Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VLfd-ifVG0vrthT4BaA1hRRwlog.roa
File: VLfd-ifVG0vrthT4BaA1hRRwlog.roa (raw, json)
Hash identifier: vnR81fkquPnXl+7N14rAOx2oQJJw3lQvwzrAu2Lce8c=
Subject key identifier: 54:B7:DD:FA:27:D5:1B:4B:EB:B6:14:F8:05:A0:35:85:14:70:96:88
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01857042ADB8BC3959D27219D7D2E1DA91B8
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VLfd-ifVG0vrthT4BaA1hRRwlog.roa
Signing time: Mon 02 Jan 2023 02:14:56 +0000
ROA not before: Mon 02 Jan 2023 02:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212517
IP address blocks: 193.53.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:ad:b8:bc:39:59:d2:72:19:d7:d2:e1:da:91:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 02:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b7ddfa27d51b4bebb614f805a0358514709688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:66:97:6a:58:c8:b5:02:ef:c5:d1:24:fb:
8c:79:7f:8f:91:5e:d2:1b:b2:a0:c9:57:dd:df:72:
64:b3:66:4f:d0:52:a5:04:a3:6a:43:5f:3c:b5:a9:
9e:34:6d:3c:71:89:95:f9:1f:e6:bd:c2:80:94:2c:
60:43:51:28:b0:e9:ca:28:7f:a5:39:b2:03:64:1a:
6e:c0:63:74:e5:f7:cf:fb:64:8e:af:10:77:4a:1a:
70:76:54:df:a4:2e:77:87:83:5e:c0:49:78:84:59:
27:14:5c:e4:51:65:e6:38:c3:f5:eb:9b:c5:66:44:
fa:36:b5:3e:06:c4:b7:c1:68:86:cf:08:7f:a3:49:
16:a3:f1:93:cf:94:53:ab:c7:18:7f:43:df:14:4d:
c5:2e:ba:e4:8e:c3:a1:0e:1d:ed:57:9d:a0:f6:09:
57:53:8a:83:f1:ef:55:ba:66:29:2a:61:46:a8:76:
b8:ce:e7:73:f8:ca:a5:58:ba:77:49:14:2f:82:30:
7e:2b:72:4b:18:26:db:35:54:80:a6:19:fc:07:2c:
08:57:a7:18:cf:10:82:b3:ca:d7:ab:c8:83:0b:38:
c5:0c:97:6a:3c:11:96:c2:b6:2b:dc:62:ed:54:30:
e2:0b:97:68:61:53:34:2e:e9:23:6f:3b:42:0c:97:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:DD:FA:27:D5:1B:4B:EB:B6:14:F8:05:A0:35:85:14:70:96:88
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VLfd-ifVG0vrthT4BaA1hRRwlog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
Signature Algorithm: sha256WithRSAEncryption
54:28:e8:af:73:19:d9:1b:56:6f:66:f3:28:73:f1:54:d5:4a:
b4:42:d1:de:81:73:af:0b:c9:26:45:ad:b0:c7:50:f6:ed:6c:
27:a9:7e:2e:89:f9:a9:e7:47:62:91:bc:f5:af:5e:2b:14:1c:
ea:0b:8d:f3:79:21:da:8d:41:6d:f8:14:a0:c7:98:27:e2:8a:
98:09:6a:c9:b2:65:56:62:53:5c:10:0f:a5:f7:94:94:49:38:
25:63:f2:af:56:41:60:b6:09:4f:c3:c3:15:7b:d5:62:b5:23:
97:fa:97:06:f4:01:1b:b3:53:4e:09:92:a0:05:76:03:0e:63:
19:d2:9e:81:2a:50:2e:cf:0e:28:60:ef:95:14:6a:4b:92:f9:
ef:99:be:cd:b7:5d:91:db:18:5d:59:25:20:c0:c5:77:d5:3f:
e8:11:80:11:41:e0:f2:0a:24:8a:e6:70:64:16:3d:ce:1a:06:
7c:02:10:28:d1:b8:be:7b:03:c3:50:8d:66:64:16:1e:2b:21:
d8:d1:f0:4f:90:47:af:20:d8:da:57:a1:05:21:c7:92:c1:22:
55:d8:a8:01:dc:2d:45:85:80:76:a1:da:fc:9d:eb:86:13:35:
49:95:cd:27:fe:6e:90:a5:7e:b0:9e:ab:bf:08:d1:d5:1d:68:
12:17:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 16:45:07 2023 by rpki-client on console-fra.rpki-client.org