Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1-KFsTU5V0hu1KV9GB5nZo6Fv7Yc.roa
File: 1-KFsTU5V0hu1KV9GB5nZo6Fv7Yc.roa (raw, json)
Hash identifier: IySVVqBBmqsM0raRhqUxQOXSvvzNZlEyOg8zFWZrt4Y=
Subject key identifier: F8:A1:6C:4D:4E:55:D2:1B:B5:29:5F:46:07:99:D9:A3:A1:6F:ED:87
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01879E50172F3C2C471393DBEAB23A86FF1D
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1-KFsTU5V0hu1KV9GB5nZo6Fv7Yc.roa
Signing time: Thu 20 Apr 2023 10:57:41 +0000
ROA not before: Thu 20 Apr 2023 10:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:50:17:2f:3c:2c:47:13:93:db:ea:b2:3a:86:ff:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 20 10:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a16c4d4e55d21bb5295f460799d9a3a16fed87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:f8:77:b6:d8:d9:18:23:c4:1e:d0:0a:38:
ae:7f:45:3b:5a:5a:94:bb:e7:a5:ae:e0:65:f4:d6:
51:b1:2a:f8:d1:b2:95:16:8e:bf:84:c6:95:15:93:
9c:5c:f0:a7:2c:39:7a:a0:36:32:c7:40:e8:8f:6e:
72:46:e0:70:e1:2b:62:8f:9c:65:81:91:49:ad:68:
9d:84:e7:e4:9f:77:37:19:9d:fc:2a:fd:f9:f6:ca:
a1:59:10:1d:72:68:b6:06:32:fc:01:5e:8e:91:54:
1e:e2:39:f6:f2:d9:83:ca:fd:07:96:7e:08:72:71:
35:00:f0:13:ec:e3:1b:0d:c4:2a:70:ff:52:00:a7:
d7:b6:a5:c9:ec:f1:8f:51:0c:9b:da:20:85:26:a3:
fb:66:64:e6:86:01:52:3d:bd:15:ea:dd:be:a9:94:
d0:8d:fa:b7:5a:8e:0e:4c:0f:35:74:ac:a5:18:2e:
70:06:24:fc:c0:4c:16:12:4a:1a:b6:04:83:57:2c:
43:cf:15:3b:94:ec:4d:f9:c9:e1:3f:80:3b:1c:e8:
cd:db:4e:0c:73:46:52:2a:fa:68:4e:8a:cd:cf:18:
69:c8:a5:63:0a:b2:60:2a:c4:da:f0:15:d6:a9:ae:
14:27:00:4e:cc:3d:6e:b8:bc:b9:aa:67:6f:37:c9:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:6C:4D:4E:55:D2:1B:B5:29:5F:46:07:99:D9:A3:A1:6F:ED:87
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1-KFsTU5V0hu1KV9GB5nZo6Fv7Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fa:11:f5:54:16:fc:20:30:38:d5:fd:84:e1:d9:72:da:26:
d7:83:7a:42:93:0c:38:b7:23:02:2a:aa:0d:f0:e7:72:c1:e0:
d8:67:87:b9:c5:f1:de:ff:a4:7b:bf:1b:9e:8f:4a:9a:9e:2c:
89:91:d7:1d:81:3a:fc:e7:d2:c2:47:b2:25:5d:87:5c:fd:eb:
48:a8:6a:34:24:a8:43:6a:a5:31:c6:db:eb:0b:06:60:28:c6:
2b:de:ff:d0:e5:3d:14:11:d2:f5:15:4b:90:80:cd:22:43:00:
d5:71:ba:3d:cf:f2:47:7c:67:78:5a:65:f2:fe:5b:5c:49:8f:
cb:7c:f6:c1:03:7a:a7:2a:47:be:fc:90:6a:b0:46:72:d0:02:
40:aa:60:fe:71:40:9e:29:77:7c:d2:6e:98:f6:65:d8:b9:4e:
2e:8d:a6:f5:61:86:5b:e8:c7:bf:1d:55:c7:f4:7f:45:0e:46:
4b:01:69:dc:f0:df:e2:96:8b:26:78:f7:a8:9e:e1:a7:e1:83:
67:7f:bd:d1:7e:cb:9f:88:c8:25:04:f5:82:ab:39:3a:6f:7e:
56:72:b9:61:d1:96:e6:8c:03:0f:4b:ef:fe:52:13:4d:c3:7f:
0b:c5:d9:85:42:84:1f:bd:5c:3e:cd:96:8b:d3:ff:e0:eb:5d:
c1:e7:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org