Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/xkHqhTkv9acR3bWpF7kFumiXMeI.roa
File: xkHqhTkv9acR3bWpF7kFumiXMeI.roa (raw, json)
Hash identifier: F2XI9oRoWitBn6diqB9HT9fH+7VEZj341QUvVpE+dXA=
Subject key identifier: C6:41:EA:85:39:2F:F5:A7:11:DD:B5:A9:17:B9:05:BA:68:97:31:E2
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 018BD27CD0A99A9A0D1EE64C27605DF795F9
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/xkHqhTkv9acR3bWpF7kFumiXMeI.roa
Signing time: Wed 15 Nov 2023 10:17:57 +0000
ROA not before: Wed 15 Nov 2023 10:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 193.57.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:7c:d0:a9:9a:9a:0d:1e:e6:4c:27:60:5d:f7:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Nov 15 10:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c641ea85392ff5a711ddb5a917b905ba689731e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:55:f7:22:8b:d2:bc:29:0c:f7:89:e6:80:
70:5d:54:89:4e:30:31:99:99:ea:7b:c0:da:e5:ff:
1e:c8:d9:68:78:07:f5:df:4b:1d:be:e5:d9:43:a4:
f5:84:86:a3:32:eb:be:60:b7:62:d5:f2:2b:55:79:
21:e1:ed:56:62:cf:a0:4c:d7:79:b6:67:b0:56:e6:
a0:46:fc:3e:40:fd:50:05:9b:aa:61:ce:bb:70:68:
bf:21:b7:2c:7c:11:fa:de:62:94:2f:2b:ef:e5:c2:
d2:b1:ce:2a:98:6a:e4:d2:e3:49:66:9f:0f:ab:73:
9f:d9:31:b9:f5:e8:5b:e9:1b:92:1d:f8:ed:45:84:
6a:e7:8a:7a:b2:36:1d:81:9d:f0:86:41:15:79:9c:
45:97:fa:55:14:aa:c2:ac:04:4d:b0:bd:10:77:1b:
78:e5:b1:7f:80:e8:f2:70:43:91:05:76:3c:66:3a:
07:e7:ac:d6:a3:84:7b:a7:94:2a:36:37:63:2c:b5:
fc:88:bb:98:ff:26:82:fe:bc:89:97:2e:94:1c:24:
c4:64:82:61:13:55:fa:4a:fa:25:c5:68:df:bc:f5:
25:85:85:4e:b5:4c:62:77:29:bc:4c:45:7b:d4:fe:
2b:fa:88:74:80:fc:9a:84:49:68:2a:92:d2:99:c2:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:EA:85:39:2F:F5:A7:11:DD:B5:A9:17:B9:05:BA:68:97:31:E2
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/xkHqhTkv9acR3bWpF7kFumiXMeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a0:76:2c:4e:84:7e:39:80:97:d4:16:7b:c1:35:16:98:fa:
17:72:3a:9c:8a:23:47:2d:85:b7:4d:b7:80:39:4d:7c:1c:ea:
f3:fe:a9:b4:bd:8f:8c:c8:80:18:dc:bc:be:b0:62:3a:cf:1d:
66:9d:0e:3c:b2:94:61:b0:83:60:70:7a:f7:94:e6:4f:d1:ec:
75:0d:1b:75:04:27:e8:c4:10:0c:01:f1:04:d3:0e:64:89:eb:
4d:61:b9:b4:62:6f:6e:93:60:78:08:1c:69:c6:a8:be:94:ac:
63:90:be:be:55:8a:ff:3b:2a:ac:f8:62:d9:59:8d:3a:37:d9:
bb:c6:89:9d:94:4b:9b:50:0b:35:e4:75:22:d2:96:25:0b:7b:
4a:4b:a5:1b:1e:39:ca:c2:ec:8c:36:13:61:66:ca:db:3e:8b:
4d:c8:ab:9a:ff:89:5a:51:f8:ad:11:53:3c:7b:c1:c8:a2:30:
ec:ec:da:54:85:bc:c4:97:da:88:eb:2a:f6:0f:71:dd:65:62:
db:d5:1c:48:dc:e7:48:4a:53:25:e9:f6:70:b2:6d:00:be:ce:
f4:ad:c6:61:91:11:74:7c:e4:75:d2:7f:52:59:8d:fd:f1:3a:
f5:cd:f0:71:c6:21:24:69:4b:b1:14:20:05:89:df:97:af:5c:
ab:8d:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 11:17:41 2023 by rpki-client on console-ams.rpki-client.org