Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/gUbNKdyYu1NylzuOMfuzxgOklNg.roa
File: gUbNKdyYu1NylzuOMfuzxgOklNg.roa (raw, json)
Hash identifier: K6I6/oHjKp573aXMQdHl9Q5djo07PvLc9wa2xFHlZno=
Subject key identifier: 81:46:CD:29:DC:98:BB:53:72:97:3B:8E:31:FB:B3:C6:03:A4:94:D8
Certificate issuer: /CN=b87b401f0d4506d887eaf628ff598911e67f9b7d
Certificate serial: 01856FF964502A9C80C08EDD3409C991E9C6
Authority key identifier: B8:7B:40:1F:0D:45:06:D8:87:EA:F6:28:FF:59:89:11:E6:7F:9B:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHtAHw1FBtiH6vYo_1mJEeZ_m30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/gUbNKdyYu1NylzuOMfuzxgOklNg.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198155
IP address blocks: 193.150.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:64:50:2a:9c:80:c0:8e:dd:34:09:c9:91:e9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b401f0d4506d887eaf628ff598911e67f9b7d
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8146cd29dc98bb5372973b8e31fbb3c603a494d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:a9:1f:24:23:0a:87:1b:59:3b:92:7c:5d:
81:19:9f:c7:4c:ec:2f:e9:6a:91:92:91:78:0a:17:
c6:e6:00:d7:4f:83:60:52:d1:b9:b6:a6:d4:99:8e:
eb:1e:76:13:8a:ac:63:10:69:73:e9:eb:76:f2:54:
c6:a2:83:62:a3:fd:28:b5:08:25:46:44:1b:e8:f3:
e1:fb:af:b4:c6:51:0f:b1:79:f1:b7:6d:92:bb:df:
b7:16:8b:91:d3:d0:ef:2f:f5:e8:a1:c2:8d:9c:92:
c8:b2:b6:14:51:fa:1b:42:4d:46:27:b7:59:92:38:
3c:09:40:6d:4d:9c:b7:53:19:a3:5e:9b:0a:ca:a6:
03:d1:85:75:f1:ee:d9:aa:23:7f:01:b9:06:d1:45:
b4:3f:e4:48:be:6d:08:c6:b7:22:d0:1a:fe:7c:98:
92:cc:ae:5a:26:55:e0:88:c8:25:67:76:69:55:ed:
a3:e7:4a:03:8e:56:0d:77:80:a2:e7:3a:bc:b7:f5:
00:14:32:6c:18:ed:18:75:3c:ae:9f:e8:c9:f0:64:
c1:7d:56:4c:92:2f:81:38:28:18:54:0b:80:92:4f:
23:6e:b4:c4:4c:e1:f5:0d:4e:c7:5e:09:73:c9:fb:
67:19:70:17:1d:4d:f9:78:7b:61:d6:d1:35:45:af:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:CD:29:DC:98:BB:53:72:97:3B:8E:31:FB:B3:C6:03:A4:94:D8
X509v3 Authority Key Identifier:
keyid:B8:7B:40:1F:0D:45:06:D8:87:EA:F6:28:FF:59:89:11:E6:7F:9B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHtAHw1FBtiH6vYo_1mJEeZ_m30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/gUbNKdyYu1NylzuOMfuzxgOklNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/uHtAHw1FBtiH6vYo_1mJEeZ_m30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f6:e3:17:73:ea:d5:e7:2f:c8:9d:5a:db:1d:da:e4:8e:14:
50:99:98:d2:ee:68:4f:aa:71:d1:63:d2:f4:30:25:6d:cf:4a:
6a:8b:a5:96:dc:cd:7d:da:77:df:83:f6:65:c9:f5:19:af:0b:
07:43:16:31:2a:ea:bd:1a:b8:b5:bf:23:57:3d:b2:c5:ab:a1:
06:12:92:d3:75:b6:4a:09:0e:dc:d8:6e:e5:d9:26:58:6d:8a:
f4:57:70:56:29:87:e8:df:8e:77:9c:e9:bb:d6:11:d3:30:68:
7a:85:bc:70:47:95:c1:41:17:54:d8:3d:64:28:ca:c2:af:13:
a8:1e:8c:ea:8e:c4:0e:4f:fe:4c:c4:14:18:52:61:fd:b2:db:
86:f4:85:61:9a:70:70:e4:84:55:cf:ad:a7:16:c5:ee:02:67:
c7:e0:1c:af:59:46:96:4f:fe:6f:d1:99:97:b0:89:9c:bc:70:
f4:72:fb:d3:1a:1c:93:d0:4a:35:c5:55:b7:a2:4f:4c:be:4a:
f9:7e:34:19:2c:40:c7:b6:70:b7:58:8e:11:21:ff:f2:90:4b:
0b:52:1f:d5:66:db:50:8a:0d:44:32:30:4c:7a:4b:11:34:57:
c6:36:2c:8b:d9:a9:20:e4:83:39:a8:c7:a3:78:bb:74:b9:d4:
39:80:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:32 2024 by rpki-client on console-ams.rpki-client.org