Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/rnbga_fP9BSUEz0zQ_X5TSTWcDk.roa
File: rnbga_fP9BSUEz0zQ_X5TSTWcDk.roa (raw, json)
Hash identifier: VO/11urHknXnM4icl5yV4IsG0NOdhHLP25usvy5JpYs=
Subject key identifier: AE:76:E0:6B:F7:CF:F4:14:94:13:3D:33:43:F5:F9:4D:24:D6:70:39
Certificate issuer: /CN=10b2516e39ff63a9068cd87522cb77256fb1d4f7
Certificate serial: 01856C65C2CAB1D9BE80B7198317932AAFFC
Authority key identifier: 10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/rnbga_fP9BSUEz0zQ_X5TSTWcDk.roa
Signing time: Sun 01 Jan 2023 08:14:46 +0000
ROA not before: Sun 01 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c2:ca:b1:d9:be:80:b7:19:83:17:93:2a:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b2516e39ff63a9068cd87522cb77256fb1d4f7
Validity
Not Before: Jan 1 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae76e06bf7cff41494133d3343f5f94d24d67039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:1c:91:2c:7b:de:3c:9c:8e:23:62:c4:67:
32:fc:2b:8e:9a:43:cc:12:71:15:49:17:57:93:ef:
6e:d8:f4:5f:39:6c:d5:22:ff:c2:54:46:2e:5d:e8:
2e:76:e4:11:23:7e:66:47:4b:68:69:20:e0:c1:e3:
d3:88:32:12:a9:f9:75:b5:45:df:19:58:7f:6f:18:
01:56:96:9b:59:5a:29:bc:41:e2:63:72:b8:09:ab:
a1:23:37:79:61:c3:27:1e:4f:90:cc:e6:71:b9:34:
aa:b5:ee:cb:a1:4c:a3:43:7a:28:75:c9:71:d9:b2:
35:f6:19:5c:1a:df:71:18:be:b3:45:33:f6:b2:4a:
02:53:c6:20:d3:91:7c:89:4b:14:c5:03:c7:c9:9f:
39:c1:6b:ed:5b:60:73:38:d1:d3:5f:9f:bc:5b:5b:
03:63:7f:d4:10:0e:19:df:2b:7d:ac:77:33:c1:5c:
2b:c2:67:7e:0a:51:59:b6:1f:0b:a0:6e:c9:98:7b:
7a:82:cf:0a:80:08:fd:62:be:b3:c4:de:fc:78:d1:
60:c5:ba:fe:bf:33:1b:37:35:d6:5f:3f:50:20:9a:
3d:49:52:39:de:74:28:53:d2:c3:78:62:fa:6f:1b:
e4:8c:82:fc:b2:74:9c:31:c1:d2:47:be:a0:63:56:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:E0:6B:F7:CF:F4:14:94:13:3D:33:43:F5:F9:4D:24:D6:70:39
X509v3 Authority Key Identifier:
keyid:10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/rnbga_fP9BSUEz0zQ_X5TSTWcDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:85:b3:e6:57:70:49:32:cc:6f:e9:1e:4f:24:70:ae:9b:07:
43:50:b3:95:c1:ec:23:d4:f5:6f:4c:c6:3e:67:ca:71:87:72:
2b:d3:5b:55:c8:f0:98:62:04:43:9b:ca:bb:a3:84:23:60:0b:
d9:b1:6b:d2:46:96:31:e7:8a:dd:46:55:53:b2:ec:00:db:ad:
87:53:3c:71:e0:90:fb:4e:c2:0e:94:ff:ee:45:82:ce:7e:de:
0e:c9:dd:e9:76:14:7e:8c:5a:3a:6c:dd:44:4b:5e:58:b3:1e:
7c:31:63:24:14:7d:bd:f3:78:9f:fc:1a:fd:e8:45:b0:f0:f8:
48:7d:a3:77:24:1c:86:5e:f1:6b:32:b4:0b:3f:97:9a:76:88:
6b:80:aa:81:e6:74:7c:00:70:f1:97:fc:fc:ef:db:21:70:91:
8c:f4:b4:8b:71:f8:14:85:cd:19:7c:aa:de:4f:b5:23:74:ed:
9e:10:f8:c6:15:51:6e:60:1d:2f:f5:0c:e6:c9:1c:26:c9:22:
cb:be:4e:80:99:a6:16:be:87:4b:d3:6d:2b:44:fe:6b:d4:31:
eb:f1:1b:37:3a:cf:7c:1a:ee:68:8e:b0:31:5c:d0:a1:53:64:
a4:8f:4f:c1:91:27:27:b4:13:07:af:5f:21:01:3a:ee:d7:47:
33:89:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-fra.rpki-client.org