Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8asfeErUkNGuMno32JE7rvSHbY.roa
File: K8asfeErUkNGuMno32JE7rvSHbY.roa (raw, json)
Hash identifier: AiAApfI9R6og+GCzzztQY63LaxzrjRcot4WfAHZ0ACA=
Subject key identifier: 2B:C6:AC:7D:E1:2B:52:43:46:B8:C9:E8:DF:62:44:EE:BB:D2:1D:B6
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 018570027C97047F2C24F0F8D4825045A2D3
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8asfeErUkNGuMno32JE7rvSHbY.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.5.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7c:97:04:7f:2c:24:f0:f8:d4:82:50:45:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bc6ac7de12b524346b8c9e8df6244eebbd21db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:54:f6:27:f1:25:14:1d:aa:c1:00:7f:0c:
48:11:92:26:f5:65:0a:13:c5:5d:48:02:c0:69:9f:
b8:af:f2:53:73:de:68:56:61:d2:d7:d3:07:fc:78:
87:0d:14:28:b8:73:80:8a:f6:cc:06:5e:14:74:45:
77:2c:9e:f3:12:fe:ca:f0:12:8a:5e:bc:b9:5b:c2:
22:71:0e:c9:ba:2e:88:bf:c6:61:9a:d7:8f:92:b5:
92:06:a3:70:b9:0c:83:32:8b:db:67:db:80:ca:54:
ae:e0:bc:cb:14:0a:63:f3:c5:87:76:f4:2c:a2:9e:
e6:22:c5:8e:08:35:cb:40:b9:7f:ec:6e:b4:44:3e:
52:17:41:8d:70:a0:bb:a6:d6:c3:a2:ce:ba:77:6e:
97:89:55:0d:16:15:15:fa:65:7a:0b:cb:1c:41:a8:
fe:87:55:c8:c3:f7:26:40:d7:4e:de:2e:8d:6a:1d:
55:26:3c:36:bb:ba:c4:f6:95:6b:a3:bf:db:7f:a7:
f9:48:6a:c5:a5:2f:9c:82:dd:00:e8:31:d2:b2:e6:
1c:6a:7c:c5:05:17:16:70:3a:8d:63:c1:97:1a:62:
4a:77:aa:80:67:05:06:54:17:f5:d0:29:18:44:de:
9a:02:ae:29:70:27:64:6e:fa:49:36:9c:5e:fb:02:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:AC:7D:E1:2B:52:43:46:B8:C9:E8:DF:62:44:EE:BB:D2:1D:B6
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/K8asfeErUkNGuMno32JE7rvSHbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cd:80:16:fb:08:38:cc:c0:b7:77:7f:59:af:81:af:3c:f4:
ba:af:3f:10:62:8a:44:81:15:c5:ae:7f:6e:d5:97:23:3f:3f:
1b:90:16:80:18:62:38:27:8d:60:97:0a:21:63:bf:e9:56:3c:
ed:2c:77:8d:cf:2f:63:b0:15:77:a7:a2:d2:c6:05:98:e4:2f:
8d:57:a7:8f:42:fc:18:5a:6e:1d:97:a8:d3:1f:34:8f:a0:05:
a4:fe:5b:0a:3d:94:2a:fd:de:12:fb:aa:c0:bd:05:1e:ec:80:
01:bb:49:61:e4:10:c7:79:3a:a2:3a:c0:bf:aa:8e:0e:37:ea:
aa:b9:49:6f:2f:5b:91:14:14:e5:92:55:ef:52:aa:e6:47:8e:
3b:35:08:29:be:78:99:7c:3d:3e:87:75:40:98:e0:61:f4:8f:
52:d1:fb:85:60:5e:7a:9d:10:32:9d:eb:35:20:fc:5c:ea:d6:
f7:13:c5:ac:1f:30:be:7b:9e:33:71:b3:8e:dd:0d:0a:be:8f:
48:e4:9b:76:fa:a0:dc:31:ea:49:e6:e3:8e:13:6a:9e:57:bf:
c0:fa:56:5c:f3:f2:c5:31:99:89:a3:9b:8e:74:5e:32:e1:e1:
a8:d0:71:bf:b5:b7:30:ac:61:92:3e:3f:1d:39:0b:88:c3:dd:
30:67:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:01 2024 by rpki-client on console-fra.rpki-client.org