Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/VF2fT3sytzDK-e8vEaH1TPvhW_Q.roa
File: VF2fT3sytzDK-e8vEaH1TPvhW_Q.roa (raw, json)
Hash identifier: FaxxG9lE7zZlYn6VbyQgLpfVOTpelzNZ+lH4HvvC0C8=
Subject key identifier: 54:5D:9F:4F:7B:32:B7:30:CA:F9:EF:2F:11:A1:F5:4C:FB:E1:5B:F4
Certificate issuer: /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial: 018A4BFBC02EF73BCA26F082D66CD91C5920
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/VF2fT3sytzDK-e8vEaH1TPvhW_Q.roa
Signing time: Thu 31 Aug 2023 14:25:04 +0000
ROA not before: Thu 31 Aug 2023 14:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.104.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:fb:c0:2e:f7:3b:ca:26:f0:82:d6:6c:d9:1c:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Validity
Not Before: Aug 31 14:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545d9f4f7b32b730caf9ef2f11a1f54cfbe15bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:51:ee:65:be:64:68:ca:ef:3d:b1:a9:5f:
11:64:97:07:83:31:4e:96:5b:98:e5:ae:2e:3a:2a:
69:55:e0:96:9d:8e:b1:46:6a:c8:58:46:de:e1:41:
a2:f8:85:73:ff:d1:29:b0:a1:31:e6:7f:d3:9d:6d:
0a:54:42:af:da:e8:8a:c9:67:67:22:56:c2:d4:23:
30:c5:96:2a:2c:5a:9f:42:64:15:97:e5:a3:38:9f:
6f:43:06:3d:a8:6d:04:06:7b:e8:f9:8a:16:ab:0f:
ec:fb:17:6c:d6:d3:1c:20:3c:b0:c1:57:80:1c:4b:
f0:5b:59:f9:09:e4:e7:2a:88:2c:ec:91:3f:9a:4c:
00:a8:d1:43:5d:8a:45:98:db:24:54:ec:2d:e9:23:
1b:06:87:83:4a:ef:5c:5c:cf:48:45:6b:6f:02:b0:
20:77:44:f7:2d:84:f1:d9:f1:a9:05:55:48:27:6a:
1f:4c:11:23:68:d7:0f:e4:ab:3f:c6:71:13:a5:f3:
f6:5a:1c:71:f3:66:62:1f:0f:fa:d9:08:20:2a:5e:
a9:bf:e3:5b:b7:a2:b2:eb:f7:45:09:1f:f0:73:a0:
94:6f:08:37:48:ac:0d:e6:37:b6:3f:d4:fd:98:2f:
4e:95:45:00:88:ae:33:2a:e0:f6:16:eb:74:64:a2:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:9F:4F:7B:32:B7:30:CA:F9:EF:2F:11:A1:F5:4C:FB:E1:5B:F4
X509v3 Authority Key Identifier:
keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/VF2fT3sytzDK-e8vEaH1TPvhW_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.0.0/24
Signature Algorithm: sha256WithRSAEncryption
91:04:6f:15:bd:c6:ca:05:6a:93:08:27:8d:ab:9f:75:3f:78:
36:d8:51:f5:be:44:d5:b1:cf:55:8b:3f:9a:75:0a:c6:75:ac:
67:9d:ab:8d:19:15:27:69:11:ec:66:d5:97:42:39:6b:08:03:
5f:a9:46:92:b1:91:d3:3a:c1:9d:00:1c:ed:56:d1:f2:75:21:
1d:ad:8c:c3:c3:d8:62:24:64:74:51:9b:67:da:ea:9d:33:5d:
d2:30:27:9f:25:b8:66:09:9d:62:93:22:16:03:0c:d8:78:4b:
6b:da:12:8f:31:0d:87:12:37:10:81:16:d5:24:0d:9b:05:cf:
7a:a2:90:e9:dc:6c:91:7c:30:0c:31:8c:15:a5:ad:80:07:ee:
4a:39:ac:97:b9:01:20:e0:c9:71:3a:d5:ff:e1:8a:5f:02:4b:
6e:a8:ae:ad:0d:c1:2d:14:40:f6:f4:2e:73:1f:00:a3:17:60:
c1:0b:7b:73:bd:83:b8:38:dd:ab:51:2b:83:8e:e9:ab:bd:01:
70:e2:82:1a:f6:42:96:72:f1:bf:f9:06:40:5c:82:ee:95:e1:
94:70:64:19:db:3c:63:6f:f7:55:a4:80:8b:4b:08:c8:3e:71:
89:73:8c:83:bd:b0:f5:0f:fa:2d:19:83:b9:17:06:a7:9a:19:
c3:45:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:47 2024 by rpki-client on console-fra.rpki-client.org