Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/0bdcq-krbaHF6jG_4dOYTmjsVG8.roa
File: 0bdcq-krbaHF6jG_4dOYTmjsVG8.roa (raw, json)
Hash identifier: iPR28sH63gKdwsFfO03hxJRWhYFRGXN69yN3KPiQ8Lk=
Subject key identifier: D1:B7:5C:AB:E9:2B:6D:A1:C5:EA:31:BF:E1:D3:98:4E:68:EC:54:6F
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018570E7572DEC42BBF5D8AED33C82985726
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/0bdcq-krbaHF6jG_4dOYTmjsVG8.roa
Signing time: Mon 02 Jan 2023 05:14:47 +0000
ROA not before: Mon 02 Jan 2023 05:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:57:2d:ec:42:bb:f5:d8:ae:d3:3c:82:98:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jan 2 05:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1b75cabe92b6da1c5ea31bfe1d3984e68ec546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:bf:03:1f:45:6e:c7:0a:a7:57:be:48:46:
9d:65:29:05:30:37:31:ed:a7:06:1f:2b:cb:31:29:
11:d1:bf:9b:9a:28:e0:e7:40:57:79:87:dc:8c:35:
0a:7e:e4:30:cb:82:96:55:1c:00:9d:95:e4:5b:21:
fb:eb:f4:7c:eb:e9:a4:8b:35:98:77:3e:c2:99:63:
24:91:c9:a4:e3:82:ab:4d:90:c9:52:2e:e2:1a:aa:
44:d7:90:24:f5:dd:05:78:3e:ca:e9:54:cd:cc:13:
93:bf:32:6c:be:6f:55:bf:a6:d2:4a:7a:13:eb:ef:
93:c9:c6:ad:20:55:ca:fb:67:2e:fa:d9:74:46:e6:
15:07:47:aa:2d:f6:2e:45:30:eb:32:01:32:b3:6f:
13:00:47:a1:85:a7:d2:3a:78:69:1c:76:75:a5:12:
cb:71:7f:82:a9:ba:5c:83:1b:95:68:a9:91:8d:df:
78:0d:bd:b6:c0:4e:f4:90:35:25:99:86:b0:4a:42:
2b:55:a6:22:4f:03:05:86:99:76:38:21:81:54:db:
fb:38:e7:17:58:3e:b7:20:b9:bc:37:df:48:99:2f:
61:bf:ef:01:89:56:88:cb:49:83:70:b3:34:c9:0d:
10:4e:61:d1:65:76:13:e4:ff:08:18:16:12:d1:b6:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:5C:AB:E9:2B:6D:A1:C5:EA:31:BF:E1:D3:98:4E:68:EC:54:6F
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/0bdcq-krbaHF6jG_4dOYTmjsVG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c9:67:42:ea:9c:bc:9e:a4:9b:8e:af:10:fa:36:64:ab:8a:
c0:d3:81:9c:33:66:fc:1c:c1:31:bf:e9:a2:a5:6c:a9:44:f7:
b1:af:ec:ad:e6:4c:16:2d:44:66:a4:0b:4d:47:24:d4:4f:68:
1c:25:4f:d5:23:3c:bd:e7:76:ff:a9:42:16:90:ca:43:e2:8e:
30:54:8a:86:5a:92:6f:db:44:2d:37:a3:02:de:78:6f:98:42:
b6:ab:fa:bc:36:f3:5b:04:a1:ae:5b:a9:48:b7:99:db:34:e9:
bf:1f:d8:18:a2:d9:b0:34:9d:81:82:aa:33:fe:ac:fb:cd:91:
96:b0:fa:74:23:0c:7f:1b:10:a9:2a:bc:d3:7e:67:bf:ee:23:
7e:ae:31:a4:00:c8:87:a9:66:4f:8b:33:90:78:c7:e2:88:d4:
ee:b6:30:6a:88:0a:2b:65:6e:ee:22:69:2c:3c:5f:62:cd:cd:
08:55:ce:ca:f8:d4:6a:fb:5c:e8:20:12:91:63:c0:2a:0c:95:
fa:9d:50:98:24:8a:11:a5:ae:9e:5a:2a:47:87:d1:a1:03:fd:
16:03:5a:42:de:7a:bf:64:e9:78:f9:01:cc:12:7e:7f:02:24:
8d:7e:28:87:46:af:9d:eb:33:0e:46:60:9e:23:f4:2c:91:5f:
8e:1c:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org