Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/1-SaEpBSqkMNWo64ZlyaS7sKW4Ts.roa
File: 1-SaEpBSqkMNWo64ZlyaS7sKW4Ts.roa (raw, json)
Hash identifier: yqZAy1sQVWOOiJxlrMKjs0bor/6m7Q8p6FPGpmoIJE8=
Subject key identifier: F9:26:84:A4:14:AA:90:C3:56:A3:AE:19:97:26:92:EE:C2:96:E1:3B
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 01856CCB083F7602B13E2556FD9B0482B504
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/1-SaEpBSqkMNWo64ZlyaS7sKW4Ts.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200930
IP address blocks: 193.58.181.0/24 maxlen: 24
193.58.182.0/24 maxlen: 24
193.58.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:08:3f:76:02:b1:3e:25:56:fd:9b:04:82:b5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f92684a414aa90c356a3ae19972692eec296e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:a9:3a:8c:a9:39:ad:a6:7c:7d:d3:61:39:
66:2b:54:f3:51:02:1e:59:0a:19:52:37:d7:ff:8d:
00:99:ac:18:fe:c5:27:2c:d9:42:45:09:db:d6:0e:
d2:2e:88:e0:28:e6:a7:42:33:b0:e8:e6:03:d7:11:
38:a2:6a:37:3a:bc:20:40:b8:f7:c1:f9:b8:aa:e3:
10:7d:b7:eb:79:2b:b6:cc:62:04:c8:b1:48:69:85:
4e:04:77:b7:3c:51:aa:23:cd:83:5e:00:aa:01:4a:
07:20:10:bb:df:bf:7a:84:21:e3:17:fc:be:fb:af:
bb:c0:72:93:d9:3e:eb:bf:48:53:aa:1c:6d:70:67:
22:f0:23:0b:62:59:43:8e:10:94:14:4d:93:f1:63:
3b:18:53:d7:8c:be:ec:11:64:fc:23:8c:1f:24:af:
80:0f:9b:32:15:23:8e:e9:cb:58:f2:2d:ad:5d:ef:
6d:1a:30:f9:3e:19:c2:ba:15:50:fe:aa:8f:bc:b5:
fd:0a:2e:ce:ef:66:37:cc:ba:15:ba:f8:44:7e:98:
8f:ff:00:a3:17:71:d1:2a:fd:54:fb:de:01:d0:66:
44:18:33:0d:37:99:fb:50:62:36:be:2e:47:24:c3:
00:4b:2f:ba:ff:0f:fa:d7:8a:2d:ee:37:fd:6b:81:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:84:A4:14:AA:90:C3:56:A3:AE:19:97:26:92:EE:C2:96:E1:3B
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/1-SaEpBSqkMNWo64ZlyaS7sKW4Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.180.0-193.58.182.255
Signature Algorithm: sha256WithRSAEncryption
1b:70:df:ba:f7:fc:3b:3c:14:aa:22:ce:e4:50:50:08:a5:d4:
08:37:fe:b4:05:a5:66:d8:6c:9a:7b:d2:f9:90:48:96:71:c3:
4a:4d:12:86:38:09:f2:33:f9:8f:67:44:94:33:8a:a5:87:10:
88:a8:74:22:c6:3d:82:f1:c3:c7:ae:a4:11:6a:dc:12:89:d7:
69:9b:c8:13:d9:a8:32:c1:79:62:92:ec:4f:02:8d:a2:99:05:
4c:8e:e2:ac:d1:45:7f:ff:78:80:da:88:13:26:34:31:ab:d8:
6c:d1:6f:6d:4d:e8:6e:b0:dc:ab:7c:0f:c4:3f:f7:22:59:39:
d8:e9:90:a1:c4:4c:fd:10:da:48:2f:3a:e9:00:0f:82:80:a8:
70:f4:43:ff:7a:82:ea:f0:3f:58:ce:a9:8d:c5:00:4a:db:e6:
dd:b4:0c:4b:3f:b2:b2:54:29:b5:85:b5:ba:96:72:8e:82:80:
35:c7:33:c2:6d:a7:75:62:57:2f:43:77:e1:bf:8b:a7:50:ed:
0c:05:bc:37:5c:31:f1:f4:4b:45:75:1e:af:dc:ca:ec:84:fe:
e4:12:12:12:7f:bb:44:04:75:d1:67:dd:f3:e4:41:40:53:d8:
eb:ec:79:74:5b:7d:eb:2f:a2:ec:05:ef:51:6c:87:1b:ce:b6:
91:e4:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:31 2024 by rpki-client on console-fra.rpki-client.org