Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4OqXf7Arn3R5e9Sf4bez9wfaejs.roa
File: 4OqXf7Arn3R5e9Sf4bez9wfaejs.roa (raw, json)
Hash identifier: 4b7nzjeOon+/XOk253ZTyLqIjuTOVWgXoJfyaa9EsUI=
Subject key identifier: E0:EA:97:7F:B0:2B:9F:74:79:7B:D4:9F:E1:B7:B3:F7:07:DA:7A:3B
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01877968C92712593D9B102664A185F02ECA
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4OqXf7Arn3R5e9Sf4bez9wfaejs.roa
Signing time: Thu 13 Apr 2023 06:58:42 +0000
ROA not before: Thu 13 Apr 2023 06:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:68:c9:27:12:59:3d:9b:10:26:64:a1:85:f0:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 13 06:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ea977fb02b9f74797bd49fe1b7b3f707da7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:09:62:5a:48:7a:55:f7:1c:50:2b:4f:75:
e8:c5:82:af:ca:a8:c0:9e:5c:07:33:2e:41:11:7b:
9d:1b:70:6a:dd:5a:39:12:79:fd:7a:7a:79:4f:38:
73:0a:e8:9a:7b:3c:12:c0:f9:87:91:5c:23:cb:10:
77:8d:98:2e:65:86:ba:51:4e:3b:14:89:d0:58:8e:
00:2e:4b:6f:c1:fb:bf:1f:69:02:53:5b:14:aa:3b:
98:a8:cc:3a:53:3d:22:bc:bf:bd:84:f4:a2:06:2c:
36:0d:5d:fe:08:0e:08:90:31:d6:5e:9d:46:3b:e0:
92:5f:83:29:22:57:0b:58:7e:43:00:4f:1e:7c:52:
a4:5e:4c:8c:2c:e4:e5:49:1b:e7:86:6b:2e:b2:ba:
0d:97:a9:9e:46:87:0a:8d:49:a7:50:4f:23:40:f8:
46:8a:f0:f8:b1:f1:c7:8c:91:4b:4f:0d:d1:e1:a9:
15:f1:ee:de:ab:b3:60:3a:e0:33:92:da:f1:25:93:
a3:74:61:b2:6d:3f:a9:14:bb:47:d3:9b:22:6d:1c:
af:b4:61:ee:d5:95:fd:d2:91:b5:a1:c9:bd:e2:57:
ed:3a:61:9b:e0:f0:a5:79:cd:0c:c9:e9:f6:17:a7:
07:c8:a1:c8:f2:0c:0e:c4:05:6c:6a:2e:11:eb:cc:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:97:7F:B0:2B:9F:74:79:7B:D4:9F:E1:B7:B3:F7:07:DA:7A:3B
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/4OqXf7Arn3R5e9Sf4bez9wfaejs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d5:99:4a:63:eb:bb:c2:7f:f6:e2:76:08:fc:71:6d:f9:70:
b2:95:13:b8:3e:ce:c1:f8:ee:9b:01:26:4e:07:a0:3d:4d:f6:
e8:5d:6f:29:8f:aa:9c:32:83:2c:13:ff:9e:2a:64:40:34:00:
cb:c0:ba:71:aa:54:bd:84:62:15:a7:f5:4e:25:3f:6f:97:19:
af:51:91:ed:e2:95:08:6a:45:4a:46:31:41:80:7e:8d:b5:44:
2a:a8:e1:8e:6d:d3:f7:60:2c:60:26:35:3f:3b:b1:f9:8b:3b:
e8:d1:81:5e:b6:94:e4:ce:9d:08:04:4a:d0:10:f9:81:6b:72:
1c:8e:3d:24:be:4b:a3:17:a6:64:b2:d6:c9:9f:ce:a0:fe:9a:
ab:fc:e1:07:ec:89:f0:0e:57:c0:eb:53:37:63:6b:62:74:02:
f6:b9:1b:be:89:36:f3:79:51:95:70:31:37:31:a1:eb:2a:1e:
68:a9:46:f6:0f:28:4d:0f:60:ca:c7:f0:1a:d9:2e:96:f7:78:
f3:d4:70:8e:2d:d1:62:7a:86:83:c4:3c:ff:7c:81:a5:bd:0e:
45:32:06:d5:ba:7e:99:7b:06:c2:96:54:29:5b:94:c4:cf:b1:
20:7b:d4:56:41:26:90:88:20:3c:09:0c:9c:fe:b1:cb:01:7f:
69:66:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org