Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/sGsmOe-MHFvB6tzTvS0NMWEFLGc.roa
File: sGsmOe-MHFvB6tzTvS0NMWEFLGc.roa (raw, json)
Hash identifier: qMRSBRhf1ghLASw7T/dmkxJJ6QAFE+wrO/F7PfD9p8Q=
Subject key identifier: B0:6B:26:39:EF:8C:1C:5B:C1:EA:DC:D3:BD:2D:0D:31:61:05:2C:67
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01870CEC525CD25D10FCDD945CACE2054F17
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/sGsmOe-MHFvB6tzTvS0NMWEFLGc.roa
Signing time: Thu 23 Mar 2023 05:23:46 +0000
ROA not before: Thu 23 Mar 2023 05:23:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 193.108.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:ec:52:5c:d2:5d:10:fc:dd:94:5c:ac:e2:05:4f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Mar 23 05:23:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b06b2639ef8c1c5bc1eadcd3bd2d0d3161052c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:ff:4c:57:d4:fa:76:81:82:b2:e3:73:8d:
c2:06:3c:6c:c9:1c:52:2c:42:57:fd:de:5b:4c:0e:
13:eb:d6:91:2e:26:66:d9:f9:bc:c0:39:94:67:8e:
0e:39:ee:f0:9c:ab:8f:8c:08:ed:36:2c:1a:39:6b:
3a:43:3c:35:33:4d:32:32:74:98:bb:a8:d9:a4:cc:
6f:3d:5e:25:9d:54:65:3c:7c:4d:5d:31:8d:45:60:
df:db:ca:0d:48:f1:db:8e:ad:5f:b1:e8:cf:d9:42:
78:45:e5:7a:df:8c:c8:73:9d:fc:c0:bc:bc:f3:dd:
cf:65:82:0e:b9:31:c5:7d:90:82:37:f6:22:4e:40:
20:04:f2:e8:7e:9e:6e:9b:55:bd:26:67:3c:a1:7f:
b1:1a:a6:11:ba:05:87:99:08:31:fc:6f:5e:76:8e:
0e:85:c1:04:46:bc:3e:ff:0c:c0:37:cd:c9:85:7f:
07:11:d9:95:ed:c1:ef:8c:e8:14:a4:39:e0:35:92:
db:59:fc:e4:26:65:78:71:03:36:74:93:d9:1c:b4:
e5:2b:62:f2:2d:0b:1c:97:39:52:11:5c:87:12:3d:
84:87:55:10:0e:0e:89:2a:a5:e6:70:d8:5e:38:82:
be:11:0a:75:7f:93:1a:2f:5c:a2:8f:d4:fc:6a:62:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:26:39:EF:8C:1C:5B:C1:EA:DC:D3:BD:2D:0D:31:61:05:2C:67
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/sGsmOe-MHFvB6tzTvS0NMWEFLGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f5:18:f5:e1:7a:dc:b7:be:86:4b:97:25:6a:d1:5f:81:c6:
cc:f8:65:c5:b1:1e:9d:06:31:34:62:4c:bd:66:2c:f4:28:6b:
27:73:f7:1f:78:d2:f4:5d:05:19:7a:f1:22:b8:8d:c8:9c:8d:
b0:7a:d3:94:f5:ba:ad:b3:49:28:aa:48:16:6b:27:6e:07:4a:
a9:b8:b5:27:b0:5c:51:c6:96:23:ab:8f:1f:c0:e4:c7:93:22:
c0:b3:c7:87:2c:18:0f:92:79:eb:a5:f6:3c:7e:82:f7:ac:70:
5e:38:ba:8d:2e:aa:f1:eb:f9:92:9d:58:f5:de:ae:8e:33:fc:
cb:08:9d:59:cc:c8:03:0c:f3:f8:a2:91:ae:c3:ae:2e:66:1b:
e5:01:1b:88:0d:b7:5d:0d:c5:cf:9c:e5:7e:f1:a9:16:ca:ea:
11:43:dc:a7:92:6c:6d:66:25:7d:ed:1e:31:d5:b0:7e:50:9c:
0f:5d:e7:2e:04:6e:4e:61:ed:1a:57:85:94:f5:bf:eb:22:ce:
3a:10:ea:50:67:a5:a3:0a:df:43:b5:ec:23:55:1a:38:cc:10:
29:fe:87:2f:e1:63:4e:89:5a:9d:61:bb:82:6b:ba:a2:ac:5a:
6e:24:88:55:ea:42:1f:7d:c1:ea:c1:9b:4e:34:f2:c9:83:7b:
2a:17:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org