Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/OwadxsdKk_cm4mX6TzV2rQVq9EI.roa
File: OwadxsdKk_cm4mX6TzV2rQVq9EI.roa (raw, json)
Hash identifier: jNqtwViaouugVOiUDIO5Nb2QISu5C0VtCaBNtwH5Kq4=
Subject key identifier: 3B:06:9D:C6:C7:4A:93:F7:26:E2:65:FA:4F:35:76:AD:05:6A:F4:42
Certificate issuer: /CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Certificate serial: 0186C0F09AD15E16D3F1B2F6A2FC61214EE3
Authority key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/OwadxsdKk_cm4mX6TzV2rQVq9EI.roa
Signing time: Wed 08 Mar 2023 11:17:19 +0000
ROA not before: Wed 08 Mar 2023 11:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42369
IP address blocks: 193.30.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:f0:9a:d1:5e:16:d3:f1:b2:f6:a2:fc:61:21:4e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Validity
Not Before: Mar 8 11:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b069dc6c74a93f726e265fa4f3576ad056af442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:e7:ce:b2:90:43:04:e6:62:f9:1a:9d:e3:
72:e7:44:ef:1b:21:19:f6:b2:e6:a2:30:0c:c7:78:
81:01:71:cd:a8:ef:74:d5:af:cf:2f:4b:e4:7f:6e:
cb:19:d0:8c:42:1f:ff:cc:5d:45:f6:45:b8:ad:fa:
35:58:67:4e:b8:78:10:79:fd:10:9d:c6:2d:b6:80:
06:42:71:64:29:41:95:19:d5:aa:93:29:d9:73:10:
69:d8:3f:22:ca:55:be:16:b7:4e:7f:c5:ba:e5:46:
9d:43:e5:88:8b:64:7f:3a:ab:ed:90:4b:cb:d5:37:
f4:2d:39:75:26:81:df:fa:86:f8:d9:c0:f2:00:a4:
4f:ed:ea:e0:82:80:9f:c7:0d:b2:2d:59:92:41:f0:
37:20:31:d6:28:94:92:3e:a8:c5:6b:c8:80:cf:bd:
a9:79:69:06:35:b3:ba:1d:18:95:a3:32:1b:5b:d7:
70:8b:65:54:a9:13:fe:58:42:ea:fc:8a:4f:3a:b8:
a4:99:23:80:49:a9:b0:ea:b7:88:33:b4:03:cc:4d:
67:0e:a4:cf:5e:a5:ed:af:88:74:dd:68:30:df:9b:
37:b1:6e:54:b8:b1:80:57:3b:df:e1:76:45:48:8e:
96:ec:7f:e0:3d:d5:12:28:6a:41:04:24:3b:d0:d3:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:9D:C6:C7:4A:93:F7:26:E2:65:FA:4F:35:76:AD:05:6A:F4:42
X509v3 Authority Key Identifier:
keyid:21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/OwadxsdKk_cm4mX6TzV2rQVq9EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:24:c9:58:85:1c:0b:54:73:1e:b7:e6:3f:b3:c0:fc:49:cd:
2b:cf:f0:fd:11:dd:0a:90:af:e8:de:cc:e7:63:8e:4d:f4:73:
d3:88:c6:07:5c:a2:c8:cc:9a:07:b2:14:09:69:54:d6:0c:21:
da:13:ec:57:75:0a:67:02:70:3f:67:f6:24:b2:30:54:41:3c:
f5:1b:c8:0d:a7:1f:7f:7d:d5:11:3f:0c:48:e7:2c:17:e9:e5:
f9:b3:cb:a5:2f:c6:fe:25:5c:14:4c:3a:75:9e:13:75:0b:5c:
3d:f4:27:74:2a:f3:76:b6:87:20:02:e8:5d:0e:54:62:b6:37:
3f:63:7c:42:9e:2a:ae:ef:f0:9c:de:29:37:87:2d:14:25:8b:
2e:d9:3d:45:c7:53:3f:26:71:5e:61:bd:c5:65:ef:fa:f3:7b:
f5:f4:21:34:94:06:6d:fc:10:34:c7:ab:b2:56:c5:e4:89:74:
fd:9f:6b:28:2c:57:68:02:b4:73:c6:88:c8:39:8d:6f:02:bb:
db:6d:ac:a0:96:10:bb:b0:27:b6:96:70:5d:ae:f0:88:8d:3a:
fe:7b:2e:28:61:79:49:22:72:77:94:69:73:d8:f6:f4:5a:16:
58:ea:ef:8c:0c:81:fe:93:35:61:80:c7:92:61:ba:33:5d:87:
56:e6:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:18 2024 by rpki-client on console-fra.rpki-client.org