Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/1P_3ta0ajrmF5JekjFByk053OPc.roa
File: 1P_3ta0ajrmF5JekjFByk053OPc.roa (raw, json)
Hash identifier: 7az4bCQ8KQy7zt04Jo2551+y21vAq9PxEYdU1cxIDpg=
Subject key identifier: D4:FF:F7:B5:AD:1A:8E:B9:85:E4:97:A4:8C:50:72:93:4E:77:38:F7
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 0187FF7326E072493B4232D31DFE91C61B1B
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/1P_3ta0ajrmF5JekjFByk053OPc.roa
Signing time: Tue 09 May 2023 07:39:09 +0000
ROA not before: Tue 09 May 2023 07:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.201.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:73:26:e0:72:49:3b:42:32:d3:1d:fe:91:c6:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: May 9 07:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4fff7b5ad1a8eb985e497a48c5072934e7738f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:a8:3c:6f:2e:e0:3e:f0:4d:e7:e4:bb:56:
8d:a0:32:28:98:25:8b:50:bf:18:d6:89:ac:32:59:
bd:5a:8c:42:cd:65:7c:ab:56:e2:ac:7d:b3:fe:d9:
a0:6d:b4:aa:a0:81:74:d6:af:98:f8:e4:c8:6e:03:
89:7d:8a:7e:c7:32:c9:8f:fa:1a:01:ed:f6:35:f5:
f5:84:3c:dc:75:22:7e:ac:92:09:f9:f0:91:55:05:
35:6b:74:b2:0a:63:6b:b0:63:6d:23:b5:c4:4e:4a:
87:ab:5f:b4:53:d3:83:54:81:c5:bb:b1:1a:73:00:
15:4b:f2:75:f8:46:08:89:07:38:02:3e:6a:e7:a2:
b7:59:d1:20:c2:24:99:ad:a1:49:4d:f4:27:05:6a:
3b:7b:28:83:d8:d8:1e:98:9e:eb:b8:b9:83:72:40:
90:1b:a1:6a:e6:0e:04:ad:b4:d1:18:d6:18:bd:ab:
48:4c:82:d0:5b:d7:00:7a:fa:d2:31:a8:a7:c2:50:
a3:0c:ba:e3:9e:96:c1:70:d0:ef:60:32:94:f0:35:
57:04:e7:3b:f2:4f:42:4f:93:20:ce:20:de:ee:37:
e8:32:3c:11:35:8c:24:90:c7:e8:b3:8f:63:42:57:
d5:ff:80:e0:9e:7f:f3:d5:00:25:18:8f:36:13:24:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:F7:B5:AD:1A:8E:B9:85:E4:97:A4:8C:50:72:93:4E:77:38:F7
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/1P_3ta0ajrmF5JekjFByk053OPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.13.0/24
Signature Algorithm: sha256WithRSAEncryption
21:37:1d:0e:90:02:ee:f5:12:42:30:9a:4e:bf:00:01:af:2f:
0d:34:f9:fb:e7:6b:08:a4:2e:65:7a:79:b1:d7:3e:ed:ff:83:
da:71:6a:d9:b2:90:ee:92:80:c9:c9:7c:d7:fd:d6:1c:10:d3:
2e:b5:2e:da:2d:35:10:7b:fb:05:13:b4:0e:0b:47:38:15:72:
bf:cd:33:72:9f:b4:ab:fa:81:8d:37:7d:b2:76:ab:bc:8d:db:
80:a4:fa:22:f6:df:db:ba:1f:5d:4a:85:16:4c:55:2b:dc:dd:
9e:b7:63:f1:0a:00:db:83:56:06:2d:7c:eb:82:a2:30:34:2e:
da:cd:77:4d:75:61:90:cd:2a:4a:64:96:b4:10:69:d8:e6:ef:
14:ff:14:42:48:e0:e2:29:6a:d6:2b:45:d5:0f:c3:c8:8f:b1:
5d:fc:0b:c2:1b:f5:77:cf:b4:c2:49:29:bd:95:fb:68:8a:39:
92:51:fc:29:d6:49:3c:c3:94:3f:11:d7:05:2b:99:9c:91:14:
3a:53:9c:1e:ed:ad:55:54:b2:48:0e:27:64:3f:74:14:63:12:
54:45:d7:30:50:fa:57:61:18:99:84:dd:cf:6e:68:e8:c0:cd:
b6:87:83:fd:af:c0:8a:26:46:4a:94:76:e8:65:d9:8a:de:f2:
c2:36:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-fra.rpki-client.org