Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/BSD_hAF15g9Fhiw528cJiiuJ2G8.roa
File: BSD_hAF15g9Fhiw528cJiiuJ2G8.roa (raw, json)
Hash identifier: 7riQa2lrf/T/XiXr+l4fcx1rBQJZgVAUWXrGY9c4vwk=
Subject key identifier: 05:20:FF:84:01:75:E6:0F:45:86:2C:39:DB:C7:09:8A:2B:89:D8:6F
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01856D13DE98BF5882C989B14915A0CA41BD
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/BSD_hAF15g9Fhiw528cJiiuJ2G8.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.108.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:de:98:bf:58:82:c9:89:b1:49:15:a0:ca:41:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0520ff840175e60f45862c39dbc7098a2b89d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:68:62:b6:80:dd:ea:44:18:42:71:24:56:
02:83:cb:85:39:d2:55:cf:f3:79:86:41:41:d4:f0:
7f:71:1c:ef:66:92:2c:46:c3:7f:3b:44:63:9f:fa:
f7:95:84:e0:07:aa:b0:20:06:74:df:64:39:16:cc:
1d:71:c6:83:10:59:74:a2:2a:74:28:13:39:34:8c:
dd:0b:67:ba:39:40:dc:ce:5e:2a:96:f4:73:d6:14:
c2:16:2f:07:16:1a:ac:43:f6:c5:b7:1c:5f:24:2f:
7d:28:14:cb:a6:d4:81:f4:84:20:2a:55:29:83:03:
5f:5a:8d:f8:d0:bb:49:d1:35:8a:bb:b9:fd:4b:a8:
0f:c4:25:f7:33:8a:68:f3:1c:41:d5:90:d5:52:8f:
1e:0d:35:90:24:90:40:18:a1:14:4d:95:72:90:8e:
af:72:b2:f8:b4:87:a8:48:6d:de:b3:d9:ce:74:cf:
d0:d8:44:54:e5:63:d2:57:71:b3:5e:ea:02:23:43:
ec:0f:5e:b3:ea:7d:90:03:a6:26:29:ae:a4:ef:54:
8b:36:8c:ee:75:e7:7c:16:4e:70:44:13:45:db:e9:
71:5a:3e:10:d5:0c:60:9b:de:41:f6:12:4f:47:15:
29:ad:e4:fa:8b:64:49:cb:40:f4:e2:62:65:c0:b1:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:FF:84:01:75:E6:0F:45:86:2C:39:DB:C7:09:8A:2B:89:D8:6F
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/BSD_hAF15g9Fhiw528cJiiuJ2G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fd:df:e6:01:b2:81:c4:38:aa:b9:81:2b:b5:f3:40:d9:9a:
19:48:a7:ce:c5:13:42:9a:d6:41:40:25:d9:a5:fc:e3:1c:fd:
23:27:bc:81:52:69:29:24:55:d0:e2:db:04:78:5d:33:0c:bb:
a9:5c:d3:19:17:5e:96:ac:fa:a6:16:d7:05:8f:af:c6:c9:ee:
12:b9:48:d7:00:96:aa:6e:07:6c:38:76:b9:ff:1a:74:b3:c3:
46:b2:f6:dc:1d:c6:ad:f9:07:12:a1:26:a5:b6:35:d5:13:b5:
8c:34:0e:7b:2b:a6:93:88:89:d0:46:b3:29:c6:ac:b0:15:ca:
25:55:05:a2:b2:03:96:22:c3:07:3e:2b:8c:da:f5:44:16:de:
5a:54:64:5b:6e:83:98:23:27:a5:d4:c2:45:b9:56:6a:bb:c8:
39:c3:6c:0d:51:d2:31:58:8c:52:d4:32:1f:6b:4e:b4:c5:cd:
a9:a9:69:94:af:13:1f:39:f9:45:63:79:eb:3e:fe:9c:86:bc:
d2:6b:b2:bb:58:82:e9:f2:fc:a1:73:7f:63:28:ba:87:14:e7:
2b:b7:a8:d3:6a:21:f5:53:8f:85:07:aa:f9:f2:ec:f1:c1:04:
1b:8b:a9:8b:01:40:03:77:41:dc:15:96:9d:ff:e6:7e:71:13:
80:a8:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org