Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/aPVzyjs4_xyN7gdDGPESiJmwTOQ.roa
File: aPVzyjs4_xyN7gdDGPESiJmwTOQ.roa (raw, json)
Hash identifier: yr9EJ6h0sBxbXSTDoj/i+FUDQtQCMuA/gAU0feFRdS8=
Subject key identifier: 68:F5:73:CA:3B:38:FF:1C:8D:EE:07:43:18:F1:12:88:99:B0:4C:E4
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 018570429D1189CE2B2EB79557D5A179E041
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/aPVzyjs4_xyN7gdDGPESiJmwTOQ.roa
Signing time: Mon 02 Jan 2023 02:14:51 +0000
ROA not before: Mon 02 Jan 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48417
IP address blocks: 193.169.182.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9d:11:89:ce:2b:2e:b7:95:57:d5:a1:79:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Jan 2 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68f573ca3b38ff1c8dee074318f1128899b04ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:04:cc:b3:bf:a3:b1:84:e8:b6:8b:1d:79:
58:24:2b:48:29:69:b9:ad:56:9b:d7:0a:27:89:5b:
7a:82:b8:f9:08:8d:cc:db:ed:6c:a9:7f:21:98:a8:
ce:28:04:b9:7a:36:fe:93:ce:1c:09:98:93:66:ab:
be:f9:69:47:45:49:03:4f:74:43:13:8e:bb:82:96:
c8:b6:e2:16:bb:ef:db:bf:6f:94:ab:69:f7:e1:de:
43:07:82:3b:3e:71:87:21:99:44:11:f1:5c:03:f3:
b8:60:86:2e:d2:22:28:38:81:73:ef:ac:af:a2:70:
3d:27:de:be:76:3c:1c:b8:f6:a0:c5:55:90:6e:6e:
76:5e:ad:43:79:87:26:6b:10:39:b3:a7:fd:98:b2:
3d:39:59:19:77:60:e1:1c:49:d2:de:a0:a0:63:8b:
a3:d8:91:d8:24:15:53:7f:cf:d8:3f:d6:16:a0:65:
f3:11:be:86:ab:94:ee:cc:cd:94:fc:75:bf:fd:fb:
92:09:7d:fd:0b:6e:74:2e:75:f0:64:99:a8:03:ca:
95:3c:53:86:cd:d2:70:1b:7d:22:67:7c:53:4c:3d:
cc:0a:f9:29:a7:c3:35:b6:0a:98:5b:fb:a8:f0:ec:
8c:08:3e:a3:d1:4f:2d:49:f6:c6:ae:c2:73:00:13:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F5:73:CA:3B:38:FF:1C:8D:EE:07:43:18:F1:12:88:99:B0:4C:E4
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/aPVzyjs4_xyN7gdDGPESiJmwTOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.182.0/23
Signature Algorithm: sha256WithRSAEncryption
05:7b:3d:26:fd:b5:09:76:2b:d4:de:ee:27:18:b3:05:d8:11:
90:f4:fb:7b:fe:56:1d:9a:50:ff:69:9f:57:d8:3f:15:ca:88:
d6:22:3d:9d:4a:de:d2:76:56:1a:d8:43:68:eb:eb:2d:34:6f:
95:72:b9:ec:62:fc:da:0d:e1:4d:6a:96:01:17:4d:17:0e:6c:
34:19:17:ff:e4:a4:34:63:dd:b3:f0:8f:3f:d4:c5:e9:40:c8:
28:b4:83:f9:43:59:18:8b:a3:61:d6:c0:86:71:21:57:d5:ff:
37:cb:15:f5:c4:3c:1d:c5:86:d0:6c:ae:2b:91:80:20:0a:8a:
1d:8f:50:c5:bc:8b:fa:3a:38:33:86:81:fa:b2:4a:06:2d:40:
5c:ef:f8:7c:b5:f2:d3:a7:04:f3:88:9f:3c:2f:87:51:22:a1:
58:00:aa:6a:0e:2c:20:be:e8:79:6a:9b:6f:14:7a:35:40:49:
7c:29:f6:1f:ec:28:1a:e9:84:3d:48:b2:0b:1f:90:91:a7:24:
23:9b:6c:6e:00:31:cd:7c:76:76:dc:f6:be:65:ee:f2:68:7a:
0a:74:b1:9e:cd:ce:9d:03:2d:1e:a8:a9:a7:94:9e:ef:1d:fd:
d2:ed:ca:52:2c:3a:73:66:7e:ac:65:d7:65:e2:49:b3:a2:a7:
67:88:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:21 2024 by rpki-client on console-ams.rpki-client.org