:
a3:db:e6:6f:15:5c:dc:d6:d7:9a:bf:36:e6:fb:b7:11:a0:3d:
47:d1:55:7e:67:7b:44:27:fb:4c:73:d5:80:5b:b6:b1:7b:1e:
47:eb:78:e7:5c:fc:9c:20:1b:cd:03:0f:34:1b:6f:a4:d9:cb:
ee:d4:6e:7f:fc:ec:2a:1d:9e:cc:e7:a1:38:d3:16:45:93:4f:
be:ab:60:f1:13:06:1f:38:88:92:b3:da:59:47:3f:76:84:38:
13:8d:6f:30:a0:c3:86:38:ab:d5:01:5b:68:7e:6d:07:16:1a:
1b:bd:ad:14:d3:f9:92:16:d5:80:7f:9b:af:39:d2:a7:be:11:
5e:c5:cf:1a:c6:3c:53:2d:42:51:85:f2:ff:8b:53:db:b9:8a:
72:00:f7:fc:6a:62:7c:20:b6:ec:d1:e2:82:b4:90:9e:38:64:
7a:9a:7f:3c:10:4b:0c:d1:89:04:e8:0b:62:6e:6b:47:46:11:
43:78:5a:fb:4e:72:90:33:9e:c1:60:59:8b:1a:f8:ef:c9:9c:
62:4f:0e:8d:e0:cc:69:cb:5f:b1:87:f4:70:54:4b:f4:56:20:
f9:a6:ac:46:6a:ee:70:bf:1d:7f:c7:07:0f:16:db:48:82:06:
f3:ad:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org