Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FXjNDF-xZvT60vjsAvrfNc9_sA.roa
File: 9FXjNDF-xZvT60vjsAvrfNc9_sA.roa (raw, json)
Hash identifier: 4ufphZLrmHRc6m7eYHGRiiepDnJR6NnrnQC8zKp3g+U=
Subject key identifier: F4:55:E3:34:31:7E:C5:9B:D3:EB:4B:E3:B0:0B:EB:7C:D7:3D:FE:C0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B7E65971CFDFE1186A0DDFD22021
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FXjNDF-xZvT60vjsAvrfNc9_sA.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206582
IP address blocks: 193.31.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b7:e6:59:71:cf:df:e1:18:6a:0d:df:d2:20:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f455e334317ec59bd3eb4be3b00beb7cd73dfec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:0c:4b:f1:5d:a7:a9:5e:82:26:7d:a5:77:
79:8b:19:db:0e:fe:1b:bf:13:73:19:41:a5:2f:28:
6a:c5:9b:5d:ac:54:2f:23:4a:89:22:dc:1e:56:c3:
67:02:fa:1a:3a:54:f8:12:fb:c6:bd:6e:5b:40:5f:
02:f3:69:09:c8:c3:f2:2e:7c:d0:ce:b5:a9:8d:38:
13:42:9b:0e:8d:c9:35:d4:5a:32:cc:f6:0e:01:d2:
4f:cf:24:c5:4f:00:8f:bd:15:07:68:fe:a7:33:e3:
82:51:a5:d7:25:cc:9a:13:8d:71:bf:e2:ca:a1:dc:
9a:15:06:34:d3:26:8e:a5:49:55:cf:27:7b:72:b5:
ea:eb:be:fb:37:18:f8:88:4a:76:75:1a:3d:f0:e5:
0e:f2:d6:e8:06:00:8d:e5:80:66:5a:70:b9:50:32:
23:0b:05:e9:4a:f1:a2:83:e3:65:5e:90:ae:e7:af:
74:a7:ac:af:ff:c0:0e:fa:c9:47:2f:88:2a:13:ef:
71:13:d4:e5:18:42:99:7a:44:07:96:0a:b9:31:6b:
71:75:73:95:e6:ac:c8:f7:b7:7e:4d:df:58:ab:c6:
f9:64:98:94:f2:2f:8a:e3:47:11:0b:a2:44:61:9b:
2c:4c:e0:51:4f:43:09:56:5c:bc:3a:51:3b:4e:3f:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:55:E3:34:31:7E:C5:9B:D3:EB:4B:E3:B0:0B:EB:7C:D7:3D:FE:C0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9FXjNDF-xZvT60vjsAvrfNc9_sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b4:f2:9a:bc:46:d5:bb:7e:47:25:bd:ec:5c:dd:08:a5:2b:
2c:64:49:09:9a:8f:f0:d2:ce:01:19:9c:68:c5:e1:0d:88:f5:
b4:f9:d8:54:80:94:7a:a8:3a:d0:e3:14:36:fc:ec:91:30:07:
79:f5:01:16:54:43:65:36:52:7c:01:ec:6f:c5:df:dc:2e:05:
3a:fe:33:37:2e:b4:7b:50:b7:1c:07:03:fb:8c:60:58:b1:ca:
cf:8b:06:ff:49:87:98:34:92:ef:9f:c9:f0:b2:8c:57:1b:90:
5d:40:7b:21:d4:2d:83:b5:17:b7:ab:91:22:3d:3a:be:5f:c6:
aa:8c:4d:3a:8c:07:e3:77:45:45:19:c4:95:11:02:78:1d:ff:
9f:83:d0:6b:97:ad:45:3c:0b:3b:1c:a4:e5:4d:88:a3:e3:e2:
fc:1c:e6:34:e4:93:43:f7:97:77:6a:35:42:e8:75:8c:08:33:
9a:0d:46:aa:1b:1f:85:fa:4c:f9:f8:9c:77:23:ae:a8:27:2a:
95:af:83:a2:cb:69:dc:c9:3c:db:c1:45:0f:e7:cf:62:35:9e:
81:92:a8:d2:54:6b:cf:67:88:c8:6d:39:2e:ae:8d:38:b9:56:
f8:b4:73:5e:37:16:3f:13:37:b4:12:30:c3:18:1e:db:22:91:
18:3a:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org