Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/cf2SqUJs-dKj2KNJfxtxYwOThM8.roa
File: cf2SqUJs-dKj2KNJfxtxYwOThM8.roa (raw, json)
Hash identifier: 5YLEPr7EIYSzmHgh2/nJOuNYnfO7kKIGCnAntQ51OjE=
Subject key identifier: 71:FD:92:A9:42:6C:F9:D2:A3:D8:A3:49:7F:1B:71:63:03:93:84:CF
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01877470E4CEBE71A4BFFC74B99D513448C3
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/cf2SqUJs-dKj2KNJfxtxYwOThM8.roa
Signing time: Wed 12 Apr 2023 07:49:28 +0000
ROA not before: Wed 12 Apr 2023 07:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 193.203.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:70:e4:ce:be:71:a4:bf:fc:74:b9:9d:51:34:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Apr 12 07:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71fd92a9426cf9d2a3d8a3497f1b7163039384cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:fc:e1:e7:cb:a2:8d:70:e8:41:31:3e:c5:
60:3f:e3:0b:12:6f:e2:25:8c:f2:2c:44:41:63:17:
cf:f0:ce:63:8c:08:84:f1:1a:eb:10:95:9b:1c:8c:
9b:d6:66:4d:39:d4:7f:68:24:41:fc:c8:8d:a2:33:
d9:ff:23:f1:a0:a9:18:1b:17:a1:07:bc:48:f2:7b:
58:29:ee:ee:1a:40:ad:39:a2:95:fb:f5:b1:53:14:
85:a9:b5:b1:59:50:bd:1f:9b:c7:58:96:22:93:99:
3e:ce:d5:3b:da:10:3f:7b:d3:03:ce:be:54:0a:e5:
24:cf:43:31:f5:0b:97:08:e0:f2:03:c6:55:37:9a:
d9:6e:74:30:19:bf:77:4b:e6:ce:12:29:87:8e:61:
c8:38:e5:1b:e6:af:d8:8d:45:57:1a:19:05:81:fa:
a7:ec:eb:cf:72:f7:ef:44:4a:98:d6:5c:5e:fc:3a:
60:c6:0a:98:c4:c3:54:70:c5:92:77:1c:6f:c0:56:
20:ea:9c:e1:cc:43:33:64:46:12:7f:43:a7:d2:0f:
05:cd:c3:ce:7b:cb:8c:43:49:e4:21:84:82:41:f1:
68:ca:96:f1:ee:fd:0d:82:06:d5:96:19:45:12:7d:
cd:ad:12:2c:90:5b:ea:77:ad:19:4a:0d:18:8c:82:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:92:A9:42:6C:F9:D2:A3:D8:A3:49:7F:1B:71:63:03:93:84:CF
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/cf2SqUJs-dKj2KNJfxtxYwOThM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.51.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:82:45:84:97:ec:30:c9:e3:a8:e5:fb:42:81:81:b3:93:c7:
e1:2e:d2:9d:85:06:8a:43:31:64:9d:7f:5d:8f:6c:26:30:40:
63:2e:18:1f:57:96:d4:52:0a:47:7a:9c:73:29:a9:d7:53:c9:
09:88:da:61:db:75:ba:27:75:70:de:c8:7a:37:95:af:b5:a0:
96:45:5e:e4:ba:9f:d1:cf:8f:00:79:54:f1:39:b7:5b:ae:6a:
29:95:b8:0f:51:cc:36:0c:1f:b3:da:3b:a9:39:3e:49:d6:d5:
38:d8:eb:ac:e9:8b:58:0b:22:2f:59:eb:24:6a:65:67:db:53:
83:3f:dc:73:62:11:86:af:e7:c0:43:33:66:a4:7e:1b:47:ed:
f2:2a:04:96:f8:06:02:55:8f:ee:3a:63:8c:df:a6:87:18:cc:
3e:f8:60:a9:89:c2:f5:77:05:0b:6a:cf:dc:fc:b7:e8:88:7c:
dd:2e:f8:5a:f9:3d:aa:58:04:ee:77:9e:ee:80:1b:5e:cc:b9:
f2:7a:a0:4e:f7:51:97:6f:50:b1:ba:c1:00:58:e6:52:5b:d0:
3a:e5:eb:9e:3c:ae:b8:b6:c5:c3:99:26:18:29:7c:55:73:b7:
50:61:a9:35:82:17:70:bd:57:f7:a9:7c:4c:98:7b:ca:55:db:
4a:ab:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:16 2023 by rpki-client on console-ams.rpki-client.org