Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/1OWT6hhYChfLvs13Bp0VhMizhjo.roa
File: 1OWT6hhYChfLvs13Bp0VhMizhjo.roa (raw, json)
Hash identifier: 6MrN67r1UL2zDuLloL2xooHlwDeqZq3aB4uQyfQPNNc=
Subject key identifier: D4:E5:93:EA:18:58:0A:17:CB:BE:CD:77:06:9D:15:84:C8:B3:86:3A
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0189DF34F9547F85E75C8E9C7A835F1B5882
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/1OWT6hhYChfLvs13Bp0VhMizhjo.roa
Signing time: Thu 10 Aug 2023 11:28:58 +0000
ROA not before: Thu 10 Aug 2023 11:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47943
IP address blocks: 193.19.204.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:34:f9:54:7f:85:e7:5c:8e:9c:7a:83:5f:1b:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Aug 10 11:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e593ea18580a17cbbecd77069d1584c8b3863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:c6:90:17:01:11:1a:59:94:4d:16:a5:22:
65:da:ee:83:06:52:7b:1e:c6:54:1e:53:aa:27:6a:
0c:9c:43:2f:fe:49:f4:ae:5f:af:87:a4:11:82:eb:
87:c9:43:cd:90:31:4e:77:f2:0d:fd:41:a4:6f:64:
6a:c0:8e:52:53:d0:db:31:d1:23:88:27:69:ae:fc:
79:b0:0e:a6:f4:6b:14:08:d2:f2:81:d4:15:d8:06:
d8:27:d3:47:a1:7b:53:ed:90:ca:41:39:ef:1c:05:
d2:20:8a:4b:10:fa:ee:98:8d:b2:88:ab:ce:07:83:
3d:a2:78:66:17:99:8f:ea:3f:b2:be:02:0d:9b:8f:
5a:07:fd:c8:25:16:dc:24:93:f8:85:d2:c7:d1:b3:
66:b6:60:80:17:06:e8:ff:99:69:51:2d:0a:5f:24:
5b:4e:bf:79:38:12:ee:91:27:6c:b9:d3:e5:ca:f3:
9f:25:58:11:66:c4:ce:ef:7d:f2:60:d0:83:fe:b1:
eb:1e:8a:74:79:ad:03:f9:29:5d:2c:d3:ca:2d:09:
fd:ea:06:b7:92:fa:25:be:e2:37:e0:db:5c:d0:f6:
9d:be:63:7b:0c:a0:53:8e:14:b2:37:14:fe:e4:55:
cc:2f:50:8f:a5:79:27:cd:bb:a5:af:10:41:82:bd:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:93:EA:18:58:0A:17:CB:BE:CD:77:06:9D:15:84:C8:B3:86:3A
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/1OWT6hhYChfLvs13Bp0VhMizhjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:44:b1:8f:a9:aa:95:47:0c:dd:00:be:4a:45:e0:fc:d1:8a:
38:78:ae:b6:0e:07:1f:fe:33:07:af:83:e8:57:64:52:84:3d:
6d:3e:79:f3:21:94:eb:62:d4:41:f5:cd:2e:d0:19:92:82:98:
f0:b2:59:1b:93:4d:56:80:b8:23:68:94:6f:fd:cb:18:aa:3f:
3f:68:29:57:46:d0:fb:30:35:90:fa:50:4c:0e:3a:cc:13:5c:
0d:d3:46:4f:61:2a:c7:14:da:6d:69:ad:61:d3:c7:9e:2d:16:
31:08:27:06:2d:52:0d:7b:45:8e:05:bc:de:49:bd:ac:9f:10:
55:77:3e:f3:b6:11:06:f1:06:86:88:67:55:04:9b:69:db:e2:
64:b9:9f:ca:7f:41:4b:f6:6c:03:8a:a9:52:13:be:07:64:e2:
36:79:ce:97:ef:18:36:97:57:11:49:ec:c2:61:b5:83:c9:3b:
34:92:91:b7:7e:58:50:9f:58:0c:ca:2d:c1:1b:1b:48:8b:8d:
68:a2:2e:4b:63:7a:e2:66:43:dc:81:77:6d:f5:83:d6:5d:c0:
d5:61:cd:7b:15:35:a5:e7:c1:35:15:7a:d8:91:06:ac:10:76:
33:f2:a7:17:f3:84:bb:da:22:d6:eb:98:59:d0:42:cf:36:26:
c0:32:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:59 2024 by rpki-client on console-fra.rpki-client.org