Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S73wbWTiJfsnzacQVduK6tuWl6k.roa
File: S73wbWTiJfsnzacQVduK6tuWl6k.roa (raw, json)
Hash identifier: HSWPvFhrfqVvij3cFfBiTGOCOExiHJ2WGBNs2MZDuSw=
Subject key identifier: 4B:BD:F0:6D:64:E2:25:FB:27:CD:A7:10:55:DB:8A:EA:DB:96:97:A9
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CAECB124BB8B0BA957A7996F2E15C
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S73wbWTiJfsnzacQVduK6tuWl6k.roa
Signing time: Mon 02 Jan 2023 16:24:43 +0000
ROA not before: Mon 02 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14969
IP address blocks: 193.118.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:ae:cb:12:4b:b8:b0:ba:95:7a:79:96:f2:e1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbdf06d64e225fb27cda71055db8aeadb9697a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:b1:7e:48:06:3c:f0:6f:73:44:ea:fc:83:
1b:74:89:0e:de:2b:1c:16:26:19:5b:8e:f7:51:0e:
43:52:8a:94:1e:a7:3e:a3:66:f3:27:9f:c2:31:9a:
95:9f:0c:ba:44:b2:e3:30:15:d8:d1:a5:5d:86:c4:
d6:90:c6:ec:f2:41:f0:e1:27:dd:73:b6:66:88:66:
f7:11:66:e0:d4:16:f0:af:01:8c:a8:3d:b7:9a:41:
cf:ce:1e:83:47:8b:f8:10:37:a9:96:74:9e:de:0a:
2b:53:4d:b1:c8:36:5f:90:2c:46:90:bc:4c:42:51:
2b:fb:c9:73:b5:a9:75:b5:49:1b:60:c8:bf:4f:c9:
63:64:eb:e7:91:99:36:53:74:67:e3:14:45:74:69:
fa:85:bd:fe:72:6d:a3:f4:d9:85:27:0c:f0:b1:0e:
03:5d:f8:cd:b2:83:55:99:1a:76:37:8f:31:f0:4f:
c2:38:0a:63:97:f8:e1:ab:41:54:1a:b0:b5:b2:89:
ee:0d:99:6b:36:80:f7:e7:3e:7d:80:e6:80:65:57:
50:04:22:d3:0b:3c:26:d2:ef:da:61:9c:26:23:69:
6c:02:ce:23:0b:60:f5:67:28:78:81:3a:9c:6e:e9:
28:e3:e9:c5:39:de:a9:55:d1:61:60:1d:b9:29:c3:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:F0:6D:64:E2:25:FB:27:CD:A7:10:55:DB:8A:EA:DB:96:97:A9
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S73wbWTiJfsnzacQVduK6tuWl6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.163.0/24
Signature Algorithm: sha256WithRSAEncryption
01:72:58:52:0a:8f:ca:f4:e3:68:59:b3:08:21:cf:8d:9b:4c:
1d:db:0e:7d:31:30:9f:57:f0:64:1b:db:d7:81:04:c8:27:1e:
83:15:a1:7b:c3:4c:ab:fb:d4:d2:9a:98:90:fc:cc:a3:67:65:
4e:3f:13:e2:a8:a2:f0:f3:21:0c:b4:78:2a:52:2d:92:04:2a:
b4:47:12:4e:3e:ec:6d:8a:25:05:a2:88:92:aa:16:48:1d:c4:
73:ab:8e:01:79:fa:ea:49:90:30:da:4d:5c:11:dc:b3:ad:2f:
9b:b9:f9:1a:08:cb:d4:78:9e:8e:ed:c9:e8:bb:bb:a1:bb:35:
6c:6a:65:7a:b9:e5:76:33:98:80:a1:87:8b:45:1b:40:64:3b:
b5:c0:1e:b6:89:ac:0a:4f:e3:4c:73:2a:0f:70:9c:37:d0:27:
4d:25:f7:b4:3f:7f:19:f9:8d:63:cd:29:a3:1e:a1:50:52:d5:
6b:6c:46:61:45:df:7b:e0:2c:23:ff:37:3e:8a:4f:1f:a4:ba:
6e:c0:4e:8e:f9:f5:ad:d6:9c:ca:12:38:10:4f:8e:fc:29:da:
b4:36:45:1a:84:36:fe:e1:ad:29:cf:15:66:08:ec:5a:1b:b1:
55:b6:bd:a4:4f:29:47:96:f3:5e:16:67:e6:75:13:90:15:49:
6d:fd:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 12:24:38 2023 by rpki-client on console-fra.rpki-client.org