Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fT_y-hzegbaHRbLFoZO2XWMGRyk.roa
File: fT_y-hzegbaHRbLFoZO2XWMGRyk.roa (raw, json)
Hash identifier: Va0sUq5Bf4aQLoijrfHXw4HrJy6IhzFKrsnbsJBU3cM=
Subject key identifier: 7D:3F:F2:FA:1C:DE:81:B6:87:45:B2:C5:A1:93:B6:5D:63:06:47:29
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0185707981370B2CB35B4A2C25730B369A9F
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fT_y-hzegbaHRbLFoZO2XWMGRyk.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 193.228.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:81:37:0b:2c:b3:5b:4a:2c:25:73:0b:36:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d3ff2fa1cde81b68745b2c5a193b65d63064729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:2e:da:9d:b6:17:19:28:ce:9f:71:30:4a:
98:0d:d8:5c:26:4f:a8:72:8c:ea:cc:48:aa:22:3a:
e0:09:92:1b:8e:e2:2b:aa:11:dd:ad:b9:6e:52:dc:
fc:f2:58:89:b3:34:78:85:86:9f:94:fb:7b:eb:2d:
90:79:45:ae:11:83:c9:d3:a1:4c:16:86:f9:59:4c:
63:65:5c:c7:93:1f:90:68:c6:02:3a:df:a4:a8:82:
90:f0:9e:4f:3d:38:21:c2:c6:4f:09:59:87:8a:59:
65:8a:3c:be:4e:b8:a7:f5:43:19:0c:38:e0:02:f5:
7f:6c:d3:5b:ae:75:b8:ef:2b:14:b1:bd:50:05:2f:
e9:82:9e:aa:d4:bc:24:02:b5:f3:02:53:42:93:e0:
08:b9:bf:b5:c1:97:06:6c:2e:fb:a5:03:b4:52:7f:
3c:28:c5:e3:d1:d0:29:6a:ea:e8:20:32:77:6c:8f:
8c:a8:18:7c:58:d0:9c:8c:82:58:a9:f3:da:c1:1e:
94:e0:50:d6:8b:a0:45:04:14:7e:e0:f4:3b:bd:00:
e6:28:eb:dd:12:d5:e0:a0:b4:a6:53:c7:e1:4e:54:
ee:9c:e5:e4:9a:e5:0a:f7:ee:70:9b:ee:6d:8f:ce:
de:6a:92:e3:94:58:4c:00:60:ba:20:f8:14:b0:23:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:F2:FA:1C:DE:81:B6:87:45:B2:C5:A1:93:B6:5D:63:06:47:29
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fT_y-hzegbaHRbLFoZO2XWMGRyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:34:c1:b9:3c:b4:b6:ee:91:27:a8:43:f1:1e:1f:57:fc:7b:
d9:a4:84:13:e4:e8:f9:0b:83:1f:d3:5b:26:ba:f9:13:a7:d0:
97:d9:39:7b:af:c8:8c:9b:ef:6e:2d:56:45:8e:fd:5d:6a:6e:
c8:d7:89:ab:e2:14:e1:d9:99:ca:83:0f:34:d2:38:7c:18:b2:
70:2c:d7:bd:c0:08:48:ef:7c:20:27:52:89:f7:83:ef:da:38:
d4:cd:fc:43:e7:65:a4:37:a8:71:ad:98:39:2e:36:7b:ea:b3:
04:ea:15:86:4a:ce:af:05:de:bd:b8:a0:b9:bd:13:df:ad:e3:
09:8c:8e:6a:36:d4:b7:02:2c:67:75:5a:57:fd:90:0c:51:32:
26:f2:20:f8:96:75:c2:ae:c0:98:19:9f:cb:4c:4f:71:90:c0:
e4:b0:8e:6c:d5:34:3e:d1:8b:39:d8:cb:22:95:3c:f4:ad:e6:
5b:9e:28:c0:12:e9:c3:35:58:97:97:97:7c:14:8c:97:3e:ad:
fd:84:09:36:7f:f8:ae:21:19:46:d3:fe:39:7c:2a:6e:2a:bb:
cc:0b:dd:cc:30:ed:50:07:cf:98:c9:08:e5:d6:aa:a4:14:62:
15:d6:db:60:c1:20:28:8f:03:86:20:8e:27:2e:04:1a:f3:90:
17:f2:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org