Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fIPHZ90NZ0FgFA2IF04wRZZjj3E.roa
File: fIPHZ90NZ0FgFA2IF04wRZZjj3E.roa (raw, json)
Hash identifier: +YyHoqsC7dMadAlgV12f8OBpT6qTUvcctS/L8+xuwvA=
Subject key identifier: 7C:83:C7:67:DD:0D:67:41:60:14:0D:88:17:4E:30:45:96:63:8F:71
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018A2AEF9700D4EE0ED2DE7C6565B9B84337
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fIPHZ90NZ0FgFA2IF04wRZZjj3E.roa
Signing time: Fri 25 Aug 2023 04:24:19 +0000
ROA not before: Fri 25 Aug 2023 04:24:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:ef:97:00:d4:ee:0e:d2:de:7c:65:65:b9:b8:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Aug 25 04:24:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c83c767dd0d674160140d88174e304596638f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:bb:59:04:e2:bd:18:fd:14:42:5d:2d:15:
f8:0b:f2:c0:ec:af:47:c6:e4:63:82:16:ec:07:dc:
ea:f3:3d:49:e1:3c:25:2c:36:d5:26:0b:04:c0:ed:
7d:47:ec:8e:df:7f:d5:ca:cb:62:ed:bd:6d:59:b1:
1e:d8:c2:cd:fa:18:0c:37:f2:e8:0b:08:3a:8c:5c:
c0:76:74:15:60:62:4c:f8:fd:fe:86:2d:58:17:9b:
5b:f4:bb:25:33:31:a0:0a:57:b3:c6:0c:3c:2b:9d:
a6:77:e3:28:52:1a:e5:24:ad:df:2f:ba:5b:db:be:
8c:e5:11:fd:ca:b1:32:a5:6f:68:de:e5:92:fd:20:
dd:c6:bc:a3:47:bc:af:52:2b:09:f4:01:d5:ce:1d:
cd:1b:6b:6b:f7:de:c7:1d:00:74:54:87:f7:ea:5d:
41:40:f7:41:2f:a2:7f:1e:54:e0:6f:e4:28:27:3f:
5b:9a:73:09:34:84:98:6c:cc:61:d6:af:f6:14:8e:
ba:4b:75:d8:f3:e9:e2:ce:19:8a:7e:ce:75:57:33:
f3:03:a3:c4:b0:10:ef:af:c6:3f:db:b1:8c:7b:81:
93:da:44:40:8e:e2:d1:5a:88:c2:7f:83:85:44:99:
42:5d:91:f2:28:e3:55:92:76:cf:1e:2c:1b:b6:d8:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:C7:67:DD:0D:67:41:60:14:0D:88:17:4E:30:45:96:63:8F:71
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fIPHZ90NZ0FgFA2IF04wRZZjj3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cc:81:6f:37:df:e2:eb:4c:8a:92:1d:62:e2:f9:31:f5:3f:
56:3d:57:79:d3:b5:a0:91:e6:e5:8c:ba:57:ea:9c:4e:f2:0a:
91:42:95:de:c0:d9:90:ea:42:c0:9b:9e:f3:10:10:82:06:65:
50:37:70:5e:56:00:7e:98:6f:28:2e:da:41:fe:a2:51:23:e4:
d8:e0:66:97:c8:4b:28:8f:88:52:92:14:f8:d1:a9:1a:1c:fa:
ae:e0:6f:66:e0:e0:53:f7:a5:6b:4d:26:f0:eb:a6:07:18:f7:
bf:d8:20:38:c5:bb:c8:bf:da:53:20:24:9b:3b:f8:46:9b:bb:
b8:07:1c:7e:39:9f:da:da:16:0a:a4:1d:17:06:ab:9e:2c:c1:
13:46:ae:88:d1:5d:9a:3a:e5:19:ac:38:0f:df:7f:3e:d9:18:
77:f8:9d:e9:4d:85:03:40:4b:e1:52:0e:6f:aa:44:07:5d:23:
60:35:d0:b7:b1:f0:e9:2c:d8:a8:66:68:e6:39:fe:d7:c9:89:
5c:59:5a:a2:82:88:bb:ce:e1:39:6d:48:08:97:bf:7c:65:ce:
db:a0:fe:55:0a:01:8a:f0:cc:96:de:07:26:b7:3f:a3:92:e2:
d5:fa:41:36:74:b3:0c:b1:ca:5c:ea:e0:78:ef:97:0e:aa:0a:
4e:3f:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 18:59:35 2023 by rpki-client on console-fra.rpki-client.org