Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Qm0mnhdLCioHI5bKpxlw1yqWbSQ.roa
File: Qm0mnhdLCioHI5bKpxlw1yqWbSQ.roa (raw, json)
Hash identifier: e9grhGn9etQGk1H/HDJmjBE229EveFZLdl12lX0YgAk=
Subject key identifier: 42:6D:26:9E:17:4B:0A:2A:07:23:96:CA:A7:19:70:D7:2A:96:6D:24
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018BEBA417DD7F5AC0C8DCE57398D34C54A4
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Qm0mnhdLCioHI5bKpxlw1yqWbSQ.roa
Signing time: Mon 20 Nov 2023 07:31:21 +0000
ROA not before: Mon 20 Nov 2023 07:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
193.178.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:a4:17:dd:7f:5a:c0:c8:dc:e5:73:98:d3:4c:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Nov 20 07:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=426d269e174b0a2a072396caa71970d72a966d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:68:47:a6:04:aa:49:dc:89:14:37:8a:b7:
6a:4f:bd:8e:c3:26:b1:c9:06:52:3d:e5:29:ca:b8:
19:03:ad:71:66:cd:d9:e2:ae:dc:44:c8:9c:df:d1:
1f:9f:7c:c8:2f:b7:bd:3d:d5:d4:dc:5d:e0:bb:7e:
cb:cd:1d:a2:a7:4e:df:c8:63:c0:87:49:f0:0c:39:
ff:db:d4:43:c1:15:72:9e:1c:bd:3b:40:6a:e6:49:
b5:25:c1:84:ae:23:31:99:8e:86:81:78:60:9c:b5:
b1:b5:c1:3a:3e:00:09:75:3f:04:01:b1:29:ec:ba:
95:da:3f:23:44:c9:a1:f5:e9:ae:11:ca:54:5a:1d:
87:d7:84:ca:0a:69:61:df:91:9b:1c:89:1c:da:7f:
5f:24:09:b5:58:ba:26:1f:06:6b:7d:66:b5:57:c2:
4a:8e:7c:b4:57:c2:bd:7a:b6:9b:83:11:bc:38:fb:
cc:5b:38:04:1b:68:85:48:cd:32:f7:f1:08:22:e8:
a0:47:0d:eb:69:52:86:6d:bc:8f:11:77:51:43:aa:
e7:d9:27:64:8b:76:0b:ba:30:49:2e:3a:fd:42:8b:
7d:a4:de:c3:e4:0d:1f:25:2a:4d:19:9e:be:8f:c6:
05:77:45:34:91:b5:84:05:61:49:f0:55:22:00:44:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:26:9E:17:4B:0A:2A:07:23:96:CA:A7:19:70:D7:2A:96:6D:24
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Qm0mnhdLCioHI5bKpxlw1yqWbSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.52.0/24
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:7c:ff:28:66:e2:10:4c:8f:59:26:38:cd:27:eb:26:64:
86:39:37:a8:a1:b4:91:be:51:d5:ed:df:b0:30:22:22:37:69:
9c:d5:89:64:2c:ec:11:5c:0c:86:de:ca:9b:e7:a9:03:cf:11:
01:35:f2:72:d2:be:8c:f2:b7:56:ae:9b:6f:2f:31:f4:be:b0:
1c:d5:32:aa:94:db:a3:e3:16:15:c9:03:86:22:4d:97:85:d8:
d8:75:9a:41:6f:bb:0f:06:ae:64:ec:53:ca:1f:4c:14:e8:68:
30:43:e0:e1:fa:45:c0:82:76:01:17:f5:58:f9:aa:56:4a:00:
22:fc:e7:e8:54:71:c2:12:c4:86:84:7b:ea:5a:8e:63:66:48:
b6:36:55:fa:ce:1f:51:18:25:92:e0:b7:f7:9d:33:d8:0f:41:
59:8b:7d:43:b3:b9:61:5e:3f:aa:9e:c0:e1:92:c6:6e:a9:a7:
c3:a6:a5:da:24:5c:78:0f:79:79:7d:ed:cb:86:38:88:80:67:
46:58:f9:4d:2a:9e:e0:ce:37:f1:bd:65:31:75:86:95:62:d7:
fe:56:22:23:a3:13:4d:20:a0:10:20:cb:74:24:b6:e1:59:61:
9d:96:63:9d:10:c8:12:15:e5:7e:d8:e6:9b:7a:7b:26:57:12:
1b:17:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:29 2024 by rpki-client on console-fra.rpki-client.org