Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ImSxgQW2P12X2M8UrZyBYGITEAs.roa
File: ImSxgQW2P12X2M8UrZyBYGITEAs.roa (raw, json)
Hash identifier: K+55xblAEc4mSPJO7cSTxuvb2ohUVSH8K8o0lqWsAy8=
Subject key identifier: 22:64:B1:81:05:B6:3F:5D:97:D8:CF:14:AD:9C:81:60:62:13:10:0B
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01856C01313045007BCD09E3893BFCFDD59E
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ImSxgQW2P12X2M8UrZyBYGITEAs.roa
Signing time: Sun 01 Jan 2023 06:24:55 +0000
ROA not before: Sun 01 Jan 2023 06:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.25.214.0/24 maxlen: 24
193.25.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:31:30:45:00:7b:cd:09:e3:89:3b:fc:fd:d5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 06:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2264b18105b63f5d97d8cf14ad9c81606213100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:b2:77:37:16:82:7a:93:b6:e0:69:70:38:
80:a3:f9:c7:4f:2c:0e:5a:5f:23:01:e6:85:6e:e4:
f2:70:ca:f4:38:a3:d9:97:a9:71:9f:1f:69:3e:00:
cf:6a:fd:5d:f0:14:97:98:f9:e6:64:2c:a7:35:cc:
08:11:8d:f3:03:aa:6b:13:95:fd:05:e3:d1:be:bf:
fe:73:71:43:30:c5:68:3b:38:8a:d4:1c:f6:23:e4:
b5:77:6c:01:d7:f2:d4:18:94:e0:b9:3a:b8:5b:27:
5c:e3:fe:51:36:e1:4e:1a:25:48:52:cc:f3:ae:16:
21:72:9d:4a:94:7f:27:79:b7:b6:1c:e9:72:eb:67:
ca:f1:ee:ba:59:51:f7:c7:6e:ab:1d:17:2c:60:00:
9a:d6:a5:10:79:02:a4:fa:5e:46:41:d3:5d:cc:39:
71:5e:27:52:a3:0d:d9:e2:33:57:ab:11:89:1f:8d:
b5:70:b9:3f:93:0c:3f:91:cb:a1:73:ff:a9:45:ab:
8e:91:d5:84:e9:5d:ba:98:56:77:c8:22:df:75:6d:
96:1c:e8:50:03:14:14:eb:3c:6b:d5:6c:f5:bd:f8:
82:53:06:e4:7e:3d:b2:4c:8a:45:30:0a:49:9c:f0:
a8:67:9a:7e:3d:6b:10:64:e3:e3:2e:5a:0f:22:f7:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:B1:81:05:B6:3F:5D:97:D8:CF:14:AD:9C:81:60:62:13:10:0B
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ImSxgQW2P12X2M8UrZyBYGITEAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.214.0/23
Signature Algorithm: sha256WithRSAEncryption
82:7c:68:bc:7c:48:76:1b:ef:e2:84:2f:27:be:1e:b7:86:54:
8e:c8:41:29:38:38:64:e7:26:e8:86:19:ce:47:be:04:64:67:
31:f8:4a:8f:bd:11:c5:35:fe:37:d2:30:26:46:81:29:bf:79:
37:18:ed:5f:90:6a:08:ad:53:98:f9:41:ee:a7:b3:95:98:b0:
db:7c:ef:b2:26:62:b3:65:d6:c9:a3:45:c4:a5:bc:a7:80:af:
a3:cc:b7:80:cc:da:bf:84:6b:09:ab:34:b0:23:32:fc:4d:52:
4a:ed:24:3b:de:68:b8:f0:cb:da:89:cb:74:8c:0d:20:02:67:
57:ce:6a:a0:f9:ce:24:19:4d:26:85:dc:0a:f0:fe:a4:a1:44:
d6:e4:37:f7:5c:de:eb:26:04:77:6a:cc:ba:f3:58:33:7f:91:
a6:e9:e3:ff:37:ad:94:31:a2:08:5d:6f:0d:a2:06:4e:33:88:
8e:3b:1b:79:c7:19:91:7a:88:c5:1f:1b:f0:cd:34:62:75:aa:
c6:58:48:9a:33:dd:ad:d3:45:50:58:b1:fe:b3:b1:bf:14:88:
ca:1a:4a:4d:8c:41:75:73:03:f5:06:19:00:aa:d9:f9:e0:c8:
f5:42:d2:84:04:8d:e6:75:a1:5a:25:c7:ff:20:35:9e:00:a9:
b5:cd:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 00:22:40 2023 by rpki-client on console-fra.rpki-client.org