Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/AX9hQtpuRA8bFEbDOT2Oi3rsNYE.roa
File: AX9hQtpuRA8bFEbDOT2Oi3rsNYE.roa (raw, json)
Hash identifier: zrSEp+e6+v3TX32EY6DPqR2EkF6EsBqCycr05f0qNy4=
Subject key identifier: 01:7F:61:42:DA:6E:44:0F:1B:14:46:C3:39:3D:8E:8B:7A:EC:35:81
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01856F26D5DF50AE6BA5CA6B265F598844F0
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/AX9hQtpuRA8bFEbDOT2Oi3rsNYE.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203130
IP address blocks: 193.247.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d5:df:50:ae:6b:a5:ca:6b:26:5f:59:88:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=017f6142da6e440f1b1446c3393d8e8b7aec3581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:d8:39:27:1e:68:ff:87:c0:ed:d1:85:92:
d3:ac:ce:5e:64:c5:90:f8:f4:90:d3:96:69:38:51:
fb:63:09:df:37:1c:ce:9c:ac:0f:ff:a2:a4:ac:34:
15:74:49:28:12:a1:68:f3:bc:b2:85:6a:b1:b1:b6:
72:2d:71:06:47:21:cb:1d:f9:13:7a:78:c1:f2:4d:
90:aa:c8:ce:2e:fb:15:95:61:9d:88:3c:e8:3c:d6:
2f:fe:5c:5c:50:3e:5c:38:86:8c:63:b1:9d:0a:fe:
7a:da:71:92:6b:e5:24:de:4b:45:58:04:da:fe:ca:
11:5e:52:f7:c8:c0:83:d6:8b:46:fb:b2:2b:10:86:
37:36:aa:44:94:82:1f:f2:1b:b3:40:fd:32:d9:73:
e8:7b:d0:0d:cf:35:39:bd:1f:63:fc:5d:80:ec:88:
4a:ce:9d:c2:1f:96:66:2b:4b:22:d3:39:69:6f:ab:
05:d8:5d:a6:c2:15:e0:09:87:13:90:36:2d:e1:71:
5e:4d:c6:21:bd:f6:80:a6:56:42:1a:ed:64:75:34:
22:3e:93:c5:1d:77:92:9d:3b:e9:17:e8:0e:07:17:
54:af:20:ee:13:08:aa:cc:bd:0c:b8:de:7f:a1:2a:
f0:b9:c2:51:66:17:a3:34:a4:54:fd:1b:18:a1:0e:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:61:42:DA:6E:44:0F:1B:14:46:C3:39:3D:8E:8B:7A:EC:35:81
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/AX9hQtpuRA8bFEbDOT2Oi3rsNYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.203.0/24
Signature Algorithm: sha256WithRSAEncryption
09:de:60:f5:8d:17:6f:20:79:3e:74:e4:9d:d6:89:b7:eb:1e:
53:0e:e5:ee:06:a8:b3:c7:3f:82:10:56:5e:12:7a:84:7a:1c:
57:79:28:91:92:64:c3:d1:f6:0f:33:4d:40:ec:e7:b7:a1:a2:
65:12:b1:e9:ea:00:38:c1:8d:fe:55:b4:93:a7:ca:2a:5c:c7:
41:b9:71:e0:3f:b6:af:ad:82:b9:1a:0a:34:cd:82:9b:d5:28:
8c:dc:2d:b9:f6:d3:fd:a1:67:83:01:c0:32:6e:02:f4:da:7f:
75:f0:77:16:8c:df:ea:e3:bf:7a:5b:e4:04:f3:81:14:5d:fb:
b2:59:80:65:83:c1:b8:a1:5f:8e:22:f2:e4:8f:b5:b5:d3:d7:
d9:d6:41:0b:c4:ac:fd:10:4d:5c:1f:73:10:65:31:9a:ea:4e:
e1:eb:95:f1:2e:0a:cb:fe:8c:6a:78:54:41:b3:9a:dd:1b:54:
fc:23:0c:94:de:5e:b0:04:82:7b:99:ac:55:ba:d2:79:9c:74:
c7:66:6c:51:d2:54:93:43:0a:4f:2c:e9:a6:24:d4:cb:54:b1:
21:99:7c:0c:a8:f6:13:4c:2b:0f:0c:7f:76:d0:5e:b6:a7:f8:
c9:17:3c:6f:07:c3:f7:5e:bc:b2:b0:97:fc:c6:e7:b1:ef:c3:
9e:84:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:24 2024 by rpki-client on console-fra.rpki-client.org