Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/ck5r47gY_UqZ8V7Axe2emwoqzjo.roa
File: ck5r47gY_UqZ8V7Axe2emwoqzjo.roa (raw, json)
Hash identifier: 4B8DTfPF0yappc4lGVXCvpLuuh0ArSxd8V8xZbOqSD0=
Subject key identifier: 72:4E:6B:E3:B8:18:FD:4A:99:F1:5E:C0:C5:ED:9E:9B:0A:2A:CE:3A
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 01856F66C4DE02CE730CFE836DE78DC783A5
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/ck5r47gY_UqZ8V7Axe2emwoqzjo.roa
Signing time: Sun 01 Jan 2023 22:14:44 +0000
ROA not before: Sun 01 Jan 2023 22:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51284
IP address blocks: 193.201.146.128/25 maxlen: 25
193.161.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c4:de:02:ce:73:0c:fe:83:6d:e7:8d:c7:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Jan 1 22:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724e6be3b818fd4a99f15ec0c5ed9e9b0a2ace3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:84:67:ad:44:3b:14:5d:e2:c3:a7:f9:fe:50:
63:a7:ba:b4:26:01:14:56:44:e9:ac:45:a2:f8:c7:
a8:3d:75:3a:3a:5e:ad:91:0f:2d:32:26:5a:02:0c:
b4:8d:83:e1:f8:dd:1a:97:b9:22:6c:cc:75:35:73:
c7:fa:70:3d:dd:4d:2d:7d:a4:da:e8:3f:cb:d8:eb:
cc:9f:ca:c2:16:9a:59:a2:93:86:ad:06:fd:d5:f6:
1c:81:b4:2b:55:e9:62:0c:07:c5:73:7e:60:e0:57:
71:4c:07:cc:36:96:a6:73:04:7b:42:6d:15:e1:ee:
11:f6:97:09:3f:94:d2:83:35:d6:62:c5:36:d0:f5:
80:63:cf:5c:fc:9a:b4:82:46:1f:6c:1d:d3:b3:4b:
a9:63:cb:a3:c0:3d:24:9b:4f:b7:8c:67:a1:04:46:
6b:57:7a:6f:92:e6:b9:d3:7e:01:ee:1c:6a:33:f4:
5d:7b:17:4a:17:62:4c:78:8f:9d:70:63:1c:98:bc:
04:69:5a:6b:ce:59:6c:3a:f9:2d:49:20:ef:91:8e:
0f:34:50:35:e3:18:b6:f3:84:a8:b1:0b:eb:08:f6:
b3:db:7b:64:c9:24:ca:57:e1:31:48:80:61:9b:ff:
4a:68:7b:3e:ed:96:c8:30:b0:64:60:b7:f0:45:9c:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:6B:E3:B8:18:FD:4A:99:F1:5E:C0:C5:ED:9E:9B:0A:2A:CE:3A
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/ck5r47gY_UqZ8V7Axe2emwoqzjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.0.0/24
193.201.146.128/25
Signature Algorithm: sha256WithRSAEncryption
21:7a:0e:44:8f:d4:e8:68:be:64:f6:18:61:6e:32:c9:de:47:
5b:f2:f2:d3:e3:fe:65:95:f2:72:7c:c8:a6:40:e9:bf:80:4b:
ea:03:5b:f8:fa:86:52:2a:35:8e:80:ce:f7:39:85:69:5f:d4:
c4:1a:0f:18:3f:87:b8:5d:8b:49:80:cf:c1:8d:b2:57:2f:cd:
1c:84:ff:59:65:cc:0f:4a:06:43:b4:ee:32:93:3e:88:94:b4:
e6:a5:f6:43:bb:44:5b:66:56:89:1b:ea:e3:09:bd:e0:d3:39:
97:cf:c8:cd:34:a0:a2:3d:a9:bd:05:bb:dd:28:2d:b6:1d:dd:
71:26:86:cb:52:6a:56:3c:b8:3a:44:8a:58:a0:cb:e6:bc:72:
1c:14:2d:0f:c4:72:24:73:1b:8f:bc:ab:c8:5f:dc:09:09:be:
42:7d:6e:dd:b0:37:35:c8:a8:8c:a3:fc:97:1f:6e:a8:95:e0:
1a:9c:81:0a:fd:87:92:e5:58:d5:92:74:0f:be:12:d8:54:df:
dd:dd:5c:52:fd:b1:d7:68:08:24:37:35:d2:af:62:3b:14:ad:
f3:3b:54:d9:cc:fd:f4:29:8d:35:f0:3a:d1:fe:2e:09:ba:1e:
ee:a9:49:4a:07:1a:f5:51:a3:a2:d9:0c:b3:51:38:d0:04:4f:
c0:4e:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:22 2024 by rpki-client on console-fra.rpki-client.org