Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/kABZR1OLMcc4immJin42e7I9M9Q.roa
File: kABZR1OLMcc4immJin42e7I9M9Q.roa (raw, json)
Hash identifier: IXzV0OdBsDs3dVahWuVhoDfDHLVc8YkDjas5mAMHU1I=
Subject key identifier: 90:00:59:47:53:8B:31:C7:38:8A:69:89:8A:7E:36:7B:B2:3D:33:D4
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 018572033B813B61630CC58495146E33543F
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/kABZR1OLMcc4immJin42e7I9M9Q.roa
Signing time: Mon 02 Jan 2023 10:24:52 +0000
ROA not before: Mon 02 Jan 2023 10:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34794
IP address blocks: 193.194.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3b:81:3b:61:63:0c:c5:84:95:14:6e:33:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Jan 2 10:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90005947538b31c7388a69898a7e367bb23d33d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:f4:6b:eb:ee:28:df:55:9a:f9:55:ec:0a:
db:98:b0:96:06:73:2e:28:30:52:f8:60:d0:eb:20:
9a:6a:df:16:14:8e:1b:75:9d:f0:33:12:90:09:5a:
a4:f6:d5:b5:e9:05:c8:ce:18:38:ce:aa:e4:16:5b:
6e:94:83:8f:84:15:5a:2e:d6:17:e8:2a:3c:bd:fc:
57:fa:73:51:0b:55:d4:32:63:9c:11:80:1b:eb:7f:
f5:db:0d:7b:40:32:4c:a8:e0:3a:60:62:b8:ab:7e:
0e:32:be:43:78:70:37:61:d8:6b:95:a7:46:4d:11:
3f:3e:b9:aa:d3:25:30:67:23:dc:88:6c:13:22:4a:
f7:5d:9e:c1:09:41:c6:83:1e:d9:94:bb:09:74:fd:
19:ba:7a:36:dc:47:79:cf:24:0c:8e:92:89:05:44:
ad:35:14:31:7e:55:45:5a:a2:4c:f1:15:4f:fb:d1:
c0:05:39:93:8b:02:94:3d:b3:f8:70:56:06:cb:5a:
f6:a7:70:70:b3:05:dc:7e:ef:39:5c:28:19:d7:19:
b6:74:ba:98:72:6a:af:b1:4e:cd:31:2b:d3:38:9d:
48:7d:37:59:51:71:55:03:19:04:3b:5f:ec:e4:8a:
6c:f5:41:04:c6:bb:93:77:c8:ff:ab:d3:d2:f5:82:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:59:47:53:8B:31:C7:38:8A:69:89:8A:7E:36:7B:B2:3D:33:D4
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/kABZR1OLMcc4immJin42e7I9M9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:2c:d0:4b:18:13:d6:c5:7f:50:f5:ca:42:17:6c:05:02:6b:
72:e0:be:37:dc:2a:81:1a:89:ec:3f:58:5a:3c:15:9b:47:30:
96:a1:75:a7:f2:64:ec:f4:3a:6c:89:c4:2b:72:b5:ce:20:dd:
27:e3:ef:ad:3e:d5:5b:0f:d6:b6:6a:7d:7c:dd:df:22:ea:92:
87:f6:0c:62:b8:91:dc:9f:f1:0d:21:32:5b:e9:57:84:0a:4b:
8e:8c:46:df:30:2d:b1:67:58:c6:ac:66:61:58:bd:94:d4:ee:
1c:4f:6c:2d:e9:2f:91:9a:d1:07:7d:c8:3a:f5:bb:f9:8b:a6:
24:9c:31:f8:e1:19:83:3a:a4:a1:14:72:69:61:30:e2:d1:65:
10:e4:a8:1e:70:00:42:44:0b:12:63:1c:d0:f5:8d:e7:42:52:
e6:1c:e7:6f:98:e3:1c:b1:50:81:87:a3:d3:50:05:81:e5:4e:
c4:1b:46:e9:01:42:6d:18:da:1e:37:a9:e7:28:d1:1b:8b:95:
ed:23:59:ac:5e:0f:41:b7:80:eb:07:bd:33:a9:98:b0:4f:63:
66:a5:78:29:36:30:9f:14:f8:be:f3:ca:69:49:17:09:99:36:
7e:68:27:17:4f:4f:26:b6:ca:fe:db:f2:8d:62:09:49:f5:f7:
01:78:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:35 2024 by rpki-client on console-fra.rpki-client.org