Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/pRTczk---qYHSHa0nHXaWe6N2Q8.roa
File: pRTczk---qYHSHa0nHXaWe6N2Q8.roa (raw, json)
Hash identifier: Ke+WnNBLmC+VChjoVdKDWP9Apnch9NJpa3CgzVNRH5g=
Subject key identifier: A5:14:DC:CE:4F:BE:FA:A6:07:48:76:B4:9C:75:DA:59:EE:8D:D9:0F
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 018573718ED4B925F2CD2E3976A35E07BEF1
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/pRTczk---qYHSHa0nHXaWe6N2Q8.roa
Signing time: Mon 02 Jan 2023 17:05:00 +0000
ROA not before: Mon 02 Jan 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198127
IP address blocks: 193.150.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:8e:d4:b9:25:f2:cd:2e:39:76:a3:5e:07:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Jan 2 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a514dcce4fbefaa6074876b49c75da59ee8dd90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:53:9a:95:9d:28:80:84:cb:a8:38:ab:8f:
9b:b0:2f:cc:3c:8e:1d:66:5d:6c:27:15:60:96:01:
30:90:2c:60:7e:1d:d4:b2:0d:1b:63:8c:5e:7b:69:
2a:11:18:e2:41:25:05:0f:f5:21:04:b8:58:93:6f:
fd:29:ff:1a:9f:a2:c3:bd:51:8a:bd:6f:52:39:3f:
b0:d8:ae:a0:4d:aa:31:22:ad:6b:22:b9:74:bf:f8:
19:24:6b:06:30:e3:cc:bf:8b:a7:9b:de:8c:78:c1:
b8:91:c8:75:a1:d4:5a:40:9b:a6:35:7d:f1:d7:fc:
f7:02:67:df:77:99:bc:14:8e:d1:eb:b2:a4:fe:cd:
2c:e9:71:71:9a:f3:73:4d:a8:ee:ca:9c:2d:ac:23:
19:15:5e:e5:58:3b:fb:84:8b:f0:e2:df:94:c4:a2:
ac:74:80:a3:47:df:a7:8b:b6:58:49:6c:84:cd:9c:
17:4f:ae:27:de:2f:ef:fb:39:69:4e:da:71:52:22:
9f:8a:b2:4f:a8:d5:0d:9a:11:f2:ee:13:31:57:2b:
75:e8:01:2b:21:f5:4b:1b:86:fc:d2:98:5d:49:62:
e3:36:ec:d2:1d:7f:ff:9b:8f:6d:1b:7e:d9:69:ec:
1a:a7:20:c5:2f:4d:3a:e7:9c:69:63:b0:42:cf:69:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:DC:CE:4F:BE:FA:A6:07:48:76:B4:9C:75:DA:59:EE:8D:D9:0F
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/pRTczk---qYHSHa0nHXaWe6N2Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.67.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fb:be:93:3f:81:f0:7f:46:69:f7:0d:fc:18:51:a8:bd:aa:
67:32:51:81:e8:4d:54:a1:9c:ad:48:bf:e6:4a:16:29:48:e4:
ae:d8:ea:d9:47:43:52:49:5f:06:16:39:5d:39:00:03:c0:b6:
82:d4:20:72:80:8a:51:eb:a7:66:e7:f5:8d:a7:d0:40:05:fc:
39:6e:11:f2:a4:60:af:06:f0:5a:9a:67:17:a3:f6:2f:bb:98:
e1:68:c7:31:39:3e:a9:27:87:70:16:55:d4:fc:b5:88:ae:40:
0b:38:0d:ba:8f:83:5b:bd:f4:9f:aa:66:cc:1d:10:bc:15:d4:
6e:d0:db:53:55:0a:91:fb:ac:a3:e7:7d:d1:aa:6f:af:47:dc:
b9:94:97:1a:4b:d4:93:5b:89:58:18:08:34:71:a8:15:c1:71:
54:f2:e3:25:e1:a8:ac:28:96:10:22:48:74:25:f4:2b:0e:65:
1c:09:68:dd:94:77:b5:ec:ee:f0:bf:9f:07:10:fa:53:dc:9e:
c7:55:2e:39:25:9f:b0:8e:6b:24:a4:77:fb:0e:87:2f:db:3e:
c3:45:01:80:04:05:51:27:67:74:a3:be:f6:39:16:7d:4c:13:
0b:d9:43:5f:e9:f4:19:9a:a8:44:53:1b:f5:ea:43:4f:91:0a:
ea:7b:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:28 2024 by rpki-client on console-fra.rpki-client.org