Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/bE3_JXI7Wkdb2zkS9PWkKJiGD8Y.roa
File: bE3_JXI7Wkdb2zkS9PWkKJiGD8Y.roa (raw, json)
Hash identifier: l5m1NjrmFvCyvTGmT8zvlUwxgGYPd6QOORtiv3jyEso=
Subject key identifier: 6C:4D:FF:25:72:3B:5A:47:5B:DB:39:12:F4:F5:A4:28:98:86:0F:C6
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01856C01337E8DFC5CF76BAA98BE8DF89F7B
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/bE3_JXI7Wkdb2zkS9PWkKJiGD8Y.roa
Signing time: Sun 01 Jan 2023 06:24:56 +0000
ROA not before: Sun 01 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 193.25.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:33:7e:8d:fc:5c:f7:6b:aa:98:be:8d:f8:9f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4dff25723b5a475bdb3912f4f5a42898860fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:f5:4c:aa:85:7a:d9:5b:81:f0:ab:10:0e:
24:56:96:e0:e7:23:63:89:15:50:bc:94:9a:75:7c:
a6:08:6f:d3:eb:05:9c:ef:fc:50:67:fc:0b:84:04:
7a:48:29:9e:d4:ba:5b:e2:7f:51:2d:c0:23:a6:dc:
f8:47:a3:54:94:e5:ed:86:18:e9:72:f5:85:f6:dc:
c8:12:e8:72:68:49:01:12:76:dd:60:f0:5d:bf:f8:
17:3c:53:3a:1d:6f:64:85:21:f6:18:23:85:3a:35:
48:fe:3a:cf:60:ee:7a:41:ba:3e:f7:cd:49:ff:c9:
79:28:c6:88:4c:18:2b:f6:b6:28:41:65:e5:c7:4b:
17:57:36:6b:8a:73:f0:da:bf:2b:69:f8:e8:f0:fc:
b5:f0:88:93:51:48:dc:0b:94:c5:b0:d0:41:d7:33:
02:88:c2:8b:20:db:c8:d2:7f:af:2b:3a:50:e0:30:
33:00:4e:38:c0:e1:f2:dd:73:ad:3e:46:46:94:ce:
7c:92:dd:bf:f0:7c:02:2c:93:c5:d7:28:7b:43:df:
66:05:e8:93:56:aa:51:10:06:e4:4b:94:f7:99:72:
f6:fd:dd:17:4a:cf:23:6d:75:49:d3:6b:cf:e1:16:
85:8b:92:39:41:51:55:0b:27:8e:55:44:e4:40:1a:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:FF:25:72:3B:5A:47:5B:DB:39:12:F4:F5:A4:28:98:86:0F:C6
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/bE3_JXI7Wkdb2zkS9PWkKJiGD8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0f:91:10:c8:d3:27:2e:21:86:1c:0e:51:8f:80:47:a0:0e:
14:19:42:1a:33:b6:de:be:4e:de:ee:05:d2:03:5a:6b:3d:d3:
6c:d1:ce:9f:b0:68:11:62:77:9c:78:6e:c9:54:32:77:50:3e:
61:1e:4c:89:c4:1b:3b:30:30:19:fe:9a:38:39:9f:e0:b4:15:
64:d7:63:07:94:3c:8a:4d:f3:80:ff:d0:50:a9:e3:18:36:3a:
41:d3:45:24:c3:ca:02:71:36:3d:73:97:d0:ee:95:43:e9:2d:
66:7f:24:dc:9e:05:28:90:4b:a6:01:5a:30:fa:57:53:97:f8:
dc:d5:37:fb:e6:f8:22:67:a1:75:1a:56:95:03:38:b5:a3:70:
f2:af:9a:0f:2a:8a:ce:b4:d7:ed:df:83:7e:da:d7:ee:25:12:
7a:d8:37:ee:f1:c8:80:a3:a8:82:c7:29:c2:f2:9f:8a:54:34:
0e:43:d8:94:47:91:1f:39:e4:15:ec:a4:6e:05:db:2e:23:a2:
fa:3f:23:d5:de:17:ed:bf:d6:a1:09:cf:a5:a0:30:a8:4c:cc:
84:e6:31:b0:85:7c:09:9a:42:fa:d7:ef:bf:37:5d:28:bb:ba:
63:c0:8a:5a:f4:39:30:7c:31:f6:71:fd:ea:0b:e5:a6:81:ff:
d5:e9:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:09 2023 by rpki-client on console-ams.rpki-client.org