Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/1-JAgV2pDTwHVcNjnQWxEtugxUrw.roa
File: 1-JAgV2pDTwHVcNjnQWxEtugxUrw.roa (raw, json)
Hash identifier: 3Xwqv9P3VAG7BlYMsDqkyOxAwu6pqdYf2WRlEYbKeto=
Subject key identifier: F8:90:20:57:6A:43:4F:01:D5:70:D8:E7:41:6C:44:B6:E8:31:52:BC
Certificate issuer: /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial: 018A83A5B7A5E8ADC2EC1DFFA1332AAA1141
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/1-JAgV2pDTwHVcNjnQWxEtugxUrw.roa
Signing time: Mon 11 Sep 2023 09:49:50 +0000
ROA not before: Mon 11 Sep 2023 09:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34397
IP address blocks: 193.8.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:a5:b7:a5:e8:ad:c2:ec:1d:ff:a1:33:2a:aa:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
Validity
Not Before: Sep 11 09:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89020576a434f01d570d8e7416c44b6e83152bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:a4:a5:b0:f1:69:40:89:4b:c0:6c:0b:7d:
00:ad:22:5f:fa:c6:fe:0d:12:20:b4:39:48:dd:49:
ab:f9:97:8e:e1:d1:fd:e4:61:65:c3:55:37:1c:41:
67:3d:44:b7:a3:cd:bb:22:c9:7f:cb:50:2d:93:f7:
8a:9c:5a:3d:95:88:80:0b:10:35:f2:82:42:cf:00:
a7:e0:0a:2b:f1:f6:19:09:a1:f8:61:b8:3d:e4:29:
d2:86:73:5a:a8:46:36:8b:5e:96:6a:cb:4c:ca:eb:
40:e9:ff:79:5f:4b:b7:cc:41:cd:3d:72:04:b8:5e:
0e:aa:d5:44:75:03:63:b4:33:0c:cd:4d:fb:a4:25:
10:03:34:76:91:d4:f6:88:0e:4d:cf:e8:6d:f7:c3:
38:a9:22:cb:e4:74:54:02:f4:37:b9:ed:81:1d:8d:
48:70:66:f3:08:0d:41:4b:23:b7:93:86:e3:d2:5b:
84:24:cc:d0:7d:1d:76:a5:f5:fc:c8:30:17:f1:74:
94:f2:7b:67:4f:9e:e8:2c:78:dc:2a:29:9a:ba:17:
41:7b:bb:0b:21:d9:cb:b1:2e:d2:f8:d2:74:c0:f7:
e0:cf:a6:c4:85:72:73:6b:ea:98:e3:ff:9e:2c:d9:
2a:58:6e:20:92:3c:51:e9:25:2b:81:ca:17:00:79:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:90:20:57:6A:43:4F:01:D5:70:D8:E7:41:6C:44:B6:E8:31:52:BC
X509v3 Authority Key Identifier:
keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/1-JAgV2pDTwHVcNjnQWxEtugxUrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:15:42:ed:38:b7:f1:d8:2d:63:92:f7:7b:5a:76:2b:0b:8d:
4e:a1:48:be:67:26:98:d9:10:cc:7e:eb:d3:be:45:d9:6a:02:
06:34:dc:d2:06:fa:87:cf:b2:ec:00:0f:bd:52:cb:fb:16:bb:
57:b7:01:be:39:fd:53:55:24:e2:b7:b1:85:69:b8:e1:8f:d8:
a3:4a:63:d8:7e:52:50:06:96:b2:ac:28:64:2d:bb:e4:51:34:
0e:1a:68:9d:9e:2f:03:0a:d6:cb:51:be:92:f3:7d:c5:b8:75:
f4:ce:18:96:2d:c0:fe:dd:03:ca:06:ed:2e:0a:5c:91:7f:75:
00:a9:fa:a8:1f:88:78:0d:ae:be:69:e7:50:e6:ca:87:dc:9a:
82:83:0b:b9:24:0a:45:6a:ef:00:05:fb:93:2a:08:59:d6:6b:
4c:87:77:bf:50:b9:96:83:57:1e:a6:f5:38:ff:d5:25:86:74:
21:c9:e3:d9:85:74:3c:c0:3b:6e:f0:2f:12:05:82:e5:eb:3a:
45:b9:1c:32:f7:8f:86:92:e8:98:9c:c7:e0:a2:5b:9c:b2:26:
7f:8e:ef:ae:7e:26:59:69:a5:87:d4:14:f3:0a:40:3a:89:e2:
74:ad:19:12:b5:7b:11:d5:cf:56:6a:c0:12:e9:b5:60:7b:06:
35:58:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:13 2024 by rpki-client on console-fra.rpki-client.org