Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/KYvJhYVhkQlAkr7aNtWOkDQbT7o.roa
File: KYvJhYVhkQlAkr7aNtWOkDQbT7o.roa (raw, json)
Hash identifier: gKilVUm+CTcNv2tZRdCCHm3YIMPCVl0J6t1EPys0Tp4=
Subject key identifier: 29:8B:C9:85:85:61:91:09:40:92:BE:DA:36:D5:8E:90:34:1B:4F:BA
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 018809FF0BBA5ECFE4CE2747322B0BBCA4B9
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/KYvJhYVhkQlAkr7aNtWOkDQbT7o.roa
Signing time: Thu 11 May 2023 08:48:09 +0000
ROA not before: Thu 11 May 2023 08:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:ff:0b:ba:5e:cf:e4:ce:27:47:32:2b:0b:bc:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 11 08:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298bc985856191094092beda36d58e90341b4fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:7b:f4:ff:2e:93:51:d4:a6:57:06:40:1d:
61:36:55:8e:e4:e1:77:ab:2a:c0:db:4b:5f:a4:3f:
1e:87:9d:13:1d:35:91:b9:5e:e5:29:34:75:45:71:
d9:98:f6:bb:78:1c:29:b3:58:83:80:3a:28:f5:e3:
10:67:bc:b0:67:94:34:4a:49:3e:e9:94:47:80:06:
14:15:82:6c:05:87:b3:b8:60:c2:94:e3:6d:26:e1:
a4:2d:9d:92:93:f0:40:40:73:71:a2:57:b7:3b:b7:
fa:15:cd:58:8e:9a:d4:eb:fc:fd:60:c7:71:3b:c0:
64:ef:c9:d5:e0:e3:de:84:dc:d1:27:65:cb:57:fe:
8d:40:03:f9:91:28:2f:d0:69:47:18:7b:3c:0c:97:
7a:04:1a:e9:6c:2c:0c:07:f3:de:fb:07:b5:56:e8:
c4:50:bc:c7:97:03:0d:1a:3f:0c:f4:ec:9f:b3:6e:
e5:06:d6:cc:f4:16:7e:1e:ea:fe:2e:98:5c:ee:33:
38:06:78:c4:a9:a7:8f:9e:31:9a:6a:2f:77:11:1a:
4b:9c:5b:07:be:a0:d7:e8:9b:40:f5:96:fa:fd:d0:
52:5e:b5:08:35:ea:b6:d7:7e:8d:09:39:87:99:11:
21:f8:73:ca:76:4b:12:b4:6f:2e:d8:87:09:06:a6:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:C9:85:85:61:91:09:40:92:BE:DA:36:D5:8E:90:34:1B:4F:BA
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/KYvJhYVhkQlAkr7aNtWOkDQbT7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:5e:d1:bf:da:ad:e8:b8:e2:0e:36:68:4c:e3:26:36:b3:
bf:ff:8c:00:58:a7:09:ab:35:3e:74:2b:e7:22:cb:90:a0:42:
15:b8:e6:ff:05:fe:11:93:a8:4e:4a:07:05:5f:09:6c:cb:9e:
eb:af:2d:64:82:17:fc:ce:7e:1d:a4:d7:dc:ac:a4:50:81:c9:
04:e3:37:03:89:32:cc:8f:25:fe:28:19:7f:b1:8a:da:bb:c0:
73:6b:51:b7:c4:79:5f:31:19:e2:36:13:eb:cf:12:04:11:7d:
c0:0f:7f:c8:e8:41:82:18:35:a0:94:d7:de:01:40:91:9b:42:
87:9f:c0:42:de:83:e5:e8:76:f4:9c:35:b7:e4:42:97:f8:b5:
7c:73:d8:6a:50:0d:55:4f:9a:85:a2:36:03:17:84:10:6e:7d:
78:2a:ee:bb:65:2a:03:a8:57:93:3d:6c:63:82:ad:48:5d:e9:
04:3a:e1:2f:f3:81:0e:68:95:3c:db:ec:3b:8c:64:58:48:a2:
72:4f:be:3a:44:4e:4d:f4:8c:76:41:48:eb:ea:83:d0:33:3c:
70:db:96:fd:84:68:27:d3:76:e3:41:38:e0:5f:a8:2a:39:02:
1e:35:c8:93:f6:0d:0e:e1:4f:0a:a6:c9:91:6c:58:72:6b:2d:
b4:31:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org