Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9lTVxhdiUHee96WgnQSzVehKtew.roa
File: 9lTVxhdiUHee96WgnQSzVehKtew.roa (raw, json)
Hash identifier: FXG8viteh1QHD7obhLNVQO1NDguL3m4TjyrW4gtIBPo=
Subject key identifier: F6:54:D5:C6:17:62:50:77:9E:F7:A5:A0:9D:04:B3:55:E8:4A:B5:EC
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 018679A1439B20B951D917B1C56C610F7FFD
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9lTVxhdiUHee96WgnQSzVehKtew.roa
Signing time: Wed 22 Feb 2023 14:57:36 +0000
ROA not before: Wed 22 Feb 2023 14:57:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.93.32.0/24 maxlen: 24
194.93.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:a1:43:9b:20:b9:51:d9:17:b1:c5:6c:61:0f:7f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Feb 22 14:57:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f654d5c6176250779ef7a5a09d04b355e84ab5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:2e:68:68:7d:91:03:24:8d:63:82:71:54:
b4:0e:55:87:62:19:01:af:03:d3:ed:a8:a7:10:20:
53:7a:82:21:cf:f8:49:53:13:f1:f4:0f:0e:75:5e:
ee:05:19:7f:96:81:2a:49:4d:46:2a:5c:66:bc:53:
5b:5b:a0:cf:20:ff:47:58:73:96:96:90:20:60:a0:
de:ee:ab:d5:d9:64:e5:2d:d0:6e:f4:1a:ac:9c:99:
c7:75:fc:46:c2:b1:6b:19:52:a3:c0:bd:35:47:48:
d1:41:d6:bc:3e:45:54:bb:4c:98:bc:12:b7:84:35:
53:24:e8:b4:c1:bd:3a:03:f7:0a:2b:59:f6:a7:60:
71:9a:7b:49:66:bb:36:1e:a6:1a:6f:25:58:29:76:
b8:30:9c:f4:70:e8:e3:b4:d7:5e:8e:bd:59:14:b4:
af:aa:6f:82:9b:ff:ac:cc:21:a8:3b:6c:bf:10:e3:
eb:35:34:11:c6:4d:23:a3:e4:b3:7b:5f:bc:15:14:
1b:26:9a:4c:b4:0f:03:e8:42:7c:5e:9b:5e:c2:56:
0d:26:b4:f2:cf:f8:b0:39:0d:41:0d:ff:a0:87:34:
73:0a:b7:5e:7a:59:fb:0e:c2:fc:97:d3:0d:b6:70:
57:57:e9:73:c0:83:07:93:17:09:5a:1e:44:c9:1b:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:D5:C6:17:62:50:77:9E:F7:A5:A0:9D:04:B3:55:E8:4A:B5:EC
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9lTVxhdiUHee96WgnQSzVehKtew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:94:51:26:ab:5c:c9:77:e2:d3:a6:1a:e4:2a:61:60:d7:c7:
17:e9:85:b9:30:c6:76:6a:1d:93:6c:39:b4:8c:0a:0e:48:48:
ae:3f:b2:30:19:e9:d1:dd:1a:6e:14:37:cf:17:62:47:91:e9:
cd:d9:e1:e8:4f:aa:ed:33:3a:25:4a:73:50:95:64:7e:52:9d:
bc:d5:4a:40:b4:5a:ed:46:69:49:0d:88:8f:a1:2a:b1:b7:1b:
53:a0:25:0f:c2:f8:2f:56:25:cd:a7:9a:06:3d:9c:6d:f3:7d:
85:1c:74:cf:bb:07:b3:b6:97:91:ea:a9:32:69:d2:8e:36:91:
b4:b1:c3:fc:cb:33:f6:06:07:0c:3e:7e:67:f2:e7:5c:7e:32:
ea:81:00:c0:49:b2:e0:7b:9c:0b:4e:01:a5:15:6e:22:8d:6a:
3b:2f:1d:e5:eb:3f:1d:aa:88:4b:a5:f3:68:ae:92:f1:70:6b:
0b:ec:ff:5e:7d:44:74:84:8b:29:1c:14:d7:00:37:a2:4b:24:
1a:39:60:a5:90:57:49:ce:97:04:d6:75:39:45:55:0f:29:3a:
9d:ea:b2:b5:6c:03:50:11:b7:3a:da:5a:bb:c4:ee:cc:47:68:
b7:ff:c3:1d:ec:0e:a4:7f:02:f4:ff:c5:79:42:6a:f7:af:55:
08:3b:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:09 2023 by rpki-client on console-fra.rpki-client.org