Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/J2pT6ZSEHtNxJTyRyKxYJ-0VbYo.roa
File: J2pT6ZSEHtNxJTyRyKxYJ-0VbYo.roa (raw, json)
Hash identifier: FQWr7y5X2KXyEhOLCUns/cSubEZ5RDHhewU3HioBrOI=
Subject key identifier: 27:6A:53:E9:94:84:1E:D3:71:25:3C:91:C8:AC:58:27:ED:15:6D:8A
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7D9C3EA6E3F223B93903F08BAD32
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/J2pT6ZSEHtNxJTyRyKxYJ-0VbYo.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212910
IP address blocks: 193.226.198.0/24 maxlen: 24
193.226.210.0/23 maxlen: 23
193.226.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7d:9c:3e:a6:e3:f2:23:b9:39:03:f0:8b:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276a53e994841ed371253c91c8ac5827ed156d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:03:df:7e:d5:a7:5f:af:7c:67:ee:22:6e:
e9:fa:22:b8:f5:12:e5:b1:e6:af:b8:46:45:79:a4:
ab:97:e0:89:96:b0:da:a2:61:da:9e:b6:26:89:cb:
9d:7f:08:72:81:13:cc:fe:7f:2a:28:e0:be:2e:25:
29:19:e1:85:c9:d3:27:5d:8a:62:c1:40:37:81:91:
e1:2a:50:15:9b:78:56:e3:cd:6f:9b:98:2d:e2:7b:
51:fc:97:9d:8e:50:3f:44:f0:b3:75:fc:16:ad:71:
b0:0c:54:4a:35:48:aa:7b:80:8f:ec:e4:fb:af:3f:
ea:5c:b8:29:aa:00:3f:af:0b:5f:ad:e0:1b:6d:8b:
8c:c3:0c:14:eb:b2:e6:c2:b4:99:f4:7b:c9:2b:2e:
d3:e1:e5:ce:38:a9:36:64:0a:51:87:c3:1b:dc:e0:
70:8e:56:23:82:82:37:4c:98:ae:c5:59:c5:d0:79:
88:72:45:e5:ea:8f:ba:a0:fa:a4:63:af:5e:39:57:
ac:7e:0e:03:1b:a9:e7:81:bf:7a:50:8a:d9:95:1e:
8c:13:b7:9b:07:fa:d8:a1:85:31:9d:46:2d:ab:c9:
07:2f:1b:a7:8d:b3:9d:95:b7:d4:c1:34:6b:7a:05:
c7:52:bf:3b:6f:75:7f:5d:ce:ad:05:7a:57:b9:08:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:53:E9:94:84:1E:D3:71:25:3C:91:C8:AC:58:27:ED:15:6D:8A
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/J2pT6ZSEHtNxJTyRyKxYJ-0VbYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.198.0/24
193.226.210.0/23
193.226.216.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a2:1a:42:80:7c:ad:8f:d0:2a:a1:08:71:4f:2f:44:d8:d1:
78:b1:18:a2:13:96:b7:8c:94:af:f6:fc:9d:e1:53:61:5e:22:
ba:ce:8c:fd:2d:a0:c2:5c:1b:c1:39:d1:28:05:db:61:5f:09:
a1:77:d8:65:33:09:84:0a:3f:2d:d5:a0:d3:fc:ba:d8:79:6b:
9e:da:59:62:a3:31:4f:93:62:74:4d:a4:f4:20:ff:ad:e6:42:
cf:9e:ed:33:08:bc:50:6d:ef:4e:7c:3c:7d:87:f4:b8:af:f1:
3a:00:a5:3e:f4:14:33:27:b4:c3:9e:84:1d:ba:a9:a4:68:1a:
49:2f:67:57:b6:3e:a2:67:f7:33:40:28:2a:b8:f3:a4:26:07:
3f:65:01:07:5d:11:f6:d3:bc:c7:66:dc:2f:8c:06:4b:1d:d1:
c9:ce:24:64:13:47:03:49:4d:ca:37:3b:65:ec:3c:51:ed:88:
11:f6:08:60:a5:86:73:49:f1:97:20:8c:11:b5:16:e7:25:07:
bc:a7:95:aa:a2:5a:39:f2:51:fc:21:b3:69:77:50:74:37:4d:
9a:14:62:23:89:3c:82:19:17:a8:7b:ea:0d:d8:80:38:68:7a:
d3:14:d2:bc:9a:a9:c7:f9:53:0a:4a:b0:ba:b4:fc:2c:27:0d:
14:76:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:13 2024 by rpki-client on console-fra.rpki-client.org