Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/Ca27O7r4S9jN3V0DIcMQDNmBNeg.roa
File: Ca27O7r4S9jN3V0DIcMQDNmBNeg.roa (raw, json)
Hash identifier: qh3kFGGVeiQQUi0OTObINY9lQHFP77EnvNG0t9aCAeU=
Subject key identifier: 09:AD:BB:3B:BA:F8:4B:D8:CD:DD:5D:03:21:C3:10:0C:D9:81:35:E8
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 01856CEF2E20226FD46F54CF5BEF3E9E3404
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/Ca27O7r4S9jN3V0DIcMQDNmBNeg.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198333
IP address blocks: 193.37.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2e:20:22:6f:d4:6f:54:cf:5b:ef:3e:9e:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09adbb3bbaf84bd8cddd5d0321c3100cd98135e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:7d:6d:c1:ce:ae:1b:40:ed:e6:dd:ae:1b:
dd:74:d6:66:7b:b7:94:06:f3:96:0f:b6:0a:7e:b3:
cb:c0:09:82:d7:d8:08:43:52:0e:65:c6:9b:d7:37:
6e:45:b7:b9:1e:79:c5:d1:f4:c5:58:1e:5e:c5:78:
00:43:ab:f0:70:58:3b:a3:1e:80:fb:67:cc:88:39:
1d:22:d0:7b:2f:01:d1:3a:be:c9:62:dd:40:a2:10:
65:16:20:86:08:85:17:19:55:9c:00:0b:3e:66:a3:
f8:aa:09:15:f0:e4:de:fd:7e:e9:01:3b:50:db:ab:
1d:0f:2c:f8:3c:93:c1:ab:02:89:e4:6b:a9:db:cd:
bf:20:db:ab:59:96:fb:d9:3d:68:3d:6f:f0:b1:a0:
cb:2c:6e:1e:f2:76:cb:28:e2:31:6e:12:d7:34:e2:
de:ae:9a:0b:72:4f:32:8b:38:df:d1:49:63:0f:af:
77:7f:0a:fc:64:3d:b9:cb:0f:23:c6:b6:a7:22:b8:
9f:0d:c8:ed:2d:35:47:3b:29:96:4e:6e:0b:4a:44:
90:00:00:45:47:83:c7:7e:4d:4b:8f:14:51:78:7e:
00:0d:e8:e8:6a:7f:f4:76:4d:d3:3e:64:01:61:1f:
97:5e:be:ca:64:7e:3d:b3:e6:28:2b:0f:e0:40:8e:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:BB:3B:BA:F8:4B:D8:CD:DD:5D:03:21:C3:10:0C:D9:81:35:E8
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/Ca27O7r4S9jN3V0DIcMQDNmBNeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:26:a3:c3:eb:6f:ca:4c:2c:15:3f:cd:e4:1b:c9:72:2b:a6:
6f:3d:88:5b:e8:ee:cb:1b:c1:bb:b8:e7:e7:ca:97:80:10:e3:
05:06:e0:13:58:10:af:98:3a:7b:fc:52:bc:90:f6:1d:ed:10:
24:58:44:2f:2f:ab:5a:02:ff:b9:77:31:07:9e:bf:de:cf:ec:
d2:22:68:f8:4e:50:5f:c6:f9:e3:a7:fb:b6:1b:1a:bc:9e:54:
0c:10:bb:a9:13:74:1e:71:94:49:40:c7:d4:92:36:ea:01:0d:
00:9a:c6:fc:00:50:23:87:31:92:81:51:a3:c8:4e:6c:01:b4:
a4:d4:69:39:46:cc:aa:3d:a4:e3:1e:14:50:e7:c6:1b:95:e6:
a8:c5:5a:80:e7:95:64:76:c4:ef:48:c0:89:7e:6a:fd:5e:b6:
47:ad:54:a7:58:b1:39:0b:9f:0e:80:60:d9:38:7f:6f:7c:14:
60:cf:4c:53:b3:b5:4e:1c:ac:87:8e:08:97:82:62:09:b8:74:
ee:25:5d:66:e8:e4:c4:3f:d3:2a:1b:75:ea:ba:8a:f4:f9:08:
fc:bd:eb:17:20:42:ae:6a:03:1e:41:75:ba:67:8c:3c:a7:33:
e9:07:d8:b8:f1:59:79:45:66:1f:2d:55:cf:f3:06:af:3f:fe:
23:4a:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org