Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/83jSMMUUq9LDa6n0ro4mxzUV9x4.roa
File: 83jSMMUUq9LDa6n0ro4mxzUV9x4.roa (raw, json)
Hash identifier: hD14wEZiYMFA3SUrtXkTZW9u9NTucSNeRWSbVkwLtiM=
Subject key identifier: F3:78:D2:30:C5:14:AB:D2:C3:6B:A9:F4:AE:8E:26:C7:35:15:F7:1E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018582BFBC4341F0E5A4D2FE41E3C06AE4EF
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/83jSMMUUq9LDa6n0ro4mxzUV9x4.roa
Signing time: Thu 05 Jan 2023 16:24:41 +0000
ROA not before: Thu 05 Jan 2023 16:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20940
IP address blocks: 193.108.88.0/21 maxlen: 21
193.108.89.0/24 maxlen: 24
193.108.90.0/24 maxlen: 24
193.108.94.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:bf:bc:43:41:f0:e5:a4:d2:fe:41:e3:c0:6a:e4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 5 16:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f378d230c514abd2c36ba9f4ae8e26c73515f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:02:d1:2d:81:a9:99:1f:14:fa:c5:d6:5e:
54:e1:af:a1:8f:96:cd:17:58:aa:d2:7a:10:ac:a0:
41:63:72:6d:c9:6d:13:b7:1e:32:66:0a:8e:5e:fe:
c4:bb:29:4c:07:c1:a3:42:76:02:45:f0:98:05:4d:
c7:d3:04:72:65:4a:54:81:03:38:1f:9e:b6:38:6f:
46:6a:6d:e4:57:26:84:95:31:15:a9:58:64:28:2c:
9e:41:ba:31:d8:9b:2a:98:e0:83:a2:e4:b6:d2:7b:
9d:86:ee:6a:23:56:8a:45:7b:14:5a:6c:3d:a6:b0:
3e:76:f5:81:91:87:52:02:3b:bd:81:20:88:60:71:
46:53:a6:27:93:51:4f:53:64:fb:13:e0:4c:ff:b3:
9d:de:df:60:30:a4:9b:bd:5f:8b:5d:e7:3e:68:d1:
c8:c8:37:4c:d2:66:40:97:69:4a:0b:6e:c5:76:53:
c9:e3:fe:2e:69:f3:b8:31:cd:b7:c6:cc:10:6e:c8:
2f:21:43:19:11:69:31:90:89:a7:0c:ee:95:9c:61:
1d:aa:31:dc:74:65:60:6e:99:c9:20:d0:39:06:91:
57:34:ce:62:90:1e:a3:8f:bd:30:63:d4:35:60:88:
7e:a6:0a:49:cc:13:36:4a:d6:fb:20:75:a2:f1:bb:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:D2:30:C5:14:AB:D2:C3:6B:A9:F4:AE:8E:26:C7:35:15:F7:1E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/83jSMMUUq9LDa6n0ro4mxzUV9x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
52:15:3a:e6:90:89:9f:df:bd:24:86:ef:43:71:ff:fb:c2:21:
5f:d7:9c:dc:21:dd:41:5a:5f:d2:45:09:0e:61:33:3e:19:df:
e2:2a:89:dc:32:8a:48:19:0d:4c:5e:c8:00:63:87:6b:de:76:
15:a1:af:73:d0:8e:3b:9d:8d:e3:1d:0d:5a:60:44:b8:9f:6c:
7b:ec:4f:52:b7:8a:ea:e4:09:3d:5b:04:75:f8:96:2a:b6:7f:
17:47:68:57:83:06:25:bb:47:71:7f:b7:40:67:f1:0c:87:d2:
12:81:3b:0a:2d:38:de:15:d8:37:20:b0:9a:f1:23:6a:36:fb:
63:e8:af:b8:44:a8:5d:c1:42:82:7f:0a:ff:70:9a:2e:4f:a3:
98:37:07:ca:26:06:33:03:50:30:74:dc:97:4a:71:cb:27:fc:
51:3e:5b:13:c6:c7:19:0c:79:6d:02:53:93:0a:08:71:da:d1:
e7:bf:2a:14:72:95:cc:6d:d0:42:fa:e1:f3:7b:26:72:73:3a:
32:33:b9:e0:33:c0:8d:06:0d:27:17:c6:ca:d6:e6:6a:b1:33:
da:f2:31:27:df:aa:50:8d:25:f7:a9:9a:6d:21:15:36:2d:84:
66:f0:f6:8f:4d:ba:47:f9:1b:49:41:34:ed:18:58:86:cc:2c:
2f:70:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:22 2024 by rpki-client on console-ams.rpki-client.org