Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/h9PYAZkRV56cemB4G1mLOHgHC10.roa
File: h9PYAZkRV56cemB4G1mLOHgHC10.roa (raw, json)
Hash identifier: TUdfmSgKBpnoz8Mc/Imv4ublsMN0B0nE4tZibl98D9c=
Subject key identifier: 87:D3:D8:01:99:11:57:9E:9C:7A:60:78:1B:59:8B:38:78:07:0B:5D
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 01856C0103A81C2B579B852249EE99FD1172
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/h9PYAZkRV56cemB4G1mLOHgHC10.roa
Signing time: Sun 01 Jan 2023 06:24:43 +0000
ROA not before: Sun 01 Jan 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.201.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:03:a8:1c:2b:57:9b:85:22:49:ee:99:fd:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: Jan 1 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d3d8019911579e9c7a60781b598b3878070b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:5f:b9:db:6f:c4:e3:44:7c:2c:93:00:6d:
48:62:d8:76:c9:d6:17:4a:5e:6b:5a:b6:a3:db:f2:
d4:1a:3c:ca:8f:39:66:28:d7:13:09:f0:23:7f:cf:
d0:9d:00:35:1e:0a:cc:3d:90:ed:9b:ba:b7:95:36:
6d:50:c2:d2:1f:0d:db:24:cc:ce:b8:47:51:e1:57:
49:2c:50:67:53:31:8a:85:c3:d0:bb:af:d4:be:5d:
aa:8c:4c:dd:b7:b5:8c:0d:bb:23:7a:db:b3:dd:b8:
83:d8:94:cb:a6:f8:e3:6e:79:13:34:b7:91:02:41:
fc:db:8f:24:8e:c5:18:3e:9c:8c:a6:99:46:87:2f:
9f:d1:ab:b4:da:de:48:c3:11:e1:ee:c3:8e:61:5b:
6e:fd:e4:a3:c7:f6:0d:6b:6f:0a:e2:5a:3d:4c:3d:
2d:95:09:3a:68:15:d9:12:a2:6c:e3:66:46:0f:50:
49:a3:6e:dc:06:87:52:78:77:b3:e8:15:50:cd:d4:
4f:d5:52:ac:a5:52:bf:d8:ef:b2:80:d0:6b:b6:0a:
72:26:83:0f:72:a4:cd:60:12:a7:7a:eb:54:42:2c:
00:04:5a:fe:73:eb:df:ad:4e:3e:62:93:70:ed:b5:
c0:69:9f:bc:36:eb:f1:3a:13:89:bc:04:9c:72:be:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:D8:01:99:11:57:9E:9C:7A:60:78:1B:59:8B:38:78:07:0B:5D
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/h9PYAZkRV56cemB4G1mLOHgHC10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:30:84:7f:4e:26:84:95:14:d8:9c:3f:92:54:83:2f:1c:ef:
59:b7:5e:b3:6a:03:e4:0e:93:b9:da:3e:63:61:a5:00:07:a9:
4e:30:e0:cb:22:9f:b3:e3:ee:d8:71:6d:b8:6d:3a:19:fe:b4:
1e:d7:7c:cc:bc:77:c4:93:2d:78:24:10:a2:93:07:88:49:15:
04:3f:21:2f:e8:6d:15:8e:25:60:a6:7c:d0:fb:ac:24:29:f5:
3a:d1:48:a2:17:7a:3b:19:aa:d7:cc:41:b4:21:5d:bb:83:ad:
41:0a:66:9d:5a:44:a9:06:f1:37:e0:21:e9:49:b5:92:67:a2:
ac:88:24:1d:fe:ad:cb:e6:55:78:d4:86:35:97:46:85:ad:b9:
a8:2c:59:4e:68:d6:54:8a:dc:a1:bf:e3:85:e6:a6:d9:ae:4b:
08:fb:2d:1f:86:8c:ef:fb:7a:50:a8:68:03:fd:65:5b:18:e3:
b4:01:d5:5a:e2:d1:8c:d2:53:96:db:67:e2:89:15:05:e0:71:
b5:9b:62:96:1d:b4:28:d2:a6:70:6b:1b:b0:cf:c8:2d:51:cc:
a3:89:21:d7:2f:fd:a2:04:c9:40:e7:f9:cc:63:1b:2d:bc:5f:
77:72:cf:bf:fb:bf:bb:79:47:f8:da:61:1a:69:3f:24:cf:e1:
f0:78:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org