Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/V-1bPyuJ0MxKTLoPseVmC6ctsBg.roa
File: V-1bPyuJ0MxKTLoPseVmC6ctsBg.roa (raw, json)
Hash identifier: VzmqHQNNzm2bozGyor3/tbw1qtTPV9/VagszW/GM3ys=
Subject key identifier: 57:ED:5B:3F:2B:89:D0:CC:4A:4C:BA:0F:B1:E5:66:0B:A7:2D:B0:18
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0189079BCD1D7570E06896CA9EE518611F43
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/V-1bPyuJ0MxKTLoPseVmC6ctsBg.roa
Signing time: Thu 29 Jun 2023 14:43:18 +0000
ROA not before: Thu 29 Jun 2023 14:43:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
193.178.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:9b:cd:1d:75:70:e0:68:96:ca:9e:e5:18:61:1f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jun 29 14:43:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ed5b3f2b89d0cc4a4cba0fb1e5660ba72db018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:fe:a5:15:4f:87:2d:4a:5f:6d:e4:09:62:
6d:21:de:97:3a:cb:4f:33:43:d3:04:a2:63:ca:3c:
9e:b0:90:b8:f3:20:56:2d:cc:6c:c5:5e:90:d8:2d:
c5:43:f5:b8:73:bb:07:b0:8a:30:7a:90:32:4a:8d:
88:4b:95:17:f8:c2:82:dc:20:bc:6b:6a:0e:2c:ce:
5a:82:7f:1f:fa:ac:d3:c7:30:f5:8a:7a:d3:64:08:
57:35:54:34:97:57:5c:58:c3:d1:74:d8:66:e4:59:
32:06:b3:09:66:9c:d0:76:a4:90:d5:6f:45:82:18:
07:12:8e:27:89:c3:f5:77:05:a7:cf:0a:de:3e:65:
6d:d8:dd:14:54:04:eb:4a:e9:75:fe:a6:aa:a6:8e:
14:46:9a:81:2a:86:77:12:1e:dd:9e:41:65:90:e8:
cc:0c:c3:1b:7c:15:dc:e1:32:01:3d:ee:aa:d3:3c:
cc:43:51:e2:31:13:52:bd:aa:63:78:e5:3b:0a:59:
f2:c5:7a:79:b3:05:e3:71:13:53:f7:f6:97:e5:7f:
e0:a7:cf:a0:d7:0d:87:80:67:8d:48:b0:88:33:1b:
56:5f:48:01:68:e8:01:31:9f:b2:36:18:fe:76:60:
cb:a0:f4:33:43:36:fa:3e:1d:32:b2:c1:c1:7f:64:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:5B:3F:2B:89:D0:CC:4A:4C:BA:0F:B1:E5:66:0B:A7:2D:B0:18
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/V-1bPyuJ0MxKTLoPseVmC6ctsBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.52.0/24
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d5:08:6b:a8:6c:d9:9f:74:a9:1d:50:ca:68:55:4e:21:6d:
a4:14:49:0c:c8:58:23:91:0f:3e:f7:8f:81:e8:ff:20:95:cb:
5c:e8:c6:23:36:99:28:86:0f:f4:7b:f4:b7:b3:83:f6:2b:42:
03:57:8a:57:e8:0f:a2:c4:37:e5:f1:54:41:b4:b8:fe:51:b3:
44:66:69:ac:12:47:dc:14:b3:a5:a2:f1:4b:2a:b3:ae:8a:37:
36:11:98:bc:28:8a:34:46:78:27:67:9a:85:cd:f1:f8:4e:3c:
a6:d3:ff:15:81:a8:cf:46:6d:3a:17:ae:f9:29:42:b5:f5:4a:
03:7c:cf:53:32:6e:76:96:57:a1:c0:66:9f:f7:f3:1d:cb:02:
1f:e6:1b:69:43:8a:e4:69:0b:81:0a:26:19:3e:64:86:b8:7b:
6d:69:59:f4:21:84:0a:ac:d0:58:7c:f1:5a:8d:e6:3b:61:49:
b6:3e:ec:dc:f6:b7:7e:ac:2e:ec:9d:25:0f:c8:56:9d:5e:e5:
01:27:d2:b8:c5:42:5e:8c:7b:31:fa:de:fe:19:e5:f9:e4:58:
cf:dc:70:a4:50:f7:db:df:73:c9:08:6f:31:65:95:f4:3b:bf:
65:71:fa:fb:bc:d5:03:04:27:d0:85:b9:58:29:2d:b2:45:29:
5c:cb:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 15:38:26 2023 by rpki-client on console-fra.rpki-client.org