Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/xSknpq_gotl3cjaS2FtTAwa7dtA.roa
File: xSknpq_gotl3cjaS2FtTAwa7dtA.roa (raw, json)
Hash identifier: iPL7zwGrWsiq+jMO1SIHpALPSpbHAZSaML6Qyvre12c=
Subject key identifier: C5:29:27:A6:AF:E0:A2:D9:77:72:36:92:D8:5B:53:03:06:BB:76:D0
Certificate issuer: /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial: 0185C47ACB3DA4BB15E1FB744BC86197A891
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/xSknpq_gotl3cjaS2FtTAwa7dtA.roa
Signing time: Wed 18 Jan 2023 10:44:19 +0000
ROA not before: Wed 18 Jan 2023 10:44:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208164
IP address blocks: 193.27.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:7a:cb:3d:a4:bb:15:e1:fb:74:4b:c8:61:97:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Validity
Not Before: Jan 18 10:44:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52927a6afe0a2d977723692d85b530306bb76d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:cb:a5:7b:a4:c6:55:cb:0d:96:65:68:21:
a8:81:38:01:a6:a0:00:0d:5d:f0:88:12:5b:7f:34:
ab:4f:40:f1:ec:04:6a:2a:66:76:4a:fe:d8:0e:6d:
b0:e4:4e:6d:51:08:95:c6:cc:ef:0e:f4:8c:5f:f3:
21:ea:23:02:ef:14:1a:60:24:c3:5b:64:7e:b5:52:
c5:93:98:5e:be:57:4c:26:7b:e0:1b:26:dd:b8:5a:
5e:e7:0e:bd:56:4a:6d:20:2a:38:45:b6:ea:27:6f:
31:1a:de:45:06:6d:28:5e:a5:f5:cc:57:8d:89:5a:
6f:9d:03:51:fc:f8:18:9d:4a:a3:b8:b1:b1:c6:e1:
05:95:4d:22:6c:61:a4:69:19:88:3d:e1:53:10:bc:
0a:f2:cd:f5:de:d8:dd:5d:ae:35:cf:2d:9e:6a:9f:
ca:84:58:7e:b2:20:4d:81:c3:4e:10:0f:d6:ca:a2:
f6:a5:57:51:87:d2:88:6c:3c:11:41:63:16:ff:d1:
02:28:29:e1:26:9d:3b:69:ca:16:7d:32:32:6c:0d:
35:6b:bd:6a:31:c2:c8:f4:97:3a:11:a4:36:14:4d:
0a:c8:46:2d:bd:9e:a3:01:be:95:7e:ca:2b:ab:90:
3f:31:48:35:03:d0:22:66:b9:5c:53:b8:c1:d4:a6:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:27:A6:AF:E0:A2:D9:77:72:36:92:D8:5B:53:03:06:BB:76:D0
X509v3 Authority Key Identifier:
keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/xSknpq_gotl3cjaS2FtTAwa7dtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.91.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4c:aa:73:aa:86:01:dc:d6:21:8e:a7:1a:85:df:d0:1a:00:
ab:15:69:10:f2:fb:27:6a:3e:54:c5:cb:f4:97:da:51:2e:ba:
ab:8b:87:ab:7b:f2:29:48:39:e2:94:a0:bd:35:9e:58:79:c8:
c0:bd:d8:ba:95:89:6b:5d:22:3a:ca:f7:6d:d9:ae:f9:ab:9f:
dd:9d:2c:6e:2e:47:3b:d1:79:d6:37:03:1c:e9:b0:c8:9b:e0:
2d:3c:f0:6e:0f:bf:ed:76:a2:39:b8:69:9b:1b:b1:46:1b:ab:
08:cb:85:68:11:68:4b:37:09:55:54:bc:25:e8:a3:39:18:8d:
ea:ff:b9:56:ee:cc:4a:bf:24:7b:bf:2e:4a:b1:75:74:62:96:
18:44:5e:0a:d4:58:f9:9e:9d:ec:bd:b2:ec:25:25:8e:e3:65:
bf:4f:3d:31:a8:12:8f:0f:9a:c4:5f:8b:a9:89:6f:b5:8f:df:
7a:93:b5:95:e1:3e:9b:5e:5a:f9:4b:f3:38:34:36:c7:5d:ca:
00:43:80:22:a4:47:ee:22:44:a6:3d:2a:21:fb:43:6f:d4:b7:
06:19:f4:b2:87:ee:97:a9:5e:84:32:7c:fd:4a:34:c5:7c:34:
12:3a:2e:49:54:7e:61:de:d9:fc:02:5f:90:9e:fd:90:2c:1a:
88:3e:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:14 2024 by rpki-client on console-fra.rpki-client.org