Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/9rUbqgODgqUX9fT2r5126uKWqYM.roa
File: 9rUbqgODgqUX9fT2r5126uKWqYM.roa (raw, json)
Hash identifier: +HEZ/XDDPgsD4ebZKl+MsFqKCCuVSl+2yRxbIzHeFaA=
Subject key identifier: F6:B5:1B:AA:03:83:82:A5:17:F5:F4:F6:AF:9D:76:EA:E2:96:A9:83
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 0186B7C5D42126B6C2CFC0166D08355EBEBB
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/9rUbqgODgqUX9fT2r5126uKWqYM.roa
Signing time: Mon 06 Mar 2023 16:34:00 +0000
ROA not before: Mon 06 Mar 2023 16:34:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207603
IP address blocks: 193.41.58.0/24 maxlen: 24
185.101.140.0/22 maxlen: 22
2a10:5940::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:c5:d4:21:26:b6:c2:cf:c0:16:6d:08:35:5e:be:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Mar 6 16:34:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b51baa038382a517f5f4f6af9d76eae296a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:e2:b6:25:bd:48:70:16:d4:a7:ca:d2:b5:
32:e4:a8:68:4f:d7:9c:ff:35:e0:cf:96:4b:ca:71:
2f:89:43:5f:6e:cc:60:27:3f:06:81:21:f7:1e:4a:
15:6f:6e:e8:0a:54:59:0f:f0:5c:d7:57:5c:62:f1:
00:2f:27:b8:06:2c:bb:87:dd:2b:02:58:2a:ad:7a:
de:b9:9d:d5:13:3a:d5:98:77:cc:2a:c4:00:a2:fb:
33:fb:cf:a7:dc:21:9e:b4:70:b0:22:cb:52:46:8f:
97:38:d4:8b:28:c9:12:f4:98:15:19:bc:df:e5:13:
58:f5:81:73:22:cf:4e:2b:70:b8:af:84:9f:66:33:
0a:92:14:6f:7b:b4:a0:76:69:ca:95:3d:69:32:72:
dc:7c:74:58:a6:2f:88:2d:82:c1:57:ad:47:1c:f8:
39:2f:9c:94:d6:92:da:cd:05:57:b3:f7:a2:7e:11:
bb:eb:73:f7:ad:61:6e:7a:6f:e1:6c:d2:53:48:d7:
88:0f:8b:c9:d0:d5:f7:ab:62:4a:c6:66:c9:fd:59:
7d:af:99:b0:c5:1a:f2:9c:39:ae:01:b2:be:df:25:
36:4a:5d:28:44:92:bf:49:86:91:a4:4d:ad:81:f4:
83:b0:97:1d:65:24:4a:e2:81:cf:bd:96:2c:d4:68:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:1B:AA:03:83:82:A5:17:F5:F4:F6:AF:9D:76:EA:E2:96:A9:83
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/9rUbqgODgqUX9fT2r5126uKWqYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.140.0/22
193.41.58.0/24
IPv6:
2a10:5940::/29
Signature Algorithm: sha256WithRSAEncryption
85:f6:e8:84:16:20:61:8d:be:55:5b:c2:f8:21:a4:a7:49:22:
77:3c:05:a3:5b:90:cb:02:92:89:4c:ba:33:59:fc:aa:44:c9:
f9:9a:d9:de:3f:f5:fb:c4:b4:14:ac:29:91:bf:33:d7:15:f5:
d5:ed:13:19:1c:f0:e7:62:db:8a:05:19:de:9b:e6:2a:2d:3c:
37:ef:a0:ba:69:79:39:60:f9:b3:5d:f2:47:1d:fb:c9:66:86:
af:01:c9:bc:9e:19:32:30:6d:aa:04:1b:bc:80:0d:24:cb:3d:
66:89:78:7b:0d:cc:96:4c:52:14:42:28:39:73:1e:d4:ab:c5:
4e:de:ee:45:0b:d9:44:18:f2:bb:b6:e4:22:22:1e:c9:ad:d9:
4d:88:06:2f:f6:0c:fb:69:65:a2:dd:d8:e1:c4:e2:d8:41:23:
22:41:62:3e:3a:a8:7e:bd:bd:38:20:79:76:ef:8f:cb:9f:8d:
a5:45:1d:a3:4e:1a:59:18:d9:7e:f4:8e:e9:ce:a6:37:11:83:
17:f6:cb:d8:24:0e:85:37:67:d7:86:2d:ab:ce:5c:78:39:50:
c0:49:25:c6:a3:7f:02:a3:76:7d:c9:cd:66:70:59:63:a3:5c:
3b:05:80:e0:72:23:8e:6d:fb:39:19:6f:34:08:96:6d:f6:6d:
e6:f9:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:02 2024 by rpki-client on console-fra.rpki-client.org