Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Cm-rEBtcKYn4Vj5fRkUMReW2d4M.roa
File: Cm-rEBtcKYn4Vj5fRkUMReW2d4M.roa (raw, json)
Hash identifier: Jv1AxyfuUKuJLIwB98JfaQFTzB3f85lXArhfCNycFBA=
Subject key identifier: 0A:6F:AB:10:1B:5C:29:89:F8:56:3E:5F:46:45:0C:45:E5:B6:77:83
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01865B0F09382F5355EF46C79C7932DC2AC5
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Cm-rEBtcKYn4Vj5fRkUMReW2d4M.roa
Signing time: Thu 16 Feb 2023 16:29:17 +0000
ROA not before: Thu 16 Feb 2023 16:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:0f:09:38:2f:53:55:ef:46:c7:9c:79:32:dc:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Feb 16 16:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a6fab101b5c2989f8563e5f46450c45e5b67783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:12:06:e0:40:e6:da:c9:d4:2e:63:c6:9d:
fa:2a:e2:ce:75:07:2d:a7:1c:02:1c:34:3c:b2:fa:
35:d1:4c:eb:26:b3:94:0c:fd:3a:6c:8b:13:ad:3e:
1a:9e:c8:a5:18:bc:f9:4c:46:f9:f0:f6:ed:75:36:
dd:e0:ee:55:9e:6e:14:f1:d5:d2:ce:93:93:51:11:
70:09:4f:8b:22:e0:17:77:5c:63:8c:e8:22:74:ad:
fa:28:e2:ca:ef:6b:f6:8a:ea:a8:e7:13:6a:72:3c:
06:f8:ff:66:71:bf:1a:c7:a4:58:58:1c:7a:c1:46:
7c:ac:c6:1e:09:04:80:95:09:5c:05:b7:dd:60:03:
40:89:db:8b:46:cb:ab:40:ba:f7:74:cc:43:35:a2:
9f:7a:7d:d5:8c:ea:27:47:44:fc:47:af:de:1c:8d:
1f:35:80:25:a0:10:fc:b4:a4:7f:bc:36:44:73:21:
45:55:23:78:5f:d0:27:1e:84:7d:ba:9f:95:83:41:
01:66:f5:6b:4f:0a:b2:dc:c2:f9:2d:da:df:aa:0a:
67:83:03:7f:cb:27:18:c1:29:0f:6e:0c:84:f5:97:
18:76:39:bd:3e:44:00:6f:42:4b:e3:9d:62:8b:bb:
94:fc:7a:ed:52:0d:3d:f9:07:ef:67:a9:6b:3c:47:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:AB:10:1B:5C:29:89:F8:56:3E:5F:46:45:0C:45:E5:B6:77:83
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Cm-rEBtcKYn4Vj5fRkUMReW2d4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8a:5e:7b:2e:75:fc:33:be:45:c8:ce:cc:3e:19:a9:49:64:
8d:79:6d:ff:ee:67:00:fe:b5:5f:ac:73:39:11:de:5d:cc:6f:
a1:8c:cd:77:83:2c:48:56:ff:bf:88:c8:6d:28:b5:97:02:24:
f1:47:1e:f4:ba:6b:de:8d:ee:36:68:00:7f:ed:33:b7:2b:df:
52:7a:83:05:37:fc:a8:48:0e:10:6a:fe:ba:7a:12:5d:72:d5:
db:19:10:9e:7c:6e:a9:40:d6:2c:7a:51:42:57:a8:e9:1b:9f:
22:17:09:fe:62:5f:0b:d9:f4:ce:15:b6:a6:7a:d9:eb:01:fe:
ee:ec:9a:6a:6d:01:27:98:ca:e3:31:89:c4:d4:25:32:64:4c:
f8:e9:0e:f5:97:9a:da:c9:f7:24:55:af:ce:a0:26:3b:2b:3f:
9f:3d:94:b4:61:54:20:0e:ae:f4:a1:f3:38:05:4e:51:4d:fd:
de:9f:58:88:14:d9:0f:ee:52:be:e5:5a:c7:ba:59:9b:31:75:
3d:56:15:37:24:fe:e7:ea:c4:b8:8d:e2:1a:10:d3:86:86:65:
43:73:b6:34:aa:39:c2:a3:05:5d:76:f1:bf:29:22:2a:57:a5:
db:25:d6:6c:f1:85:31:82:68:75:f9:c6:eb:1b:d6:78:cd:c0:
e3:d1:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-ams.rpki-client.org