Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/h-k6gVUPIAvy1l4bxfhOjYgR8SE.roa
File: h-k6gVUPIAvy1l4bxfhOjYgR8SE.roa (raw, json)
Hash identifier: AKnMwdepeAE1O/DVXUgOjQqXkA80w9jZL7o8PwQ1yfw=
Subject key identifier: 87:E9:3A:81:55:0F:20:0B:F2:D6:5E:1B:C5:F8:4E:8D:88:11:F1:21
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 018C11253ADB86CC4BD33EB1F670D77AE9DD
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/h-k6gVUPIAvy1l4bxfhOjYgR8SE.roa
Signing time: Mon 27 Nov 2023 14:18:21 +0000
ROA not before: Mon 27 Nov 2023 14:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25717
IP address blocks: 193.221.69.0/24 maxlen: 24
193.221.70.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:25:3a:db:86:cc:4b:d3:3e:b1:f6:70:d7:7a:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Nov 27 14:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87e93a81550f200bf2d65e1bc5f84e8d8811f121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:53:f9:3a:35:a0:c3:3b:ba:4c:79:f7:60:19:
11:d2:fc:50:a0:36:a3:cb:a0:c3:de:ee:bb:ae:9d:
d5:da:51:a7:df:41:c9:54:e2:6d:66:04:d5:04:d1:
d7:09:a2:8c:45:29:31:71:4d:09:3d:29:0c:10:db:
b8:a7:53:b8:0d:2a:ba:dd:25:0d:62:84:66:49:6b:
3f:6f:9c:ec:fb:11:2a:23:75:00:ac:10:c5:5f:05:
84:c6:0a:93:83:2b:97:6b:b1:4e:50:24:26:66:4c:
87:c1:d2:8c:bf:94:b6:11:14:20:62:4f:a7:49:35:
e1:54:16:dd:04:7b:c4:73:bb:c0:1c:e6:76:9d:b8:
c6:42:39:00:ae:96:91:36:32:4a:11:6c:17:c8:64:
4b:5d:91:ae:e9:ba:6d:bd:52:6b:7b:53:11:ca:de:
46:e6:2d:4f:39:17:75:8f:08:f2:74:ea:ce:9e:57:
91:53:9d:a1:0d:04:7f:7f:d6:31:7d:2a:82:66:12:
1a:2a:55:71:5c:30:e0:19:62:0a:8b:3e:bd:a7:a3:
05:b0:da:69:fc:a8:f3:83:cb:80:ab:44:9a:e0:1b:
77:28:ab:56:66:15:56:b9:74:75:8a:00:c6:b3:31:
2c:8a:f1:14:ac:a8:fb:74:bc:be:e2:f0:4a:66:38:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:3A:81:55:0F:20:0B:F2:D6:5E:1B:C5:F8:4E:8D:88:11:F1:21
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/h-k6gVUPIAvy1l4bxfhOjYgR8SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.69.0-193.221.71.255
Signature Algorithm: sha256WithRSAEncryption
13:c6:d5:91:9d:2e:dc:af:65:d2:24:a4:fb:88:35:ca:e5:6a:
a4:30:ba:ee:6c:f5:60:6b:69:39:71:3e:c3:0c:9f:5f:6e:cd:
5c:8d:34:a9:27:b9:97:85:44:23:69:0a:e5:36:04:e1:ae:ed:
0e:6e:aa:c4:a1:2e:f5:f0:04:98:c5:89:dd:1e:ee:20:06:91:
52:0d:a3:59:7a:0f:02:b5:8d:45:36:6f:6a:e6:61:2e:49:74:
54:20:d5:0e:63:d7:25:19:0c:63:f1:db:ca:2f:d8:57:ba:fb:
d5:ba:83:85:1b:0a:5b:85:ec:0d:b2:ac:76:b9:af:ff:64:1a:
ac:8c:6a:43:b8:67:76:ff:d3:d5:10:f0:43:00:69:2b:54:4d:
23:a0:a7:f4:96:67:2e:7b:3a:a9:82:51:34:ec:00:14:6f:47:
12:eb:d1:5a:b2:64:04:20:81:72:0d:cf:ed:18:06:9b:e9:d7:
7c:eb:1b:d0:30:b8:11:0b:fb:70:80:8c:ae:2a:ed:86:d9:c9:
b4:32:87:3b:b5:2a:99:39:c9:8f:92:0d:11:15:71:3c:10:9d:
49:23:a6:27:36:f5:7f:11:e1:a8:59:28:76:95:e5:a2:00:9a:
30:c2:f7:9d:99:33:ce:36:b9:de:ca:d0:4c:3e:3d:de:49:80:
39:bf:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 10:01:30 2023 by rpki-client on console-ams.rpki-client.org