Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/6feEFU3J4j2BdBh72md1qryCcUc.roa
File: 6feEFU3J4j2BdBh72md1qryCcUc.roa (raw, json)
Hash identifier: IIvZEK03xNLYF34VaeBRBsjymulhy8E9OPTe9XH/A3w=
Subject key identifier: E9:F7:84:15:4D:C9:E2:3D:81:74:18:7B:DA:67:75:AA:BC:82:71:47
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0187DFF539E04FF42F2496296E17E18B190E
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/6feEFU3J4j2BdBh72md1qryCcUc.roa
Signing time: Wed 03 May 2023 04:53:22 +0000
ROA not before: Wed 03 May 2023 04:53:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:df:f5:39:e0:4f:f4:2f:24:96:29:6e:17:e1:8b:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 3 04:53:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9f784154dc9e23d8174187bda6775aabc827147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:a8:7e:6e:d1:ab:7c:37:bc:80:62:e6:a6:
6f:b7:c4:f4:3f:9d:a3:62:d6:c3:8c:cb:c7:29:1a:
a1:da:58:9b:4f:f5:1c:26:fd:36:5e:35:bb:1a:0a:
0e:e4:49:ac:ff:88:97:03:40:26:3d:2c:c8:88:bf:
91:f4:32:74:d4:fd:65:1f:b4:07:d8:ef:e0:c4:07:
4b:d2:d7:f2:06:bb:fc:7f:20:5d:7a:0b:3a:86:8b:
44:81:88:88:98:a1:19:ba:d1:b1:34:8f:71:62:c1:
a0:93:97:3d:a5:14:91:8e:9e:91:dc:f6:4d:35:0f:
4e:bd:f1:19:16:9e:b5:90:e6:6b:23:0f:41:89:04:
11:37:14:fe:21:17:cb:9d:6c:29:b1:eb:0a:85:7e:
9e:b4:3f:c3:52:a4:06:25:ce:35:61:0e:e6:02:72:
ec:75:ca:f3:67:86:1f:d8:dc:8e:a6:02:a3:51:5d:
5d:dc:11:b5:74:5e:6d:b9:8d:b5:af:c6:29:98:4b:
2c:0e:a1:c7:5c:96:87:24:64:f1:a6:e7:19:51:05:
97:1b:b2:78:fe:38:75:0f:0b:e1:c4:25:e3:fa:fe:
47:f8:25:24:4d:39:83:01:a7:38:54:3f:b1:97:a4:
58:2f:2d:a6:48:57:90:7d:71:41:41:8d:3b:1b:e8:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:84:15:4D:C9:E2:3D:81:74:18:7B:DA:67:75:AA:BC:82:71:47
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/6feEFU3J4j2BdBh72md1qryCcUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c6:ee:40:e6:72:9d:c9:22:8f:db:e9:97:40:c0:46:d0:a7:
bf:84:79:9e:0c:81:ac:d8:3f:da:d7:76:ad:9a:49:12:73:d7:
81:f8:01:2a:b2:63:c6:32:0c:d4:0f:9c:7e:75:9c:e8:a3:38:
b6:d8:db:04:7b:f1:75:67:c1:5b:93:08:2e:b1:aa:da:cd:49:
5f:32:b6:de:42:ea:a6:75:a4:e8:4f:97:6c:27:42:26:db:48:
2c:0c:42:78:7f:d5:85:b0:99:d7:c8:02:2e:38:2b:ef:47:de:
47:22:46:ca:ff:3b:0f:78:6a:77:c4:70:84:f7:f4:b8:98:03:
99:51:69:6a:56:b2:91:d7:d8:0f:11:bc:d9:36:ee:41:c5:24:
fb:af:9c:f8:14:6b:6b:db:3a:25:1f:e2:a0:8d:f8:13:7d:41:
06:f8:a3:6d:6f:e6:42:9f:8f:09:81:4b:ac:14:15:14:8e:de:
c9:57:72:c6:85:e2:a5:16:96:a9:4f:fa:47:84:a3:a6:94:a6:
3e:0e:97:0a:3b:df:cd:75:a9:bd:c9:db:0b:3d:78:8d:fa:e3:
03:7a:5a:56:69:27:b8:54:5f:1c:74:d8:d7:40:60:78:5a:28:
cb:38:be:f0:3d:7d:e3:a0:77:38:5c:a9:ee:e0:02:27:13:15:
78:c6:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org