Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KQkExIeUAY1F2JPCCzWO1eX_xuA.roa
File: KQkExIeUAY1F2JPCCzWO1eX_xuA.roa (raw, json)
Hash identifier: vyiN2+phpJyHVLfjdBTcWEkWvQsW5QTt6lQSiANG58w=
Subject key identifier: 29:09:04:C4:87:94:01:8D:45:D8:93:C2:0B:35:8E:D5:E5:FF:C6:E0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018C58BCEF8A0C9A5AF17D63B859E9B5A857
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KQkExIeUAY1F2JPCCzWO1eX_xuA.roa
Signing time: Mon 11 Dec 2023 11:57:06 +0000
ROA not before: Mon 11 Dec 2023 11:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57785
IP address blocks: 193.22.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:bc:ef:8a:0c:9a:5a:f1:7d:63:b8:59:e9:b5:a8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Dec 11 11:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290904c48794018d45d893c20b358ed5e5ffc6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:bf:33:65:47:4b:f2:27:df:f8:3e:4b:cf:
3f:02:4b:cd:a3:e4:2a:e0:3d:e4:ce:a6:cd:b6:a6:
94:7b:60:fe:e1:01:01:f6:c0:99:07:e9:5e:b7:56:
f4:d0:4d:58:1e:27:96:0c:a8:77:2a:50:89:cc:4f:
d0:e2:f4:2d:96:1f:25:09:6b:54:61:74:e7:2e:de:
e9:b8:dd:d5:46:79:27:cd:7f:07:b5:4d:25:c1:95:
3f:28:22:9c:11:6b:cf:b6:5b:a1:35:76:68:c3:33:
f8:80:a8:1a:e4:79:7a:d7:9c:27:c5:96:2c:b8:10:
aa:23:d4:f9:fc:dc:a5:09:19:15:93:00:c3:b1:4a:
48:8b:50:0c:8b:55:8d:9f:89:52:b6:2b:5f:01:12:
df:35:92:38:38:2e:85:d3:85:33:c0:89:3d:31:02:
d6:fa:24:17:9d:39:7c:19:a4:14:5e:6a:f9:c9:0e:
00:95:4c:82:2c:6f:21:a3:c6:19:e6:7e:30:8e:89:
08:04:d7:1b:bf:cd:9a:f4:34:e3:4b:63:55:7d:17:
b1:34:e4:d3:89:a4:bb:eb:9c:73:90:68:c9:a5:5c:
b7:20:9f:6a:0d:53:ed:1c:8d:5c:64:49:91:db:24:
df:50:e3:7c:37:28:85:1b:79:98:d2:34:04:74:1d:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:04:C4:87:94:01:8D:45:D8:93:C2:0B:35:8E:D5:E5:FF:C6:E0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KQkExIeUAY1F2JPCCzWO1eX_xuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d8:60:69:21:d8:09:57:ea:bb:a0:9d:ef:63:5b:f4:05:01:
39:78:ce:55:be:de:f8:11:db:28:64:6f:19:db:cf:63:14:a1:
df:e6:93:31:29:8a:9d:51:08:b6:d6:4c:e2:64:6a:64:de:4a:
5a:09:9b:10:6b:c7:d2:f0:08:3b:03:b4:2e:87:5c:44:fe:d7:
6e:55:fa:72:f0:17:51:f6:b9:c1:6e:7d:c7:12:31:f2:51:c8:
58:75:a8:5d:77:dc:aa:02:62:e4:26:67:b4:0f:39:72:4f:8f:
78:18:75:d6:d5:b9:30:60:73:82:7b:55:0c:f3:da:20:81:0d:
ac:1a:04:cf:22:88:d8:2e:af:68:6a:5d:3e:77:60:55:70:20:
ff:9e:33:d8:4e:a0:e3:b1:af:f6:2d:ae:68:f4:b1:21:78:e8:
8d:f1:97:c7:21:5f:73:17:a7:53:b0:da:68:e8:76:c4:ad:55:
13:be:8d:f5:d2:3d:96:97:73:cd:b8:7c:1c:60:1f:12:c7:b6:
a2:f8:e9:bd:02:c0:d0:e5:de:4e:5c:8e:49:99:8b:40:5a:08:
8f:4e:67:85:b2:17:6d:ea:d2:91:54:19:7e:5d:28:db:97:3f:
ab:ab:94:1b:78:ae:53:67:34:09:b3:6e:00:d7:04:02:e4:a0:
fe:67:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org