Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/igRD3OVz_GN3yD-O3Jy7fXX2ldI.roa
File: igRD3OVz_GN3yD-O3Jy7fXX2ldI.roa (raw, json)
Hash identifier: 5OTlFd1XRVTNlHTYMRU2xHIzkxUPwtgtK5D/AlHbdV4=
Subject key identifier: 8A:04:43:DC:E5:73:FC:63:77:C8:3F:8E:DC:9C:BB:7D:75:F6:95:D2
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01856E4B0085FE621228AABA5F28914E9D14
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/igRD3OVz_GN3yD-O3Jy7fXX2ldI.roa
Signing time: Sun 01 Jan 2023 17:04:47 +0000
ROA not before: Sun 01 Jan 2023 17:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395003
IP address blocks: 193.46.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:00:85:fe:62:12:28:aa:ba:5f:28:91:4e:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 1 17:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a0443dce573fc6377c83f8edc9cbb7d75f695d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:e7:32:32:06:af:e4:80:0a:4e:d7:1c:0e:
72:f7:31:98:93:9e:9b:a6:84:68:ca:c9:53:1f:6f:
7d:92:5e:ea:da:4f:91:f6:60:a7:92:be:a5:85:32:
20:d4:cc:1c:73:04:00:fb:db:7b:91:0b:7f:7d:47:
1c:2f:94:cf:fb:54:5e:e6:9c:eb:94:ec:74:ef:27:
b2:32:c2:68:5f:85:3b:94:e0:a9:55:c5:f3:27:a3:
15:00:f4:6b:7a:fc:92:bc:92:90:4a:03:8d:8f:7c:
08:98:78:94:93:b9:d8:bc:96:df:1d:a1:30:12:33:
0c:84:36:c1:48:fa:ba:4f:1c:74:83:e8:f7:48:d0:
e3:9a:d2:cc:af:4e:1f:d1:b2:6d:fa:89:f0:27:aa:
c6:65:d0:5b:d7:58:f3:3f:75:a3:36:cd:ef:e5:94:
9f:a7:cc:f5:34:0a:94:d5:fe:03:27:21:1e:4d:c9:
a0:84:1e:05:c5:c9:21:5d:d7:91:b4:d2:40:db:9f:
a8:1e:8f:a5:c8:81:a4:1c:61:af:c4:25:d6:d7:4d:
e0:bf:d3:87:b7:4c:a4:d0:cd:d9:53:2f:d5:5d:e1:
8c:3d:39:bc:42:61:22:bb:ce:1b:04:ab:fa:4a:e0:
c7:88:ff:26:7a:db:c0:fc:a7:bd:5e:68:60:3e:6c:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:04:43:DC:E5:73:FC:63:77:C8:3F:8E:DC:9C:BB:7D:75:F6:95:D2
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/igRD3OVz_GN3yD-O3Jy7fXX2ldI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.74.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e0:89:45:5f:b9:8b:da:0b:86:31:09:7f:bd:af:4a:4d:3a:
61:da:1d:36:70:88:f4:18:22:65:d7:a4:d8:3b:a4:9f:18:5c:
28:d9:90:b4:93:ee:a1:fe:0b:98:fb:5d:1b:2c:00:82:3e:65:
2d:da:a9:c3:4c:44:ce:91:1b:75:2e:ee:91:f9:69:58:fc:95:
4c:be:17:15:4b:0b:61:41:7f:ad:21:ae:0e:01:7a:07:e1:af:
72:e5:b5:45:90:b6:97:eb:9e:d3:36:19:f3:eb:57:f4:a3:9c:
e4:90:a9:14:5f:2e:1f:dd:9b:24:09:b0:f3:a8:25:92:6d:94:
a2:72:64:42:84:3e:c1:80:f8:58:f6:dd:03:87:ff:f3:b6:ab:
b4:ef:b5:28:32:46:0d:7b:71:03:55:ad:83:ec:c0:25:4d:5e:
b0:84:92:d1:ff:e9:10:f5:f4:f7:60:62:2a:68:5c:18:c7:1f:
ec:1c:b7:61:8e:3d:c9:dc:c9:21:91:bf:1b:44:39:36:f2:87:
bc:0c:c1:65:08:10:3f:84:e2:ba:df:c1:2d:22:b5:16:47:00:
68:15:30:24:f6:0e:86:8b:d5:02:b2:b6:01:d8:bf:cf:74:5f:
b0:9a:b6:ad:7b:0b:1b:4c:7d:1e:59:fa:00:d1:08:11:ec:29:
40:b8:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:53 2024 by rpki-client on console-fra.rpki-client.org