Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4F3GWSVXyNUe2HDKrt6rgO0uRfU.roa
File: 4F3GWSVXyNUe2HDKrt6rgO0uRfU.roa (raw, json)
Hash identifier: uduoyymw1jkVhYhcxPpA2UID7sFuFzyzr8Ipi1wqB9A=
Subject key identifier: E0:5D:C6:59:25:57:C8:D5:1E:D8:70:CA:AE:DE:AB:80:ED:2E:45:F5
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018AADF37C7F54047F073234D9C8EC6BE22E
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4F3GWSVXyNUe2HDKrt6rgO0uRfU.roa
Signing time: Tue 19 Sep 2023 14:58:50 +0000
ROA not before: Tue 19 Sep 2023 14:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:f3:7c:7f:54:04:7f:07:32:34:d9:c8:ec:6b:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Sep 19 14:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05dc6592557c8d51ed870caaedeab80ed2e45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:dc:df:e0:4d:dc:10:91:48:01:0f:35:4c:
2b:ee:47:fc:ec:d2:2a:90:d8:69:17:68:7d:d4:ad:
ed:ec:b8:08:0a:06:8f:53:01:34:0e:59:e8:46:b4:
ca:02:aa:55:d0:12:88:00:8f:91:cb:d5:9c:c3:ed:
94:16:cb:1c:5d:46:71:93:c8:58:7b:15:f1:c5:35:
94:4f:5f:b2:4e:22:a9:bf:61:62:ee:3f:9f:d3:8f:
c6:79:e2:9e:b9:a1:f2:8d:98:66:b2:b3:aa:59:46:
6f:14:45:b6:6e:07:6e:f3:60:88:5a:6d:cf:5f:06:
07:4b:d8:cb:37:07:23:ae:99:af:fe:43:43:13:86:
f6:1d:3b:1c:80:8e:1f:c0:36:04:c7:df:54:8b:1f:
8d:87:f0:4c:cf:b6:ed:10:4a:a1:8b:25:47:95:ce:
3a:91:61:64:5b:83:ea:16:1c:d6:4d:b0:01:34:4d:
1b:4a:55:08:d0:a0:c5:81:48:b4:1a:3f:f7:86:30:
b3:7a:bf:cf:1a:25:31:73:1b:a6:10:2a:1b:01:df:
bd:2b:e3:ba:e6:49:ae:de:77:4e:01:4e:c0:ab:5c:
d5:d3:62:97:be:1c:0f:29:a4:af:6e:44:c6:b1:92:
c8:5d:35:64:93:f2:21:3b:16:8e:80:1e:92:0a:87:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5D:C6:59:25:57:C8:D5:1E:D8:70:CA:AE:DE:AB:80:ED:2E:45:F5
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4F3GWSVXyNUe2HDKrt6rgO0uRfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:27:bc:47:73:a8:0e:bc:e0:34:62:5d:76:09:3e:47:1e:53:
ce:d5:1a:30:e9:e4:82:f2:0c:61:e8:1b:0e:49:a6:5c:77:d5:
59:b0:ac:40:4f:3c:94:d7:25:7b:1b:3e:b4:74:c9:c0:bb:6c:
ef:af:0a:11:3d:de:45:ba:42:b4:1e:c5:fb:e4:24:b9:ca:e9:
77:cf:96:9a:52:54:f3:9c:f2:16:d4:e8:85:2e:76:22:76:0c:
ef:f9:aa:4c:9f:42:20:74:af:58:0f:fa:da:05:81:35:a3:13:
1c:e1:b7:e0:d4:bb:99:75:03:f2:a7:9d:25:cc:c2:b0:e5:71:
a2:a0:c0:ed:92:ae:c0:f5:28:91:84:7b:1f:1e:a2:1e:dc:0b:
1e:17:b0:1a:b3:8c:bd:af:ac:47:a7:7f:9d:6f:da:97:fd:1e:
e3:83:08:f2:99:07:f9:08:fc:3a:5e:d5:4c:33:46:6f:22:87:
be:9b:f8:22:03:0c:e3:f0:b3:d2:9c:63:c9:0b:ea:32:92:c1:
27:19:2a:f5:ee:90:4d:29:21:eb:fb:5d:11:e5:9f:d1:34:f0:
6c:0f:d2:bc:1f:9f:5d:8d:22:31:29:cd:1b:73:13:d0:57:8d:
bb:44:03:fd:6d:47:db:02:d4:82:cf:3e:8e:95:05:a0:8d:c1:
60:e8:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:10:10 2023 by rpki-client on console-fra.rpki-client.org