Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/9SK_gojp2tGQPnxX-c-WrqmKdaM.roa
File: 9SK_gojp2tGQPnxX-c-WrqmKdaM.roa (raw, json)
Hash identifier: gi7M/vKqrRuR57VT+JaWNII4z4QTUtT+68GUzeJBS1g=
Subject key identifier: F5:22:BF:82:88:E9:DA:D1:90:3E:7C:57:F9:CF:96:AE:A9:8A:75:A3
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAB0E00AF85C0DFDE3444994F461EA2
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/9SK_gojp2tGQPnxX-c-WrqmKdaM.roa
Signing time: Sun 01 Jan 2023 18:49:42 +0000
ROA not before: Sun 01 Jan 2023 18:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 193.239.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ab:0e:00:af:85:c0:df:de:34:44:99:4f:46:1e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f522bf8288e9dad1903e7c57f9cf96aea98a75a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:ee:77:56:c2:27:e7:7c:57:4d:68:8a:f1:
8f:63:81:da:8a:ee:c6:54:41:cb:00:d3:a9:29:41:
8e:c0:0a:6f:7f:32:83:87:4a:ae:f9:a3:3f:49:6c:
7d:a4:4a:1b:aa:7a:43:42:26:01:d1:e8:14:a4:fb:
eb:54:2d:55:02:27:4b:ee:1f:f9:ab:a2:2f:ef:0a:
c6:38:07:de:4d:64:84:fa:8b:d9:6f:02:38:2c:21:
7e:94:96:f0:94:c2:05:e5:4c:24:82:63:2f:cc:8a:
fa:d0:c2:83:0f:dd:2c:75:a1:43:ec:4f:30:b1:c2:
e5:1d:d1:81:09:57:9a:8d:2d:fd:21:0c:6a:52:c3:
9f:21:84:d4:99:ea:c5:a2:31:65:79:d2:f1:1f:f8:
60:8a:cd:dc:57:05:af:6f:57:04:c8:a1:eb:8b:62:
06:a5:5e:19:6c:c0:d8:b0:cf:ec:15:18:39:ba:1d:
63:a6:30:17:dd:b8:8e:af:a3:d0:75:e1:40:32:c8:
85:b1:42:d0:e9:aa:5b:86:c2:fb:25:e7:41:55:21:
a7:3f:a8:2d:b1:c0:76:4c:eb:78:71:37:d8:fa:33:
db:84:c3:98:49:e7:e3:e9:c6:77:e4:0e:6e:c1:d4:
0f:92:16:59:cc:7b:b0:03:f5:1d:0d:90:7e:6f:ed:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:BF:82:88:E9:DA:D1:90:3E:7C:57:F9:CF:96:AE:A9:8A:75:A3
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/9SK_gojp2tGQPnxX-c-WrqmKdaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c0:07:04:38:26:32:3a:1d:9a:ff:e2:f8:e8:1a:12:3a:78:
4c:0b:d0:38:9a:af:43:3d:f3:32:b1:70:f9:3f:a8:b9:ca:bc:
a8:8f:4e:65:b3:fb:2b:be:90:77:98:f2:93:55:e4:91:b5:a3:
ae:26:85:81:52:09:6e:c9:03:b3:8a:1c:b4:11:0a:45:a4:33:
d0:96:1e:19:4d:39:bd:a3:82:f2:6e:bf:dd:34:c8:1c:b8:59:
9b:68:a6:2a:bc:1f:56:3a:dc:9d:70:11:a5:2b:66:f3:74:e1:
09:14:ae:7f:d0:ae:a8:3a:c6:52:41:03:66:6e:84:15:6e:70:
db:80:11:cb:33:be:40:0b:e0:c8:51:6e:47:b3:8c:f2:07:6e:
c7:35:e6:2d:7b:3c:34:38:37:e8:b2:55:85:a4:e2:77:3a:7d:
52:8e:36:ad:ec:3b:a3:80:73:35:8f:e9:af:6a:58:31:50:65:
1d:f4:76:da:10:a8:b3:8b:c4:42:03:e6:22:44:95:9a:94:8e:
f2:5f:b7:5e:a6:02:1f:05:38:6a:c1:5c:4f:e6:70:df:35:c6:
25:39:a5:a6:f7:f6:ee:da:b5:f1:a3:7f:18:a6:fc:92:81:67:
0d:bd:c7:3a:a4:c4:1c:52:61:a2:e9:d6:0f:7f:ac:19:df:e0:
c2:19:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 05:56:40 2023 by rpki-client on console-fra.rpki-client.org