Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/t1ByaZz9IX8LOA1FNlZCcD2up0M.roa
File: t1ByaZz9IX8LOA1FNlZCcD2up0M.roa (raw, json)
Hash identifier: XeMKE0zbtow/NZzc3N5Q2gbv8OCa2L+hkyLktvjVzfY=
Subject key identifier: B7:50:72:69:9C:FD:21:7F:0B:38:0D:45:36:56:42:70:3D:AE:A7:43
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 018C6CC962A917661CD2F91CA042D41B6010
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/t1ByaZz9IX8LOA1FNlZCcD2up0M.roa
Signing time: Fri 15 Dec 2023 09:23:06 +0000
ROA not before: Fri 15 Dec 2023 09:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9208
IP address blocks: 193.53.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:c9:62:a9:17:66:1c:d2:f9:1c:a0:42:d4:1b:60:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Dec 15 09:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b75072699cfd217f0b380d45365642703daea743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:67:c7:3f:12:e6:db:89:db:4c:78:50:fd:
e4:1a:39:43:1d:ce:b0:ab:d9:4c:74:4f:6f:5e:0e:
39:57:86:52:89:59:47:c1:32:a0:82:96:35:14:92:
27:a9:d9:45:0a:d3:3c:0c:06:6b:a1:75:89:be:35:
62:2d:74:38:e0:33:ec:00:cd:1b:40:61:07:22:09:
ec:1b:df:6a:2a:ba:23:3c:d5:a2:23:f1:ff:de:ce:
fb:17:46:65:77:f8:bb:be:5a:fa:e0:b1:be:87:9b:
e9:e1:b9:25:78:2c:60:b3:7c:5c:e3:c6:be:4d:d3:
33:44:9a:f6:8c:cf:7f:86:5d:09:fe:e1:d4:63:27:
49:d0:15:35:1e:a8:fc:40:96:b6:21:b2:59:c5:d3:
01:85:5c:6c:44:78:7b:6c:1d:7c:31:bf:35:85:b5:
56:16:f7:65:fa:ca:ca:ee:06:4c:45:9c:93:0c:28:
d0:0c:4d:14:5c:f1:dd:9b:b6:57:76:f5:c6:4f:a2:
87:fd:d5:66:de:2a:81:20:11:c1:49:e5:3c:6e:4a:
88:dd:c2:1a:2b:d3:92:32:ca:ff:b6:d2:8a:93:51:
3b:bb:14:63:01:d5:51:1f:6f:a9:a2:3b:5b:5f:f7:
26:ec:27:27:ba:ef:52:32:da:dd:c9:ab:e3:67:0d:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:72:69:9C:FD:21:7F:0B:38:0D:45:36:56:42:70:3D:AE:A7:43
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/t1ByaZz9IX8LOA1FNlZCcD2up0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.125.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:c4:55:50:0d:09:15:d0:aa:ae:6e:fd:f5:3f:94:0e:6a:
50:c2:ba:18:31:e3:c1:e4:1b:2a:56:9e:45:64:30:01:83:6d:
b8:01:bf:61:fd:11:ee:5a:6e:8e:63:d7:86:84:8f:ee:a5:72:
48:9d:cf:f7:8a:90:29:dc:b8:ed:20:b1:04:de:d0:1f:60:4d:
27:c1:24:80:17:77:94:5b:2b:c0:6d:80:c9:32:2f:ee:d5:bd:
95:cf:60:e9:b9:2c:ca:fd:08:08:2d:74:de:65:d2:26:ce:4a:
09:cf:1d:a5:55:37:45:8c:b3:2b:02:af:59:2c:13:2e:ba:53:
a2:74:fa:7a:11:80:23:25:2c:28:9e:9f:66:8b:69:e1:3d:06:
fe:8b:69:80:e1:8a:0c:a4:28:80:07:a3:c8:85:78:a5:45:1b:
63:b7:47:22:ef:f3:11:e4:48:eb:9c:07:d0:aa:82:82:e8:91:
85:43:01:d9:1d:25:4f:83:fa:82:c3:72:b0:99:bb:22:54:35:
0c:a0:b2:6d:cf:e8:2c:8a:20:7b:ea:84:2c:88:82:91:e7:ea:
6d:11:20:64:39:2b:2f:06:1b:a3:74:62:f5:c8:cc:29:6c:8c:
36:24:7c:0e:96:b4:e0:4d:65:b0:2e:2a:5b:67:04:07:49:dd:
23:06:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:39 2024 by rpki-client on console-ams.rpki-client.org