Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/_zwADKMOVJqzNrsTZ3ppoo1DNjQ.roa
File: _zwADKMOVJqzNrsTZ3ppoo1DNjQ.roa (raw, json)
Hash identifier: 0Z2Ijxt/YVJ1UiC7AvIzOvoqlvDwlRxrPtvBwkXBdN8=
Subject key identifier: FF:3C:00:0C:A3:0E:54:9A:B3:36:BB:13:67:7A:69:A2:8D:43:36:34
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01884D218D9E69AC06323A17E7A1165E5EAB
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/_zwADKMOVJqzNrsTZ3ppoo1DNjQ.roa
Signing time: Wed 24 May 2023 09:40:24 +0000
ROA not before: Wed 24 May 2023 09:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400031
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:21:8d:9e:69:ac:06:32:3a:17:e7:a1:16:5e:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: May 24 09:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff3c000ca30e549ab336bb13677a69a28d433634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:d8:99:50:77:9d:5c:bc:a0:00:d7:e4:e6:
4c:84:69:dc:96:d8:b1:34:87:b3:a8:39:0c:c8:6e:
19:fd:43:49:d7:c4:b4:0d:5e:4d:8c:56:c4:7a:c6:
09:61:88:84:d6:4e:e1:2e:ef:24:46:1b:57:dd:40:
1b:0e:02:51:ea:fe:40:72:fb:94:be:9e:97:80:ac:
1a:1e:f7:62:49:d1:3f:5c:03:06:42:20:fd:7c:97:
be:86:23:35:1a:ce:53:72:0c:fb:69:ff:56:cf:c9:
68:ac:63:72:41:02:ee:7d:4f:32:5d:84:5e:6e:71:
3c:cb:c9:d2:24:ce:aa:88:d4:33:f5:22:36:c6:59:
ec:d3:f6:93:fe:0a:de:7e:2a:e9:af:50:6a:98:20:
3a:22:5c:33:59:82:16:dd:52:4c:c9:2b:44:a9:0e:
0d:a0:83:2f:e1:49:b3:22:c3:fb:d8:46:05:d6:02:
9f:0e:46:25:63:67:17:cd:b3:38:d6:84:4f:be:0f:
9c:f6:38:67:8a:de:44:9d:3f:4f:72:57:b1:5f:01:
0b:4f:8d:2f:c5:f1:9c:54:5a:8f:67:37:0a:5d:66:
5c:e8:62:13:d8:e0:26:78:1e:db:a0:22:97:99:cc:
ef:c3:bd:f5:41:6e:6a:6b:21:d8:31:6f:af:2f:9a:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:00:0C:A3:0E:54:9A:B3:36:BB:13:67:7A:69:A2:8D:43:36:34
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/_zwADKMOVJqzNrsTZ3ppoo1DNjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f6:4a:2c:29:97:24:67:11:fc:be:63:34:46:1b:7c:c5:67:
22:8e:a4:55:0f:e1:72:80:9e:58:64:5e:69:d8:02:99:68:de:
84:7f:4f:5a:43:e9:03:64:2d:64:91:56:36:f5:7a:cb:1c:09:
7b:19:fb:72:83:b9:f3:8d:b6:49:ba:fb:f7:b2:fc:60:23:73:
2f:93:b8:23:d8:3f:96:4b:b8:e1:52:24:80:7f:73:29:3c:c5:
d4:e7:f9:5b:cb:95:bc:84:08:80:f0:37:54:d4:a0:0e:80:bf:
5d:f8:f2:e1:03:b5:98:b8:44:83:72:8a:6f:a3:c4:94:e7:f5:
c4:b2:08:01:c3:ec:4e:17:73:83:8d:35:40:8b:84:4a:42:61:
a9:6d:ef:a7:95:f5:6c:64:a3:92:d4:40:95:21:10:18:c3:51:
e3:48:68:e6:20:23:ca:32:7e:d3:df:53:60:fc:6c:d4:2e:06:
2f:16:63:d4:a7:9f:71:b9:21:08:4a:0e:dd:d2:aa:a1:da:ec:
f2:94:93:72:f2:3e:8b:e2:4b:d0:ac:dc:71:04:32:75:d4:f0:
0d:4c:a1:a8:e3:04:6c:86:fd:e7:b0:e5:ea:57:33:01:1b:3f:
d3:7d:1d:36:7b:f4:01:7a:3b:4c:1d:0a:f2:db:04:0a:1f:cc:
df:3c:2b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org