Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/p1sVk5mbXsjhhStgttrAhTGC_dE.roa
File: p1sVk5mbXsjhhStgttrAhTGC_dE.roa (raw, json)
Hash identifier: zdnGxUg6BfUxtiEua7VhlmiXlmxjHu8ch4sVgiGTRr8=
Subject key identifier: A7:5B:15:93:99:9B:5E:C8:E1:85:2B:60:B6:DA:C0:85:31:82:FD:D1
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0188F7A9237D69938396A6531A3FA2DB021B
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/p1sVk5mbXsjhhStgttrAhTGC_dE.roa
Signing time: Mon 26 Jun 2023 12:23:56 +0000
ROA not before: Mon 26 Jun 2023 12:23:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 193.160.113.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 21:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:a9:23:7d:69:93:83:96:a6:53:1a:3f:a2:db:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 26 12:23:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75b1593999b5ec8e1852b60b6dac0853182fdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:e6:cd:73:50:ad:43:98:8e:67:90:fc:33:
9a:9d:24:37:e4:e4:2e:f5:05:5a:fd:fd:ec:5e:48:
13:95:7b:42:cb:f2:80:f0:0b:6b:f7:78:6e:96:cc:
a3:ad:f9:d7:f5:15:69:32:83:9e:5d:4b:8b:8f:00:
c1:7a:4d:b0:fe:b0:c3:fb:de:88:db:cd:86:4a:e3:
40:0a:f4:7c:42:bc:85:01:b0:4c:d6:c1:94:6e:55:
5a:9a:e2:d2:3a:40:93:70:14:9f:5b:90:42:fe:a3:
ae:c0:ac:c8:20:54:c9:7d:48:70:47:d8:51:13:c3:
f8:c7:41:b4:5c:5a:b8:ce:e4:7d:08:4b:7d:70:d7:
cd:d3:01:fa:a2:02:bf:f6:5f:68:d8:97:e0:f9:a1:
21:da:fd:7e:37:30:ad:5f:a9:1d:a1:bd:fa:df:78:
30:e6:93:66:15:f0:2a:ec:31:da:f0:aa:ce:43:1a:
1d:dc:c8:b3:76:04:cc:e4:35:34:39:a8:15:f5:03:
5c:66:04:ab:54:2b:54:5f:65:1f:e9:9f:98:60:c6:
e7:75:39:98:ff:63:e4:3c:ee:d8:9f:6f:6c:01:00:
cd:46:ec:4c:9d:2b:3d:1c:85:65:c8:af:2c:da:41:
7c:f4:e0:b3:94:90:0d:15:dc:6c:96:2a:7e:cc:e2:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:15:93:99:9B:5E:C8:E1:85:2B:60:B6:DA:C0:85:31:82:FD:D1
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/p1sVk5mbXsjhhStgttrAhTGC_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.113.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:27:37:9f:db:e4:ec:80:d6:18:5a:57:52:9d:76:94:86:bb:
ed:72:a3:00:59:f1:f0:bf:83:59:d0:ef:93:50:3c:cd:8e:33:
71:9e:69:4f:33:d6:3c:2d:87:7f:25:ef:ea:02:74:32:a6:52:
d9:f0:e8:be:9b:5c:f0:88:84:76:6f:b8:0c:b5:32:27:95:d0:
3e:8f:85:86:49:67:49:3c:d9:f8:25:bd:21:6b:c1:d4:db:97:
52:4c:d2:8f:77:e9:45:e5:d0:d8:86:62:69:a2:85:cd:9e:74:
1f:52:06:b3:05:07:ec:09:cd:64:46:f6:8d:bd:8d:4f:28:16:
f6:f5:02:86:18:78:e6:0c:22:db:59:89:a2:01:a7:95:8d:cb:
d3:a7:78:20:ca:dc:ef:51:28:f8:ca:65:2c:8f:aa:7f:63:d4:
d6:58:91:f3:1b:d4:5a:aa:cb:39:b4:59:1d:a9:28:41:9c:94:
cf:63:2f:9c:50:7b:24:34:3a:0a:18:b4:6c:52:fa:a4:b2:72:
3c:ce:74:eb:4f:f7:47:63:98:73:3d:14:50:1a:5e:01:28:77:
69:4f:4e:ef:8c:3a:1a:53:a4:74:55:76:b4:53:c2:2c:ab:17:
ae:23:84:e7:aa:80:bc:97:8a:df:5c:71:72:4f:7f:00:ee:36:
a1:8d:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org