Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/tp9RC0FFoxJ258clAFfTRpKpxCY.roa
File: tp9RC0FFoxJ258clAFfTRpKpxCY.roa (raw, json)
Hash identifier: CZjXj3dwwYlNKvZS7MD30kvtkCVFeUHcZB01TmyZMb4=
Subject key identifier: B6:9F:51:0B:41:45:A3:12:76:E7:C7:25:00:57:D3:46:92:A9:C4:26
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 0186DAD9873A031B6051DD41F894B9F4B9E1
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/tp9RC0FFoxJ258clAFfTRpKpxCY.roa
Signing time: Mon 13 Mar 2023 12:02:14 +0000
ROA not before: Mon 13 Mar 2023 12:02:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 193.17.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:d9:87:3a:03:1b:60:51:dd:41:f8:94:b9:f4:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Mar 13 12:02:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69f510b4145a31276e7c7250057d34692a9c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:5f:05:e1:96:6c:41:62:79:36:82:af:a2:
c9:fa:94:15:d7:94:c8:b1:bf:d4:ee:45:61:19:06:
3e:f2:fe:5a:68:9a:f5:39:16:35:89:f5:c2:64:15:
48:c0:a1:af:6b:1d:c1:f9:08:84:4b:21:34:ec:2a:
f5:96:08:b8:fd:e4:0e:06:a1:b0:6c:fd:d4:e1:f0:
f4:da:5e:fc:82:2e:0a:4f:76:21:1c:37:02:e3:72:
31:a8:76:83:a9:16:e5:4b:80:ef:c1:3b:ca:5a:51:
4d:8c:54:a4:68:23:ac:82:e1:2c:65:96:f3:9d:9d:
74:6a:26:60:d7:86:84:86:87:cd:1b:b0:37:83:02:
16:59:77:3b:0e:c7:3d:6e:7e:83:c8:81:f5:d9:f0:
7f:a0:69:0b:0b:82:74:a1:4f:b2:08:89:4b:dd:7b:
64:14:30:b5:7a:ec:f5:3f:a8:66:c5:d3:ad:42:98:
c6:2f:1e:ae:3e:1c:94:09:7b:5f:ae:ba:98:14:f7:
4c:62:af:4e:fb:4f:b5:b2:51:a9:51:fc:df:68:e2:
e8:9d:b2:d8:e6:96:f9:08:78:6a:3e:09:5b:19:a1:
ac:fb:84:a4:df:82:18:e8:24:7b:20:83:9d:14:fe:
28:9c:02:e9:cf:35:f2:77:c1:e5:d0:99:db:c3:09:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:51:0B:41:45:A3:12:76:E7:C7:25:00:57:D3:46:92:A9:C4:26
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/tp9RC0FFoxJ258clAFfTRpKpxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.195.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c4:fc:bd:b8:45:cb:90:43:17:ae:ed:46:d7:88:ca:52:4c:
c9:d9:01:31:9d:25:8c:2d:06:0e:9e:9b:c9:62:56:db:d7:e0:
6a:d1:31:3b:32:ed:d6:de:a0:31:6b:26:7e:55:02:57:61:42:
10:91:8a:84:8f:40:d8:7a:fe:b8:40:c2:4d:48:44:d2:79:97:
ba:9d:5b:c6:91:00:4f:05:00:e2:93:9c:6c:d1:85:12:6f:ad:
2d:03:54:69:d1:0f:d5:12:f5:80:da:6e:45:70:68:14:47:07:
4a:a4:c7:0b:af:dc:66:23:9c:9f:bb:ab:c2:35:2f:c4:f8:1b:
1e:dd:01:e9:71:1c:37:e6:69:13:5e:3c:16:d1:98:30:bb:1d:
f2:82:4c:94:36:48:2d:3a:25:3f:c8:57:92:14:96:6b:bf:f6:
6f:6b:39:ff:54:57:47:06:7f:6c:f3:02:ab:c7:de:cd:26:03:
38:a5:cb:9b:48:14:24:a6:ae:be:24:70:e2:f4:52:07:ac:d4:
bd:18:f8:06:0e:16:f9:c2:3a:69:69:98:48:df:66:17:59:b8:
e4:fb:03:96:41:66:fa:17:fc:ae:4f:56:f7:72:3b:a4:3d:0c:
ea:b7:16:e7:ab:46:3f:ab:6c:4d:fa:e6:74:e0:c1:0c:22:4f:
d6:83:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:07 2024 by rpki-client on console-fra.rpki-client.org