Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/R26X85kzCAJ9cw8sceRd4f1AEkY.roa
File: R26X85kzCAJ9cw8sceRd4f1AEkY.roa (raw, json)
Hash identifier: v0VLT77oreRuahbkZ07ZsAxVKJ77pHAI5iUqsphAz7M=
Subject key identifier: 47:6E:97:F3:99:33:08:02:7D:73:0F:2C:71:E4:5D:E1:FD:40:12:46
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0185729EC39B12BDEFA745B178B0290F67CA
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/R26X85kzCAJ9cw8sceRd4f1AEkY.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c3:9b:12:bd:ef:a7:45:b1:78:b0:29:0f:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=476e97f3993308027d730f2c71e45de1fd401246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:a4:35:ba:3a:70:10:55:a9:7e:f6:c7:71:
0b:b1:f7:1e:9a:3e:fc:f6:35:30:79:9a:e6:55:15:
15:9c:93:30:4d:2d:a4:69:fc:ca:94:c9:73:1b:72:
c3:d1:44:50:72:3f:a1:9c:94:50:3c:4e:74:fb:03:
26:2e:c2:ea:17:6b:bb:a2:51:40:d5:30:d8:a1:4e:
28:0e:a9:b5:01:35:66:a9:c2:b7:53:37:64:e8:3e:
49:be:c0:6a:d2:1e:60:cf:a5:56:bd:b9:c0:82:39:
23:2f:8f:fd:3e:f9:29:38:aa:55:df:a5:8a:59:a2:
fe:3e:1d:6a:aa:2e:33:a2:64:b6:73:7e:1f:ba:aa:
12:ed:e4:42:61:82:4f:7d:73:1d:13:86:d0:73:30:
34:2d:a0:85:bc:26:23:34:c7:9a:43:3c:2a:5d:e4:
e7:b3:40:42:91:e6:35:6e:72:6e:21:15:1f:d5:1c:
f6:47:29:ab:58:45:fd:a7:4c:1b:38:78:37:57:aa:
0c:e3:a0:e3:66:46:04:0e:ff:7d:e6:b1:a5:60:9f:
58:cf:a7:f9:15:ee:69:2d:39:7a:82:52:52:58:c5:
f8:1c:df:d0:e0:80:47:57:cf:3d:35:05:34:67:8f:
bc:d8:1a:88:c3:69:83:2e:3b:e1:41:66:ab:d1:10:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6E:97:F3:99:33:08:02:7D:73:0F:2C:71:E4:5D:E1:FD:40:12:46
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/R26X85kzCAJ9cw8sceRd4f1AEkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d0:87:7b:25:6e:94:b3:0d:c3:83:d2:da:b2:05:85:09:f4:
0e:4d:a2:cd:0c:9e:8a:45:71:38:5e:5a:64:8e:82:c4:d3:32:
0c:8d:8d:4f:fa:1d:7a:b0:7c:b5:59:c7:c0:19:67:c3:9f:b1:
ae:73:77:53:5e:24:5d:09:98:a8:5d:0b:a0:06:4e:97:f3:41:
5d:b4:cf:d9:dc:75:f4:aa:32:91:68:89:4d:8a:27:59:de:67:
71:28:8c:4f:4f:c5:6f:fc:13:46:78:65:e4:11:2e:1b:72:e9:
13:a9:48:df:3f:28:86:68:20:3e:97:45:ce:66:c0:63:f4:77:
d7:f7:d6:e9:02:b0:f9:87:2e:07:09:8b:e2:cc:5d:ab:2b:29:
ff:f7:56:27:68:28:2e:41:8e:59:11:ed:26:a8:13:f6:d8:3e:
74:dc:0b:b5:ae:0b:e3:32:a7:b6:6e:14:14:b3:3a:fd:2e:4c:
cc:07:27:af:5c:cd:5a:83:57:c8:ca:e2:c6:9c:d1:3c:15:d1:
2a:62:14:3d:d0:80:6a:ef:34:48:9e:6b:a3:bf:65:6c:c0:65:
6d:d8:a6:96:b2:60:0f:28:9f:bb:5c:dd:28:90:60:41:d5:56:
75:83:ee:3c:dc:ca:8b:64:30:07:60:78:de:61:38:e5:d0:00:
9b:bd:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-fra.rpki-client.org