Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/sRkFgcohW1EBncIN0iwltkVt1Xs.roa
File: sRkFgcohW1EBncIN0iwltkVt1Xs.roa (raw, json)
Hash identifier: eoHxsnRPXRhUK9DdXvBzG5rKRxuumzDCZ+p7diEpnGY=
Subject key identifier: B1:19:05:81:CA:21:5B:51:01:9D:C2:0D:D2:2C:25:B6:45:6D:D5:7B
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 01856D8AD8330C740E05CF890F14F047E8FE
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/sRkFgcohW1EBncIN0iwltkVt1Xs.roa
Signing time: Sun 01 Jan 2023 13:34:53 +0000
ROA not before: Sun 01 Jan 2023 13:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8614
IP address blocks: 193.239.64.0/24 maxlen: 24
193.239.67.0/24 maxlen: 24
193.239.66.0/24 maxlen: 24
193.239.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d8:33:0c:74:0e:05:cf:89:0f:14:f0:47:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Jan 1 13:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1190581ca215b51019dc20dd22c25b6456dd57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:12:77:6b:f0:72:82:b5:f5:a5:d1:4b:e4:
f8:19:e7:2f:69:ab:3b:ff:b4:b2:80:41:75:da:18:
a2:3e:53:71:34:5b:6b:e7:ab:eb:de:72:b3:c7:2f:
1f:b6:1b:c7:3c:4d:9f:3f:71:60:5b:c6:03:0a:48:
52:2a:48:9c:df:a3:94:24:a9:57:7d:d2:ce:a1:93:
0f:f3:d8:8c:75:1b:06:62:98:d1:54:ba:f4:ac:55:
5a:7d:29:a8:9b:2a:34:70:6a:e8:79:63:c8:df:5b:
aa:5b:06:1c:25:c5:6e:b3:c6:f4:9b:07:ef:d6:5a:
5d:d6:ff:6d:7b:15:3d:c5:5c:55:bf:31:39:74:ad:
47:b8:5d:a0:42:80:a4:29:5c:4b:d8:d7:b7:c9:58:
bc:dc:9e:31:d0:78:01:f7:3c:91:98:01:20:43:23:
5b:2c:29:42:8b:d4:d5:40:c5:e6:40:ce:b7:3c:54:
99:54:46:4b:b1:19:6d:48:c4:50:62:a0:a0:8e:7c:
7c:d2:b7:e8:cf:b6:a7:13:b7:c0:af:da:f7:ae:6a:
a6:8c:54:3b:9d:de:c2:48:5e:7d:7e:b7:a3:33:f2:
54:a2:bd:a6:7d:59:0c:28:b9:50:6b:15:23:a3:3a:
4e:60:1c:bf:63:40:7a:37:a7:dc:8a:57:b9:82:1a:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:05:81:CA:21:5B:51:01:9D:C2:0D:D2:2C:25:B6:45:6D:D5:7B
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/sRkFgcohW1EBncIN0iwltkVt1Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b2:0a:08:c5:05:c9:30:02:9d:1d:55:b5:92:a8:2a:af:93:
93:09:57:80:8a:58:c3:95:66:ec:d4:99:2a:f4:61:c5:81:08:
75:a0:66:8e:fd:92:d6:e8:fe:f6:05:af:4e:ff:b9:e1:f2:4a:
16:44:51:3d:11:b6:8e:ad:2f:f5:2e:fd:02:ed:91:80:1a:28:
03:d2:d1:86:c7:02:7a:4d:b8:6c:c5:c8:85:99:57:7c:d3:fe:
ae:c8:43:ce:44:8f:b4:a4:5c:99:af:eb:9a:09:1f:c2:ad:a0:
73:41:2b:ec:4a:24:c4:4c:27:2d:2f:6b:bd:dc:7e:97:21:b3:
10:83:a0:53:fc:43:65:cb:9b:92:0d:f7:b9:78:f4:e4:ea:cf:
ce:8d:a6:33:d1:52:ec:30:a9:2c:16:b1:8f:e9:2b:46:c3:c8:
fb:3e:d5:75:ff:6f:c8:89:90:6f:8b:07:24:ba:d2:48:3b:51:
eb:fd:56:5f:3a:b4:77:2f:d4:ce:5b:06:9f:59:49:ed:d2:26:
80:c8:c9:bd:23:cc:a5:07:6f:9e:cb:8e:4d:e1:a5:c2:a1:6c:
ad:96:a3:6a:e5:f4:28:cd:04:72:bd:8b:3a:18:ab:2e:12:7e:
21:e0:5a:77:f1:d4:35:20:d8:01:72:8b:ad:8e:17:1f:01:f7:
e3:12:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:14 2024 by rpki-client on console-fra.rpki-client.org