Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/DAwrE5iVHDOtBbkczxaJ0QWjx4k.roa
File: DAwrE5iVHDOtBbkczxaJ0QWjx4k.roa (raw, json)
Hash identifier: 80xLJw+A1crp11i8fodOAHrn0A6EkN0EmSljSwVfFto=
Subject key identifier: 0C:0C:2B:13:98:95:1C:33:AD:05:B9:1C:CF:16:89:D1:05:A3:C7:89
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01856D13E2C84D4B7A9AA74A64CD9D7F090E
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/DAwrE5iVHDOtBbkczxaJ0QWjx4k.roa
Signing time: Sun 01 Jan 2023 11:24:57 +0000
ROA not before: Sun 01 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 193.108.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e2:c8:4d:4b:7a:9a:a7:4a:64:cd:9d:7f:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 1 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0c2b1398951c33ad05b91ccf1689d105a3c789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:67:f1:9d:4d:3f:e9:fa:1a:5f:83:78:53:
ad:74:2e:b7:d3:5c:f2:7d:e8:6a:57:8e:38:0a:1a:
17:19:5e:14:e0:c0:2a:db:ae:cb:b6:af:22:93:51:
34:fa:16:7f:17:1c:85:2f:a3:8e:bb:af:d0:c3:41:
bd:9b:f5:e9:d8:7e:dd:40:00:b7:a1:2b:13:02:0e:
1a:df:7f:c9:c2:0c:8f:50:3d:8e:40:f6:01:ae:34:
90:dd:0a:04:9c:54:23:9a:48:e7:ce:d0:8f:8d:ef:
58:28:fc:75:96:8b:44:1f:51:48:40:7e:bd:3e:98:
d2:a1:a0:02:ac:e6:14:35:00:4c:78:b8:20:05:68:
b8:19:20:50:ec:f2:56:55:61:8f:ae:c9:fc:c3:30:
55:23:1f:4c:c5:4a:d4:34:37:09:86:c5:c4:e3:03:
ae:fb:9a:75:09:a9:3b:11:32:b4:7b:28:15:7d:72:
00:6b:8b:93:12:56:b9:22:99:83:f2:18:e2:78:dd:
dd:69:3f:eb:2c:8c:b7:d5:d2:3c:30:19:96:1d:b5:
65:c5:49:2f:b1:a5:1a:6c:7b:41:03:e2:25:fa:cd:
23:72:53:3b:8c:70:09:9c:07:f5:ce:0d:35:f7:f7:
c0:f5:3b:13:91:d1:07:cd:a6:2b:62:71:89:0a:6d:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0C:2B:13:98:95:1C:33:AD:05:B9:1C:CF:16:89:D1:05:A3:C7:89
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/DAwrE5iVHDOtBbkczxaJ0QWjx4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e6:00:c4:d5:8c:d1:c4:2e:63:88:5a:de:e9:9f:72:95:99:
92:b9:68:1c:02:bc:09:79:80:b7:d4:31:87:19:c3:75:60:51:
07:7f:35:0b:21:6a:a9:7d:dc:6a:78:8f:09:5c:e1:6f:95:09:
4f:57:d3:14:34:aa:8b:1d:ce:60:4b:93:12:6c:ea:ed:b9:4e:
f8:51:86:60:21:59:af:ff:1e:a7:41:af:55:b0:0d:b8:64:16:
34:52:75:b8:05:3d:36:6f:4f:69:e6:dd:75:e7:8d:7b:37:8a:
67:aa:b2:9c:73:00:aa:bc:52:98:22:e5:0b:ed:7f:72:9d:32:
00:91:d7:ae:8a:48:42:2a:11:d5:25:ab:18:04:12:dc:94:aa:
34:f7:a7:f3:98:f6:2e:02:58:3c:60:76:e8:bf:82:65:28:ae:
7d:3b:6f:c5:88:fa:8f:cd:cb:2f:2e:60:d2:1d:a3:8e:ee:8b:
55:c9:5c:2f:4b:34:29:08:bc:13:a9:79:e2:ee:fb:76:f2:85:
6c:0e:64:c1:bf:8a:8e:4e:13:1f:d2:9e:87:f9:72:b4:29:2a:
63:9e:3a:d2:6f:e3:1e:b6:0d:a5:46:aa:1b:e1:ab:a2:40:be:
f5:62:4a:3b:75:78:cc:2a:e9:09:17:26:00:23:71:70:67:55:
92:90:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org