Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/erpQEcOnRPB99OMHR8ei6nhuDKI.roa
File: erpQEcOnRPB99OMHR8ei6nhuDKI.roa (raw, json)
Hash identifier: 3Z2hmpS7KVcZIuox3vhmfzDDfR4tK2/WC9VPVIuko48=
Subject key identifier: 7A:BA:50:11:C3:A7:44:F0:7D:F4:E3:07:47:C7:A2:EA:78:6E:0C:A2
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01859050B24E8DD4260D07B494A3B1A8B4E1
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/erpQEcOnRPB99OMHR8ei6nhuDKI.roa
Signing time: Sun 08 Jan 2023 07:38:05 +0000
ROA not before: Sun 08 Jan 2023 07:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.108.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:90:50:b2:4e:8d:d4:26:0d:07:b4:94:a3:b1:a8:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 8 07:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aba5011c3a744f07df4e30747c7a2ea786e0ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:cd:a5:ab:e1:e5:72:e0:ad:76:81:ff:d1:
d7:0d:a3:01:34:35:66:2a:94:41:a6:bc:28:b1:1f:
19:9a:cf:7f:74:c2:1a:63:b2:2b:94:7d:54:7e:1d:
5b:7a:2a:48:c1:57:cf:2e:af:1e:76:55:9e:db:02:
c4:fc:19:fc:e2:d5:21:ba:29:37:67:67:a0:9a:e9:
26:ff:d7:28:d6:99:b4:b3:b7:ac:8e:e8:85:b7:70:
8b:d3:a9:1e:3d:b8:30:ac:55:07:ee:60:35:47:6f:
20:d7:bf:5d:c3:8b:38:67:b9:5a:46:36:03:ce:1e:
fd:47:48:79:8c:ca:b1:75:54:19:9f:81:84:ff:07:
33:04:07:76:f0:e1:0d:f0:c8:c2:3e:db:8a:be:e6:
75:5a:52:fc:63:27:9d:87:d9:52:cd:e4:08:7d:20:
a0:2d:ca:20:5d:a5:cc:ab:4b:9a:b3:87:21:c0:31:
d6:50:96:82:74:12:c3:b8:d2:40:7a:66:ad:99:65:
3a:94:0a:7e:5f:78:b5:71:06:64:3a:60:74:5b:ca:
3c:5f:80:5b:ff:8b:cd:f0:91:58:75:10:33:09:6c:
f1:d2:9a:30:bd:9f:80:ac:d2:51:0c:7b:f9:e9:72:
fc:8a:ab:64:5d:56:a5:35:92:f8:0b:ec:ff:5d:dd:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:50:11:C3:A7:44:F0:7D:F4:E3:07:47:C7:A2:EA:78:6E:0C:A2
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/erpQEcOnRPB99OMHR8ei6nhuDKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.103.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ae:07:92:b6:15:04:80:26:e2:b2:6e:0e:be:0f:d7:6f:51:
4c:69:99:ce:10:85:90:94:b2:4d:04:82:19:69:d5:ce:01:5f:
11:d5:12:7c:63:c0:0c:d7:0e:ab:5e:cd:ad:e8:28:bf:43:42:
b8:84:de:98:1b:28:7a:c8:ff:ad:f4:50:02:ee:6a:ac:b7:52:
24:9f:a8:48:1f:9e:47:c0:cf:99:4c:69:37:26:bc:d0:6c:11:
b7:a5:1b:6e:cf:39:57:84:9d:bd:e7:22:fd:84:10:95:4f:03:
83:cf:83:21:e2:3e:89:32:bb:4c:0d:c8:93:d7:f9:2c:ea:34:
10:ee:7b:2e:af:19:23:f4:9d:0c:9c:f6:a0:b0:b6:90:92:dc:
72:96:8a:a2:f8:f7:fc:55:8d:63:e7:d7:30:3e:ba:c1:1e:c7:
b3:84:09:93:a7:60:b7:35:8c:f4:1d:bd:9f:73:0e:69:21:0b:
10:1c:83:1e:f2:55:e1:66:b0:1d:b6:1f:8b:2b:e2:d8:f8:dd:
7f:6a:61:8a:a6:4d:b1:4a:ca:31:da:dd:1c:2b:00:32:22:23:
52:8a:e1:52:3b:8a:94:2b:a5:e3:24:48:b7:36:7b:8d:ff:a8:
2f:9f:cb:ef:43:de:33:9b:f9:f8:1c:d8:6e:9d:ca:7c:4a:cc:
3d:88:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org