Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9uF5VktkRBKVUBr1WkjNEix9RdI.roa
File: 9uF5VktkRBKVUBr1WkjNEix9RdI.roa (raw, json)
Hash identifier: NxRvbD2dJLkAz61EkI8StmY8AdNpdRVP61mKe1Q5SmY=
Subject key identifier: F6:E1:79:56:4B:64:44:12:95:50:1A:F5:5A:48:CD:12:2C:7D:45:D2
Certificate issuer: /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial: 018570396E3C711F58DB45B687111C00FE17
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9uF5VktkRBKVUBr1WkjNEix9RdI.roa
Signing time: Mon 02 Jan 2023 02:04:49 +0000
ROA not before: Mon 02 Jan 2023 02:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48037
IP address blocks: 193.177.248.0/21 maxlen: 24
193.176.225.0/24 maxlen: 24
193.176.224.0/24 maxlen: 24
193.176.223.0/24 maxlen: 24
193.176.222.0/24 maxlen: 24
193.176.226.0/24 maxlen: 24
193.176.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:6e:3c:71:1f:58:db:45:b6:87:11:1c:00:fe:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
Validity
Not Before: Jan 2 02:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e179564b64441295501af55a48cd122c7d45d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:39:4b:02:b7:75:b2:34:d3:50:cc:c7:25:
86:bf:ec:c2:c5:53:c5:f2:ff:85:d5:17:10:ed:2b:
e9:13:8c:f3:b0:42:eb:8f:a5:8a:61:f8:7e:fa:4a:
40:47:0f:3b:f1:2c:b5:b8:8e:34:d4:06:5a:32:3c:
f8:2f:f2:31:86:8f:df:b1:27:39:31:8c:d4:82:72:
be:da:d6:ec:2c:ac:f3:47:87:6a:85:e8:59:25:a3:
5e:cb:0b:6b:66:91:78:31:50:56:cb:d9:30:27:15:
a6:27:0e:8f:8a:fe:ea:53:78:e3:10:3e:91:36:ed:
56:e8:01:6e:0a:84:9f:9d:ee:a0:e4:58:d1:02:9f:
61:d0:3f:db:9f:26:ff:3f:ad:3b:ca:99:71:3b:56:
0a:51:2d:60:bd:28:88:89:8c:90:02:99:84:64:d4:
4a:e7:43:5b:07:d2:de:90:b3:4d:8c:88:7f:a3:14:
85:a1:82:4f:40:6b:a2:c5:ed:9e:89:db:b0:d6:4e:
72:d6:5d:98:9d:bb:af:48:69:85:06:9c:cd:a6:3b:
87:32:44:b5:26:08:3a:81:cb:73:01:03:49:c3:5a:
1a:1d:da:81:1f:87:a0:82:56:bd:e5:bb:03:62:59:
79:0a:92:f1:9f:2c:23:32:b2:ef:bc:ea:d2:1c:14:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:79:56:4B:64:44:12:95:50:1A:F5:5A:48:CD:12:2C:7D:45:D2
X509v3 Authority Key Identifier:
keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/9uF5VktkRBKVUBr1WkjNEix9RdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.222.0-193.176.226.255
193.176.234.0/24
193.177.248.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f7:a6:18:5a:01:53:de:21:ef:6f:93:92:79:cc:f4:57:85:
4e:63:5a:00:37:46:1f:cd:03:3e:db:ad:60:4f:a8:6c:93:62:
39:00:dc:48:09:86:0d:c1:65:91:55:d2:a6:ab:c7:28:e3:2f:
a4:c6:4d:6b:f9:58:b0:25:a4:03:77:64:c5:e6:60:c2:0c:3e:
a1:cc:4f:02:ec:e6:1f:94:47:25:5c:f4:c5:d2:53:34:2c:b1:
ac:55:fe:72:87:54:8a:4d:ef:9c:72:7c:5b:90:6d:9c:27:a5:
0a:31:9b:7e:08:af:ac:f0:bb:c0:c7:cd:00:5c:c6:82:1b:5a:
0a:a3:95:f1:5b:75:8e:e6:b3:7c:c4:a3:9c:b0:5c:ef:7f:b4:
d3:90:8d:80:67:a6:52:3a:2e:10:95:4f:a2:9c:5d:7d:6a:cb:
ce:54:6b:ae:99:e5:c0:1c:f0:2d:2d:23:c3:e2:75:fb:67:4a:
af:02:77:1e:69:b6:c2:1c:d9:9e:ba:f9:01:60:12:2e:49:c0:
c1:d9:20:32:cf:00:07:19:97:54:0c:46:1f:0d:ef:e4:d1:5a:
e8:82:dc:d8:ec:ca:f6:4b:69:1a:2e:1a:53:a4:1e:62:c7:6e:
0a:1f:fb:f3:68:bc:0f:04:32:2c:e1:49:c7:50:d6:bd:96:9d:
89:18:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:34 2024 by rpki-client on console-fra.rpki-client.org