Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/9JbutlV91v4LXnkyBq19aG0KgaA.roa
File: 9JbutlV91v4LXnkyBq19aG0KgaA.roa (raw, json)
Hash identifier: oPo7rOhS/dER9DKDZKd0xx7iN8ilKmDnR/pgey6yxNg=
Subject key identifier: F4:96:EE:B6:55:7D:D6:FE:0B:5E:79:32:06:AD:7D:68:6D:0A:81:A0
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 01856E8B133D7E2F5AA4A7FD8FF52F9073DC
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/9JbutlV91v4LXnkyBq19aG0KgaA.roa
Signing time: Sun 01 Jan 2023 18:14:46 +0000
ROA not before: Sun 01 Jan 2023 18:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51462
IP address blocks: 193.105.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:13:3d:7e:2f:5a:a4:a7:fd:8f:f5:2f:90:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Jan 1 18:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f496eeb6557dd6fe0b5e793206ad7d686d0a81a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:87:b7:44:4f:88:7c:67:e4:48:bc:11:56:
42:af:15:d7:51:e1:27:70:41:0c:4a:af:15:88:65:
1e:7c:c5:2d:4c:74:73:a6:08:49:ca:6d:58:98:4e:
fe:f3:44:af:c4:1b:c1:9d:ed:08:77:ae:4b:ba:99:
0d:f4:6b:cf:66:70:fb:ca:60:56:d4:99:c5:39:56:
c4:e2:fa:4b:67:a4:4e:ff:5d:0a:0c:d1:ff:74:e9:
07:d3:e2:bb:54:ad:8d:10:60:85:c4:d5:3d:20:98:
c6:80:4c:c7:ea:49:08:08:98:97:57:e8:3c:80:93:
7f:2d:bb:f6:c9:cf:e7:3d:a2:16:0c:bd:2b:ff:f3:
5b:97:61:da:0d:56:ef:3f:73:e7:93:a3:74:af:d7:
84:80:8b:eb:20:c7:0f:82:27:70:7f:6b:37:3f:3f:
b2:6c:75:cc:3a:bc:4f:05:21:ad:f2:e6:3e:0c:c4:
9f:b0:91:7c:ee:f3:90:ac:1e:77:15:cd:87:3b:2d:
5f:b9:d7:1a:16:04:f5:f0:cb:96:ef:a7:8c:66:ef:
cb:3c:bc:9a:d0:9b:09:e5:33:f6:30:4d:90:7b:10:
b7:bb:1c:ba:7a:ea:32:6f:e9:07:60:b3:11:da:42:
47:4b:c8:7e:c4:ad:17:cb:c1:1f:46:fc:26:61:7a:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:EE:B6:55:7D:D6:FE:0B:5E:79:32:06:AD:7D:68:6D:0A:81:A0
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/9JbutlV91v4LXnkyBq19aG0KgaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a4:6c:d2:a3:f9:18:1d:26:0c:12:f4:b5:1f:e3:f4:2e:65:
58:54:86:9e:05:bd:33:09:71:a7:f9:66:04:ab:12:c0:f7:bd:
49:af:45:e8:ce:ac:48:e9:51:b7:57:57:76:49:ff:59:ae:48:
c0:d4:ab:5e:67:a9:59:8d:a2:0a:fe:6d:7d:0c:41:39:8b:a6:
74:59:cf:8d:53:eb:0e:d7:9d:c3:62:02:a1:1f:3d:4d:ae:da:
f0:dc:15:17:2f:d3:02:9f:77:28:c2:7d:c0:28:c3:58:bf:01:
6f:9d:71:bc:f9:f6:9b:66:36:f4:52:16:ad:d4:f3:70:6c:63:
f7:75:ce:11:af:8d:c4:4f:02:26:90:ce:70:64:c4:7b:e8:40:
15:c6:83:ed:c4:34:e2:52:e8:af:da:d4:0e:76:a2:1e:2c:e4:
52:49:ef:88:31:0d:ad:12:59:29:63:f4:6d:fa:0b:5c:7f:d7:
0a:5c:07:3f:91:4b:e1:61:56:4f:b5:77:07:83:a5:33:d9:99:
eb:38:61:08:39:c5:d7:16:5c:d2:65:6b:cb:ff:b8:37:bb:2f:
f3:68:7d:64:35:e0:f4:1e:57:97:d9:88:83:9f:b7:95:2c:eb:
ac:68:72:7b:56:f8:47:a3:a4:43:65:f6:9b:03:6f:8b:8f:01:
f8:4e:f2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:56 2024 by rpki-client on console-fra.rpki-client.org