Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ffBMPhJVMvbwI3j2RUZYIuis0js.roa
File: ffBMPhJVMvbwI3j2RUZYIuis0js.roa (raw, json)
Hash identifier: 8tAwdreDfoNtmMJqXRS9zP/T5lRWwFOvX9yy4yCGxdw=
Subject key identifier: 7D:F0:4C:3E:12:55:32:F6:F0:23:78:F6:45:46:58:22:E8:AC:D2:3B
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018B0A6133891F395ED375034B8641B9B864
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ffBMPhJVMvbwI3j2RUZYIuis0js.roa
Signing time: Sat 07 Oct 2023 13:43:44 +0000
ROA not before: Sat 07 Oct 2023 13:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59812
IP address blocks: 193.134.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:61:33:89:1f:39:5e:d3:75:03:4b:86:41:b9:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Oct 7 13:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df04c3e125532f6f02378f645465822e8acd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:79:df:88:5a:15:ca:07:17:67:85:eb:eb:
16:81:f8:0a:58:dd:1e:76:c2:1f:eb:fc:a3:86:e8:
a7:03:52:b9:e4:c5:7c:b1:54:13:6d:7f:1f:f0:20:
d4:71:72:06:5c:64:b0:d4:73:98:37:3e:10:19:c3:
ed:fa:7e:81:23:6d:f9:eb:25:6c:55:0e:da:fe:53:
6a:af:89:3a:6b:6c:4e:12:87:81:d2:85:44:3e:c3:
11:e5:c8:65:7e:5a:1e:f0:4d:3f:64:dd:39:4f:cb:
c9:77:c9:9e:1e:b1:7d:dc:97:76:34:b8:81:67:5a:
59:bd:2a:67:97:b2:94:fb:03:57:a8:b6:18:10:99:
fd:1d:38:c3:9d:dc:7e:bf:aa:52:56:22:ac:a5:bd:
c3:da:81:3a:66:fb:bf:b8:af:51:03:5f:6d:84:ba:
fc:93:25:4c:09:24:2c:e3:d1:de:34:81:98:93:2e:
cd:20:5f:43:6a:de:65:0f:40:44:5b:6d:34:ae:b0:
7a:73:4e:f0:bf:73:fd:ea:84:9c:4f:3f:e0:ac:85:
04:0e:2b:04:83:46:b4:c8:39:39:e2:46:af:44:50:
d8:ef:d5:db:cb:c4:59:95:d7:34:15:80:35:b1:67:
77:9b:6f:53:fe:40:67:e4:49:56:7a:eb:ed:16:71:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:4C:3E:12:55:32:F6:F0:23:78:F6:45:46:58:22:E8:AC:D2:3B
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ffBMPhJVMvbwI3j2RUZYIuis0js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2f:08:9a:e6:79:cb:3b:f9:bb:4b:af:38:e6:bb:d4:2f:0d:
a0:5b:e2:c9:93:f7:13:18:b1:73:8e:6b:1f:70:82:20:da:b9:
01:21:53:c7:bd:64:b0:dd:47:86:36:ad:09:ea:79:93:07:6f:
61:47:0f:78:30:04:2e:07:2f:69:7f:79:aa:2d:7c:b4:46:7d:
9f:0c:3f:dc:c3:20:59:ca:f3:4e:74:73:6f:41:48:4d:26:27:
90:19:c6:fd:4e:89:9b:2c:ed:66:56:e8:8b:2d:6c:cc:c9:1e:
37:9e:b7:8b:2c:6c:94:d0:23:24:ec:d7:92:d1:f5:cc:79:0c:
ad:75:93:7c:23:d5:fa:ff:77:b1:43:a3:c4:3a:5b:1e:9e:5f:
ae:08:a6:a0:ed:9c:4a:91:91:99:06:65:eb:77:e3:54:70:5d:
8d:9e:ed:2a:33:99:84:e3:b1:24:cd:fb:d3:fd:69:f6:0c:df:
94:f0:a5:9b:97:80:12:a4:c8:f3:83:33:53:82:5d:56:8e:81:
c0:18:07:6d:df:db:15:3a:9b:ec:a9:a5:17:79:2b:30:3a:87:
ed:74:70:3d:60:da:18:3c:99:8f:ac:88:6e:05:28:e0:1a:2e:
bd:2a:5f:ad:45:6f:50:ec:1f:95:b0:ab:ae:b1:da:8f:54:31:
ad:81:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:07 2024 by rpki-client on console-fra.rpki-client.org