Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/4Sv3iZWP-5dCVRlv6YhObvHN4Iw.roa
File: 4Sv3iZWP-5dCVRlv6YhObvHN4Iw.roa (raw, json)
Hash identifier: MQCTAAi8+03HkwsBoepaLshbJ/BxaJNL2Q5nEK9TQiw=
Subject key identifier: E1:2B:F7:89:95:8F:FB:97:42:55:19:6F:E9:88:4E:6E:F1:CD:E0:8C
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0187E2E4E0168C9DF2FF3B03808419710CB5
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/4Sv3iZWP-5dCVRlv6YhObvHN4Iw.roa
Signing time: Wed 03 May 2023 18:34:23 +0000
ROA not before: Wed 03 May 2023 18:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:e4:e0:16:8c:9d:f2:ff:3b:03:80:84:19:71:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 3 18:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e12bf789958ffb974255196fe9884e6ef1cde08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:9a:be:3d:52:05:82:35:a6:a7:64:14:02:
48:e1:fe:f2:4b:82:0f:f0:41:2c:2f:49:4d:b4:0e:
5b:e0:8a:3c:dc:d2:42:c6:03:e0:e0:8f:c0:d4:62:
92:83:76:d1:d1:67:f2:94:3d:ef:c1:3a:6b:7f:84:
fc:8e:ca:e2:ec:81:49:f9:7d:fa:26:30:2d:d5:2d:
9e:bd:48:ff:ba:e1:b3:7e:d6:c1:ad:12:64:dd:07:
65:3a:81:c9:b8:c0:a3:e2:53:dd:75:a9:d7:cd:e4:
d9:d5:e7:d8:8f:e3:f7:7f:bd:4b:1f:d6:0c:1b:94:
23:c8:d2:bf:d7:d0:e4:80:5e:84:90:ef:26:79:f0:
14:76:da:bb:0f:fe:20:f2:ca:11:85:20:82:63:1a:
0e:91:cf:2a:8c:55:74:98:bf:6e:a5:93:53:81:5d:
33:53:fe:a3:f8:0d:8f:83:48:5c:7f:32:5b:a3:c5:
6f:2c:61:4d:a1:65:82:4e:ed:37:ec:1e:ec:29:56:
0f:d7:a8:52:69:33:c1:ad:9a:25:6d:dc:9a:7c:d4:
a7:07:4c:70:ca:d8:c6:6d:31:d3:55:3f:50:dc:83:
b1:fb:4a:22:d5:38:6d:ce:5b:87:34:45:bf:57:90:
5b:c5:aa:da:01:17:61:02:11:d8:07:95:bf:10:3e:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:F7:89:95:8F:FB:97:42:55:19:6F:E9:88:4E:6E:F1:CD:E0:8C
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/4Sv3iZWP-5dCVRlv6YhObvHN4Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a2:cb:c0:b6:79:02:5d:d4:96:cc:1f:bb:a4:4f:4d:38:f2:
cd:7b:43:4c:a6:f5:44:ec:0e:c8:29:8f:f8:dc:72:8f:d9:0a:
78:6c:b3:dd:6b:6e:c7:e8:a5:9b:60:a8:2c:bf:a7:d5:a2:d0:
a5:f5:a9:9f:d1:2a:c5:04:6a:df:8b:0a:7c:00:40:d4:27:88:
c8:77:30:4a:6d:76:7c:63:2b:7a:d3:b5:32:5b:4f:ef:e8:8f:
fc:80:41:27:b9:7b:f8:78:d3:6a:62:a7:dd:87:25:bc:26:d2:
c5:8e:cc:70:c9:16:ac:cf:fd:cb:49:6a:e0:43:50:36:39:39:
f8:d2:51:b0:16:94:8f:4c:c4:26:d6:c2:67:73:2b:23:ed:22:
37:46:d5:9a:a2:40:dc:3f:ac:0d:b8:7f:8a:b0:3a:f1:00:82:
6a:01:7d:3c:83:f0:b8:40:16:27:4d:05:86:b0:ae:fa:4d:92:
cf:82:9d:31:a0:73:f7:d4:7c:b6:dc:ab:a7:9e:37:af:be:e3:
f7:2d:34:ab:b0:26:b3:01:b0:78:88:8a:48:c4:71:f6:a6:4e:
7f:ff:f5:e1:6b:a4:f3:a8:c1:cc:2a:e0:f8:05:c9:08:60:8d:
9f:c3:29:ab:2f:1d:2b:43:73:c0:89:a4:82:52:87:4a:59:a5:
27:1b:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org