Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/loyEnzs3gSXf3FNoHTE8RY2gsDI.roa
File: loyEnzs3gSXf3FNoHTE8RY2gsDI.roa (raw, json)
Hash identifier: m21fPcRssUoIqrg46dJPBzEl9r7FbIVFqq0P3213o5E=
Subject key identifier: 96:8C:84:9F:3B:37:81:25:DF:DC:53:68:1D:31:3C:45:8D:A0:B0:32
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 01856CF8672F78FA4598996577451CCBE6C4
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/loyEnzs3gSXf3FNoHTE8RY2gsDI.roa
Signing time: Sun 01 Jan 2023 10:54:56 +0000
ROA not before: Sun 01 Jan 2023 10:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50708
IP address blocks: 193.105.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:67:2f:78:fa:45:98:99:65:77:45:1c:cb:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Jan 1 10:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=968c849f3b378125dfdc53681d313c458da0b032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:a0:a7:c3:4c:29:70:6e:40:46:0a:69:14:
28:36:30:42:f3:da:df:8c:68:80:32:75:31:5a:fc:
2a:5c:da:ae:72:3d:8a:86:da:8b:88:4e:8f:54:a1:
a0:de:5f:ee:15:14:ee:ea:2c:a5:aa:b1:e7:99:40:
8b:b3:1b:2c:ec:b3:5f:58:8b:7c:bc:86:03:16:5a:
57:18:a4:7f:af:85:e5:ab:11:8f:ea:e3:b7:f5:a8:
24:15:0b:60:c2:0b:45:2f:c2:74:26:66:69:18:65:
dd:2f:d1:b0:41:54:8c:4c:08:f4:6f:f6:fa:bb:52:
4d:b6:69:ad:71:c7:42:a6:f7:c3:fb:b1:b6:f9:7f:
84:28:49:53:b0:32:cc:65:f5:bf:22:07:29:3d:5b:
b0:7d:d6:6a:b2:9d:7b:5b:bc:c6:d1:6b:0c:77:b2:
80:85:ca:22:63:7b:1d:40:47:15:b2:05:77:91:2a:
6d:34:52:d2:22:d8:1f:dc:27:a9:30:59:a2:47:d1:
23:03:53:c4:14:aa:29:1b:e8:ab:63:26:f4:28:27:
54:29:bd:46:04:81:23:de:be:02:9e:2d:70:4d:e2:
85:ee:d9:c8:f3:3c:16:66:16:c0:67:d6:0e:ae:25:
a5:88:9f:b5:1e:aa:18:1d:17:f6:b7:cc:3f:72:21:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:84:9F:3B:37:81:25:DF:DC:53:68:1D:31:3C:45:8D:A0:B0:32
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/loyEnzs3gSXf3FNoHTE8RY2gsDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.190.0/24
Signature Algorithm: sha256WithRSAEncryption
06:46:1f:f0:51:0e:8f:01:b6:91:23:f1:c3:83:97:32:35:76:
8b:02:d2:5b:69:d9:bb:ae:ec:ae:76:f5:b6:58:c4:0f:bd:14:
86:41:be:4c:d3:0a:48:26:bf:8b:a4:8e:50:a4:3e:cd:27:1e:
b0:f1:71:4e:fe:21:2c:4b:82:cc:33:67:99:e9:23:b8:1e:71:
7d:a4:5a:1e:de:36:f0:73:8f:b0:d1:66:b6:a1:5a:27:38:81:
7b:ae:11:5e:88:e6:63:41:d0:e6:0e:d3:ef:df:c4:22:c7:9b:
2e:67:16:a6:18:cf:09:3d:7f:c5:36:a9:cf:ab:a0:1a:5a:73:
1e:94:43:f1:11:f2:97:ad:51:1d:e7:02:f2:ff:1e:72:96:c9:
15:3a:cd:95:81:3e:fc:ff:9e:de:4f:8e:82:f7:14:29:58:f5:
84:2d:16:f0:74:04:85:7b:ea:19:3c:75:64:45:be:18:32:2b:
ca:75:1a:1a:22:6b:ce:65:58:72:bf:ef:1a:08:fb:df:76:ca:
c6:bf:1f:4f:06:be:33:f4:d0:bd:e8:65:91:2f:11:3f:23:77:
e1:d9:bb:6f:6b:c4:b3:dd:01:1f:c2:81:6d:4b:8c:8e:46:fd:
d0:85:28:d6:ba:5b:b1:0b:6f:8d:81:66:4d:89:3d:8e:ac:30:
56:93:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:56 2024 by rpki-client on console-fra.rpki-client.org