Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H0r5sl8AnHHHO5KtuOel-k5cbsw.roa
File: H0r5sl8AnHHHO5KtuOel-k5cbsw.roa (raw, json)
Hash identifier: Z4jyiENmD0RXmUlAONdLYK2FgplGA8OvBjskMuyw7zc=
Subject key identifier: 1F:4A:F9:B2:5F:00:9C:71:C7:3B:92:AD:B8:E7:A5:FA:4E:5C:6E:CC
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0188E3109DA744F10EB04C0D7DE4C8B758D9
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H0r5sl8AnHHHO5KtuOel-k5cbsw.roa
Signing time: Thu 22 Jun 2023 12:24:56 +0000
ROA not before: Thu 22 Jun 2023 12:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.239.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:10:9d:a7:44:f1:0e:b0:4c:0d:7d:e4:c8:b7:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jun 22 12:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f4af9b25f009c71c73b92adb8e7a5fa4e5c6ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:68:06:7d:1c:be:e9:15:97:13:93:19:c1:
3f:56:d4:fc:41:f7:fe:23:5a:78:bc:c4:32:b9:08:
9a:e8:a8:3c:0f:4f:8a:4a:6b:46:54:26:b8:ff:af:
aa:37:4a:14:4d:68:cf:d6:2e:55:fb:fb:ab:80:b0:
f3:d8:70:a0:23:4c:d5:91:b7:e9:84:13:96:2c:e4:
4b:a1:43:64:23:e4:6d:37:2c:c1:a4:d1:1c:c2:28:
3e:f5:1e:44:e3:b7:94:13:44:2f:a6:86:33:81:64:
b7:d0:a5:51:84:f0:23:fb:a3:f6:8b:56:b7:cc:59:
df:57:8c:0a:ba:bb:d6:db:5a:47:59:22:5e:0d:1e:
65:27:50:1d:b7:8a:5a:04:c6:b8:63:99:04:79:58:
9b:80:25:90:25:a5:69:13:be:01:c7:02:68:0d:68:
e1:a9:99:9a:38:34:b5:74:83:e1:38:ed:b6:2f:94:
97:8b:88:16:84:eb:66:60:33:e9:d5:19:62:df:24:
03:8a:58:a4:95:5f:a2:01:3e:44:91:68:64:2a:de:
eb:4d:49:0e:6d:b5:70:4a:57:4a:56:2d:d7:25:91:
7c:f2:0e:04:71:4f:48:70:08:7a:7d:3c:00:86:05:
fe:c6:53:a4:fb:97:b9:0e:5d:e7:db:85:d8:56:7d:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:F9:B2:5F:00:9C:71:C7:3B:92:AD:B8:E7:A5:FA:4E:5C:6E:CC
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H0r5sl8AnHHHO5KtuOel-k5cbsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ee:ee:1a:8e:b1:6d:e7:78:75:28:dc:ef:30:f0:1c:9d:a2:
a8:4c:df:d3:f5:d5:67:c9:2c:33:28:73:ac:d2:1f:97:fa:3e:
bc:20:e1:54:ce:0a:6f:3c:6a:5e:23:e6:f6:7e:f7:09:1c:66:
57:0b:27:1a:08:4c:2f:d2:30:ca:aa:7e:d7:ed:49:59:55:03:
62:2c:80:7a:44:99:2a:0e:16:68:f4:02:80:61:7b:eb:6d:5c:
da:12:a8:b5:04:9f:39:38:68:a3:85:59:5f:ec:ef:08:3d:53:
0b:28:29:07:73:21:67:a9:ec:a7:cb:9b:37:17:e2:df:2b:c0:
e5:ba:5f:ab:ce:38:ec:6c:e0:56:64:f9:1e:2d:fa:5e:53:f0:
5a:d7:a0:1e:75:f1:a5:3b:30:ab:1e:b5:a1:14:78:4e:d0:b5:
81:8e:5d:15:aa:79:8e:27:2b:d9:b9:e8:67:25:86:35:56:07:
13:15:5b:ae:a4:d3:99:83:a2:f8:e4:1d:e1:eb:b1:d4:87:86:
75:9f:2d:42:4b:03:9c:a0:5f:f0:51:5f:e3:3c:83:89:d0:5f:
f8:8e:cb:24:55:a0:7c:0d:25:a2:a0:1c:c2:4b:4b:49:3c:96:
22:bc:bb:8b:76:f2:8f:e9:56:32:dd:39:f9:a4:d8:5b:55:fd:
30:fe:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org