Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7QlCzo-xK1VwBxyXXnR3_ToptBI.roa
File: 7QlCzo-xK1VwBxyXXnR3_ToptBI.roa (raw, json)
Hash identifier: zY5PcAQnshDeadgjDOMoYr/pNNXWvYCkVH7Y6F/dEu4=
Subject key identifier: ED:09:42:CE:8F:B1:2B:55:70:07:1C:97:5E:74:77:FD:3A:29:B4:12
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0188C4CD6EF2FB3ABA65D200B218DD0A6DBC
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7QlCzo-xK1VwBxyXXnR3_ToptBI.roa
Signing time: Fri 16 Jun 2023 15:22:57 +0000
ROA not before: Fri 16 Jun 2023 15:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 193.160.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:cd:6e:f2:fb:3a:ba:65:d2:00:b2:18:dd:0a:6d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 16 15:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0942ce8fb12b5570071c975e7477fd3a29b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:ff:58:d1:b7:0f:df:88:00:03:05:20:fb:
88:72:90:e6:9f:f5:95:d1:b9:21:4b:f3:83:48:05:
29:7e:1e:67:27:91:13:c1:8a:0b:c2:d4:58:43:79:
25:b2:63:23:af:61:36:0e:f3:2d:3e:2f:7c:8a:10:
de:68:0c:0b:22:7c:4f:1a:ac:3a:b1:52:ca:aa:a1:
88:63:f9:3c:8d:b2:84:3e:e4:3b:8c:6a:c0:a1:e8:
4a:15:4f:47:ab:05:13:74:f6:9d:e6:88:44:03:be:
b1:bc:41:1c:8d:b2:4d:05:b0:f0:56:51:c7:00:95:
63:6f:34:47:97:08:bd:a5:e0:d6:ff:0b:06:9c:86:
03:56:63:5a:ff:df:ef:27:91:7a:f9:bb:2f:1a:0f:
52:cc:67:48:2c:7f:d2:1a:95:29:82:55:9e:78:1f:
5a:fe:9d:ce:30:22:81:90:27:5c:59:1e:1f:ef:a6:
2d:61:fd:ba:f9:6d:52:cc:11:ea:f9:a2:9a:8e:3d:
a8:6f:d0:43:d7:06:26:29:9a:36:9f:36:0a:6f:33:
a3:73:9f:79:74:e9:62:83:04:27:b2:cb:f6:be:91:
75:98:ca:32:59:91:51:9f:1e:51:2a:5a:7b:3c:f3:
72:6d:51:b1:fd:65:00:04:cd:9e:f1:5b:1b:a3:64:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:42:CE:8F:B1:2B:55:70:07:1C:97:5E:74:77:FD:3A:29:B4:12
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7QlCzo-xK1VwBxyXXnR3_ToptBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
Signature Algorithm: sha256WithRSAEncryption
92:df:51:46:fd:a4:7e:7d:16:69:e7:0a:ff:76:d7:f1:0f:4e:
e0:0e:0f:a2:42:62:cb:c2:5f:89:22:8c:06:92:b8:fb:22:18:
0b:bd:79:1a:f2:2a:75:16:27:f9:4a:b1:48:a1:38:ef:41:bb:
e4:12:b9:58:62:a7:06:f6:e6:fd:bc:25:6e:00:40:df:17:bb:
3f:79:9f:1a:39:54:6a:b8:a9:e6:0d:fc:ed:af:f9:69:46:47:
1a:17:ce:c1:b9:b7:77:ee:38:7c:be:f1:65:fa:0b:81:81:39:
f5:dd:38:7d:45:07:1c:8d:be:4e:eb:43:9e:af:fb:ac:a7:14:
20:7c:1c:d8:38:08:1f:6c:f8:ed:d4:f2:6c:65:3b:51:c5:23:
74:f7:bb:51:a0:6d:05:25:4e:50:60:32:a4:74:2b:6b:9f:00:
5f:32:0e:19:51:ae:e0:c3:4f:a5:6f:8d:eb:45:f6:2c:e1:51:
45:e1:57:8d:aa:e0:f3:eb:4d:9a:37:a2:bb:63:7c:43:71:ef:
12:fc:8c:07:3b:ed:ac:77:81:96:4d:cf:5a:db:4d:9e:43:6e:
5d:2c:43:8f:78:9d:71:5b:78:39:0f:ce:ee:3b:27:47:1e:3f:
9b:2e:25:fe:f7:b1:11:5b:a2:17:8e:c3:45:93:2b:a4:d4:7f:
54:40:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org