Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/1-es7l104kw7KA1nnpZNUZ4M8Yh4.roa
File: 1-es7l104kw7KA1nnpZNUZ4M8Yh4.roa (raw, json)
Hash identifier: Swprj1AVo4AhfPBfL203Vf/Y9vUaMP1YAPYCL1Kw82M=
Subject key identifier: F9:EB:3B:97:5D:38:93:0E:CA:03:59:E7:A5:93:54:67:83:3C:62:1E
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 01856D2F260B9E5AA130BC814FEEA6AF8CC7
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/1-es7l104kw7KA1nnpZNUZ4M8Yh4.roa
Signing time: Sun 01 Jan 2023 11:54:44 +0000
ROA not before: Sun 01 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.53.16.0/22 maxlen: 24
193.53.20.0/23 maxlen: 24
2a00:f620:1::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:26:0b:9e:5a:a1:30:bc:81:4f:ee:a6:af:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Jan 1 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9eb3b975d38930eca0359e7a5935467833c621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:85:38:bf:7a:80:a0:2e:02:b4:5a:b6:de:
ab:d0:15:eb:be:2f:07:97:94:7d:08:24:f9:2c:97:
a3:49:6b:c5:ca:8e:00:40:60:a3:4d:03:26:9d:02:
e8:0d:de:28:2a:84:18:85:74:15:ee:51:33:97:84:
c0:4e:61:11:6b:8c:2c:12:2a:98:42:61:eb:c8:92:
70:86:59:be:4c:8b:2b:3b:86:99:c6:48:b1:77:32:
c7:7b:2d:09:fd:b7:51:d5:36:e4:83:c4:2f:d1:a6:
5b:a0:2f:81:9d:05:fd:99:89:dc:cd:4b:0d:ab:ea:
4f:23:ad:38:06:b1:2b:50:d7:cb:d6:c6:78:a9:4f:
9d:a5:a0:97:f6:00:12:83:d9:41:af:79:92:08:0d:
01:d9:4e:13:36:92:5f:52:41:87:1f:6d:f1:7c:7b:
8e:35:7f:c0:0a:ba:2a:d2:a4:1d:6e:3c:6a:7a:2c:
01:3b:0b:8a:3b:71:02:2a:7d:6b:1d:f8:0d:77:40:
fc:f4:52:d6:46:2e:32:d2:8a:b5:6b:ab:d5:36:8c:
52:21:99:7e:48:4d:3b:82:66:99:d2:d4:30:04:4e:
f7:4b:03:b1:f1:74:2a:48:14:7e:4a:6f:22:93:ce:
3f:00:b3:53:b3:9f:2a:88:cd:7a:45:d3:2a:c6:f5:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:3B:97:5D:38:93:0E:CA:03:59:E7:A5:93:54:67:83:3C:62:1E
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/1-es7l104kw7KA1nnpZNUZ4M8Yh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.16.0-193.53.21.255
IPv6:
2a00:f620:1::/48
Signature Algorithm: sha256WithRSAEncryption
a2:45:04:8b:4c:31:36:ab:97:c7:17:62:b3:df:63:2d:16:c3:
1d:aa:90:aa:e2:87:ac:fe:f3:2b:3a:2a:8e:85:3e:74:b0:e8:
50:6f:4b:76:fb:48:60:ce:83:c6:46:a6:b7:cd:e4:02:93:0d:
a1:f9:b6:a9:17:4a:a0:82:0e:69:19:1c:c3:a4:2e:dc:04:27:
d9:53:28:94:e6:23:b7:1a:f7:3a:9a:8d:5c:73:06:20:b0:72:
db:61:5f:f8:a7:44:fd:c5:9d:f0:93:b8:f8:e1:e7:9d:44:ee:
41:98:f5:2c:37:07:cb:5a:27:e1:87:6c:9a:9b:09:90:c0:91:
03:aa:76:d2:90:98:e4:74:e4:dc:01:97:b5:df:20:1a:4b:a4:
29:ea:67:d3:ed:ce:39:51:b9:54:1e:5d:9a:51:da:8c:1e:7d:
fb:d8:f0:b8:e0:f7:86:72:39:ab:04:1e:83:54:9a:1f:06:7a:
a8:b3:8e:62:aa:5d:d7:54:9a:e7:23:5a:29:9e:1c:d4:7a:d8:
4d:76:d6:e3:f7:44:6f:5c:05:0b:9e:11:c8:3a:3f:5d:cc:7c:
ca:d0:35:47:ca:7b:92:b6:f9:9e:46:d0:be:01:03:61:6f:46:
97:05:8b:15:f5:52:e4:bc:f8:e0:57:bb:25:ed:7a:3d:6d:dd:
82:f0:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:57 2024 by rpki-client on console-fra.rpki-client.org