Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n86mtHq3kxVz8XqOKtSpXGceBNc.roa
File: n86mtHq3kxVz8XqOKtSpXGceBNc.roa (raw, json)
Hash identifier: Sb4TLOMdj/bI2wp0FfsAwVMh85xQ/BVOyaYq0mS84d0=
Subject key identifier: 9F:CE:A6:B4:7A:B7:93:15:73:F1:7A:8E:2A:D4:A9:5C:67:1E:04:D7
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C25026038EAB8ABD4E388C77795C
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n86mtHq3kxVz8XqOKtSpXGceBNc.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1880
IP address blocks: 193.10.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c2:50:26:03:8e:ab:8a:bd:4e:38:8c:77:79:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcea6b47ab7931573f17a8e2ad4a95c671e04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:32:3f:6c:f7:14:d8:20:0e:52:46:af:93:
47:77:8d:9a:45:86:76:43:03:10:85:2d:2e:8b:e6:
3e:7f:1e:ff:9e:da:05:d1:9f:57:1f:f4:b3:74:99:
29:ce:71:29:96:f1:a0:3f:5f:f0:a6:1b:ab:88:00:
af:3e:3d:05:80:4e:98:ea:a3:52:2c:3d:7f:86:22:
4b:9a:2a:b6:e7:9e:53:1b:33:f8:32:b4:bb:63:bd:
ac:93:b4:15:bd:11:d9:09:09:2d:a8:3e:62:2e:3d:
2f:75:22:64:e2:9d:3a:ef:48:f5:c0:db:28:52:6c:
df:42:a3:c1:03:bf:27:6d:bd:60:64:bc:c8:83:a9:
2b:31:e3:f1:fc:9e:85:1d:d8:b7:6c:fb:0d:4d:2b:
0e:98:af:d0:da:d9:2a:b4:19:14:1f:31:8d:8e:ec:
a2:b0:a0:42:49:09:c1:02:44:8d:31:b6:a0:79:c5:
e0:2f:cb:f9:b2:b4:13:57:25:e4:72:79:2c:3f:7b:
19:17:b7:ff:13:95:26:91:19:b3:82:c8:05:d3:36:
e2:ff:79:6b:92:9d:5f:4c:d7:4a:e0:cd:90:29:9c:
78:f5:1b:3f:84:51:cb:a6:21:48:1d:3f:21:02:7a:
22:e6:e3:1e:3b:c2:7d:8b:27:2f:2a:63:91:2f:9f:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:A6:B4:7A:B7:93:15:73:F1:7A:8E:2A:D4:A9:5C:67:1E:04:D7
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n86mtHq3kxVz8XqOKtSpXGceBNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.7.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0a:eb:20:9a:42:79:d7:13:55:9a:fd:52:dd:cb:a5:9d:17:
b3:9e:ff:38:96:8a:4b:9a:0b:d5:71:36:45:f1:db:02:af:cb:
13:e5:04:ff:f2:c6:e6:da:49:ef:0e:5f:c3:64:6d:5f:3d:e1:
b4:a1:a2:8e:b0:57:a0:87:62:5b:39:c4:0a:a3:65:22:30:c1:
b1:90:6f:9c:b4:f3:83:57:3c:4c:cb:0e:90:14:fa:30:ba:47:
83:b7:3d:cd:5f:b8:50:47:21:13:8b:2e:17:e1:2f:b0:ca:25:
1a:66:ea:22:b8:94:6a:6e:d4:2c:61:53:69:39:7d:a4:a3:60:
d5:12:cb:97:2e:6c:dc:53:ca:df:03:91:e1:cb:dd:f1:5e:0e:
a3:b5:6d:70:73:7a:55:e8:66:67:ad:34:3f:59:5c:4e:40:c4:
04:85:c7:a1:47:90:1f:0d:6e:1b:37:9c:e4:91:94:c6:2d:68:
73:1e:db:b0:9c:fb:63:68:9d:0e:e3:61:ea:2d:83:72:71:1b:
58:2d:c6:c9:64:4a:01:31:26:d2:7b:dd:e0:a5:77:1c:93:2f:
60:0c:8b:65:af:80:b0:04:bc:95:05:f8:15:ec:ae:18:2d:93:
f1:bb:68:49:20:6b:96:48:75:ac:27:9e:69:1f:9c:19:0a:ac:
ba:cb:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org