Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/I5Q_9GiFAczXUFZzaWP3bfT3XWY.roa
File: I5Q_9GiFAczXUFZzaWP3bfT3XWY.roa (raw, json)
Hash identifier: q2UiUpeU5fjJ7/4lwry3w/RhQFd1lfFByy00CJMvuFY=
Subject key identifier: 23:94:3F:F4:68:85:01:CC:D7:50:56:73:69:63:F7:6D:F4:F7:5D:66
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01886BE52670CDEFDCE848C4C59950CDF40A
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/I5Q_9GiFAczXUFZzaWP3bfT3XWY.roa
Signing time: Tue 30 May 2023 09:02:39 +0000
ROA not before: Tue 30 May 2023 09:02:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15943
IP address blocks: 193.39.204.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:e5:26:70:cd:ef:dc:e8:48:c4:c5:99:50:cd:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: May 30 09:02:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23943ff4688501ccd75056736963f76df4f75d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:c6:29:a4:0e:78:51:6e:e5:81:b7:5e:16:
fa:ae:89:6b:1a:86:be:bc:45:25:c6:de:dd:36:04:
b8:aa:e3:38:13:ca:f5:f6:e8:bc:cf:28:51:8d:50:
aa:1a:21:f1:e8:9a:eb:a2:31:6e:2f:65:d1:c6:75:
29:2f:b0:a9:9a:6b:d3:a5:01:ce:e2:90:3f:6a:bd:
c1:ea:91:d5:76:fa:cb:39:a9:35:d9:7e:53:0e:a0:
e2:12:6f:ba:70:d5:69:1a:33:28:03:7c:c0:f3:42:
ed:19:4c:01:60:ad:c3:f3:db:35:9c:27:a8:46:85:
d7:64:41:e1:4d:fb:b2:21:5a:f6:45:fd:be:78:e5:
2d:a3:cc:6c:fa:8e:ec:8f:fb:94:b1:7c:b7:42:0f:
17:34:17:73:f1:8f:cd:a0:cc:b2:fe:05:8a:0e:16:
07:9a:32:32:b5:a5:3d:72:9f:9d:f9:f7:01:29:e7:
28:02:9c:94:fe:67:87:d8:61:de:7c:c2:e7:6a:8c:
e8:8e:5b:b7:7f:44:f6:8e:d7:66:99:fd:cf:78:08:
83:98:37:6f:84:6a:d3:43:ba:c7:e9:11:a4:97:e2:
2a:aa:51:b3:4f:a6:76:db:96:66:eb:9d:49:74:24:
66:3c:26:c9:61:35:ea:0a:01:62:9a:a3:bf:12:2a:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:3F:F4:68:85:01:CC:D7:50:56:73:69:63:F7:6D:F4:F7:5D:66
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/I5Q_9GiFAczXUFZzaWP3bfT3XWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:78:1b:b1:e1:3f:e1:43:e3:88:3c:f2:89:53:02:84:e7:cf:
65:de:90:2b:0d:fb:4e:f7:e5:3c:b6:ce:33:f5:6d:c5:23:1e:
ad:aa:2c:9a:f1:ac:44:9c:04:72:5c:51:21:ba:88:42:01:e6:
9e:b2:de:4e:b8:8f:5e:8f:db:1f:93:ae:ef:d2:ad:c2:e5:f1:
53:c3:72:75:f9:4e:4a:a4:3a:96:d9:06:c2:23:4e:68:d7:3e:
6e:aa:1b:97:2b:44:86:6a:8f:b4:28:09:01:ac:6a:98:09:fa:
c5:04:74:cf:4c:3d:ce:1f:42:d6:df:7e:3a:e6:67:a9:5f:31:
2f:4c:b7:ed:4f:8f:f1:9a:8f:bc:4d:7c:34:94:a8:44:82:fd:
db:a0:09:e6:19:3f:d0:9e:72:5a:5d:48:30:43:06:94:9f:55:
ee:08:0a:7f:5c:ae:2c:e5:98:8a:6b:d4:13:18:93:47:39:06:
d2:b8:bb:c6:52:d3:11:89:7a:e6:72:b5:a8:6e:10:c9:66:1b:
a0:ed:59:88:d9:9b:31:ec:88:06:d2:ee:60:91:8b:f4:84:c1:
a0:06:0d:4d:45:a6:76:6e:33:22:ff:39:fb:ab:ce:0e:39:ae:
01:f2:f9:7e:b2:96:ed:b3:88:04:7e:b5:db:06:91:70:d5:a2:
8c:83:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:05 2024 by rpki-client on console-ams.rpki-client.org