Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/57MUhSMHlQWHnd7lIN9LEzDrL08.roa
File: 57MUhSMHlQWHnd7lIN9LEzDrL08.roa (raw, json)
Hash identifier: jgHTNGeH6ESMAEuy1ua/fIf/wmp30c4SaSwfkI+0iHo=
Subject key identifier: E7:B3:14:85:23:07:95:05:87:9D:DE:E5:20:DF:4B:13:30:EB:2F:4F
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 0187982A4CB3529991FF5FEC855ACFA48127
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/57MUhSMHlQWHnd7lIN9LEzDrL08.roa
Signing time: Wed 19 Apr 2023 06:18:41 +0000
ROA not before: Wed 19 Apr 2023 06:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51412
IP address blocks: 193.150.152.0/21 maxlen: 21
193.150.156.0/24 maxlen: 24
193.150.156.0/22 maxlen: 22
193.150.160.0/22 maxlen: 22
193.150.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:2a:4c:b3:52:99:91:ff:5f:ec:85:5a:cf:a4:81:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Apr 19 06:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b3148523079505879ddee520df4b1330eb2f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:fe:b4:bb:e9:bd:63:d2:ac:54:3b:a3:ee:
d1:63:b4:a3:3f:06:d5:93:ac:29:81:4a:59:98:20:
f1:3d:75:d9:08:51:91:87:45:c4:ee:2d:4d:13:bb:
47:f5:23:ec:55:b5:dd:0c:2d:fd:dd:ea:5d:49:f5:
41:cc:80:af:5e:cb:07:12:9e:50:ee:e9:ed:e2:30:
db:1b:fd:db:f2:d6:5e:ed:2b:d1:a3:89:e5:2d:c6:
b9:df:bb:96:bb:bb:37:87:46:2e:0e:f8:ab:5c:ff:
3a:60:02:24:5e:45:77:db:1c:da:e8:31:da:01:06:
73:04:d2:a5:fa:f0:db:ca:7f:83:d4:10:98:f8:6a:
0a:f8:76:32:39:aa:fc:af:93:41:d8:83:2f:2a:0d:
b3:23:3b:db:c3:3b:bb:6e:a4:e2:ad:25:60:08:8b:
8b:32:9d:7b:2e:1f:89:74:0a:9f:51:e3:d1:3e:92:
02:cd:11:ec:95:92:0f:77:45:4e:94:a0:cd:8e:d2:
fc:6a:f2:0c:6f:a9:94:77:8c:f7:96:53:12:66:ef:
f7:9f:74:ab:1b:26:10:bf:26:42:4f:f3:af:58:93:
f3:fe:4d:7d:06:24:0c:b2:9e:ac:1e:f4:7e:36:e4:
96:7b:bb:85:4f:36:d3:f0:1b:00:76:c9:4b:e6:ff:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:14:85:23:07:95:05:87:9D:DE:E5:20:DF:4B:13:30:EB:2F:4F
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/57MUhSMHlQWHnd7lIN9LEzDrL08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.152.0-193.150.164.255
Signature Algorithm: sha256WithRSAEncryption
83:c2:eb:90:ce:6a:c0:37:44:94:0f:c0:61:c1:09:bd:b2:7f:
48:59:b9:1a:82:11:cb:ad:ef:3b:2b:9b:f5:26:0a:d3:a2:c1:
06:67:85:19:1c:0c:bf:e4:78:fd:38:59:a8:df:92:34:1b:78:
f0:bd:be:fb:01:d5:77:bb:e0:89:9d:3f:c3:20:cf:04:b7:44:
67:b7:be:27:ad:ce:1e:78:4e:db:5f:64:bd:92:06:10:7d:e5:
c0:e5:5e:49:c0:c4:11:5b:e6:ea:a2:36:4c:fa:6b:a6:0e:90:
d6:a2:85:9c:18:27:02:f0:4e:61:3a:2f:b0:18:ba:33:75:6a:
a2:c8:1d:ed:3e:e2:e4:c7:7f:8d:9a:2c:32:3c:bf:94:f7:a0:
5f:a8:50:eb:5a:cc:a2:79:25:e0:24:eb:72:d0:6e:ca:57:d7:
b4:0e:a8:b9:a4:51:c2:af:9b:0b:a4:b2:ae:bd:31:b1:db:3b:
19:97:67:07:fd:c2:0d:61:08:61:f1:b5:3d:65:e5:b3:b0:3e:
12:43:f5:51:51:26:e7:22:37:ac:29:fd:f7:87:b9:30:8f:1b:
e1:c7:b1:89:0a:30:8e:ad:af:42:1d:2c:94:9c:a2:a9:13:dc:
dc:18:2d:3e:e2:81:51:d7:b4:11:70:08:69:ec:03:fd:02:ae:
2c:77:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:38 2024 by rpki-client on console-fra.rpki-client.org