Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa
File: OmLtctQCblLJQvg_EEyA6Xqcvqw.roa (raw, json)
Hash identifier: VvrbOP01DMiv6wdA1P6G8Az32yHhNDW7QDAUQjqF3yE=
Subject key identifier: 3A:62:ED:72:D4:02:6E:52:C9:42:F8:3F:10:4C:80:E9:7A:9C:BE:AC
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01882CEE985E9613D6FA54A690D687EADF24
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa
Signing time: Thu 18 May 2023 03:36:54 +0000
ROA not before: Thu 18 May 2023 03:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:ee:98:5e:96:13:d6:fa:54:a6:90:d6:87:ea:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 18 03:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a62ed72d4026e52c942f83f104c80e97a9cbeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:c0:c0:a6:37:e7:92:b2:98:42:86:14:3f:
52:ea:fa:42:52:60:de:f9:0c:bb:fb:59:7b:26:0d:
66:cd:b5:d7:56:63:a5:51:ad:a9:ce:36:85:3d:6d:
49:58:ad:f3:a5:5e:bd:c4:26:cd:00:ce:81:f3:66:
13:0e:4c:d9:5d:a9:f7:1e:e8:69:28:08:29:80:0f:
09:e2:a7:ee:1b:8b:0d:84:07:01:e3:ba:6b:6f:e6:
60:23:1d:98:5b:2c:09:4e:05:15:e4:33:24:f9:45:
2d:a9:4f:dd:b9:84:47:8f:cf:ee:1b:ff:6f:c8:e5:
52:51:94:91:4c:3d:27:d7:33:f3:0a:be:40:25:3d:
f5:13:14:22:bd:af:d1:5b:4c:3a:39:c1:25:69:40:
c3:bd:29:cb:27:76:3f:e0:1d:28:02:ed:47:fa:87:
51:81:0c:2e:da:ad:c0:ae:81:20:3b:d9:62:16:b6:
58:0d:2f:cd:eb:bc:f7:5f:62:e9:11:7a:96:0c:ab:
27:b1:59:c7:99:ea:76:96:ae:1d:69:96:4f:21:c2:
86:ef:b3:6f:2d:83:85:a6:34:b5:17:94:f6:25:ba:
01:e1:02:32:b7:72:b6:ac:5e:1e:f1:de:fb:dd:4f:
99:b5:62:23:15:0f:24:d2:55:fd:81:66:9b:dc:46:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:ED:72:D4:02:6E:52:C9:42:F8:3F:10:4C:80:E9:7A:9C:BE:AC
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6d:54:de:24:ba:dd:9c:9e:12:0e:c2:cb:0e:af:7c:ac:e0:
c2:5b:9f:04:c4:04:4c:cc:d3:4f:b3:c5:5b:cb:8c:52:a7:b2:
2a:aa:46:64:02:93:63:3c:8f:42:eb:b0:03:fc:6c:08:50:cb:
a3:1b:d0:16:0c:ff:92:34:1e:40:0b:19:0d:93:a9:8e:ac:e5:
ae:f3:e8:bc:2f:f6:e0:22:21:b6:c0:14:b7:79:df:57:3a:7e:
63:ff:11:56:cf:84:4a:c8:08:3a:d5:7d:e2:54:97:72:55:46:
c7:ab:48:94:1e:3f:67:5e:07:4c:be:17:fe:b6:eb:15:c0:89:
87:e7:a6:0a:10:54:4c:8b:e9:56:09:c3:b7:ab:47:f0:74:59:
38:8a:46:20:f7:c7:ed:eb:a0:de:a8:89:67:ca:3e:df:08:47:
1a:fa:34:a5:31:3b:f8:5d:c9:24:e2:a1:bb:f7:c3:8e:a0:c7:
2c:e7:d7:7c:79:68:66:55:49:0e:7d:48:04:0a:ca:12:fd:3d:
70:c2:aa:0b:98:9f:15:26:94:e2:38:ed:f0:df:b8:fb:0c:e1:
bd:4b:22:e5:ed:9b:68:97:a4:08:a6:db:9e:c4:94:4c:af:ad:
c1:e6:91:ee:7b:5e:64:47:95:2d:6c:dd:2d:8b:5a:ae:eb:0e:
9d:c7:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org