Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hMgZyH8hRmvfClE7e7DejSJPHqc.roa
File: hMgZyH8hRmvfClE7e7DejSJPHqc.roa (raw, json)
Hash identifier: q2Ba5qIfeB0ymHg9ejlVQL9WxunnYmmyfw4KA77vmqc=
Subject key identifier: 84:C8:19:C8:7F:21:46:6B:DF:0A:51:3B:7B:B0:DE:8D:22:4F:1E:A7
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0187B8D68D0E8DE9BC14B81FF28BC218EFE7
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hMgZyH8hRmvfClE7e7DejSJPHqc.roa
Signing time: Tue 25 Apr 2023 14:34:41 +0000
ROA not before: Tue 25 Apr 2023 14:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207724
IP address blocks: 193.228.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:d6:8d:0e:8d:e9:bc:14:b8:1f:f2:8b:c2:18:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Apr 25 14:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84c819c87f21466bdf0a513b7bb0de8d224f1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:1d:da:43:17:3f:f2:58:69:c9:ce:da:5f:
9e:bb:ca:3f:ef:a2:fb:7f:32:c1:b9:77:77:80:d2:
f6:06:19:46:c7:0d:e7:9b:68:01:a0:25:11:ef:55:
1e:b0:3c:57:85:c8:74:4c:24:3a:d4:27:7a:b3:b0:
23:d4:a5:15:dd:e1:5d:65:75:3c:c3:ce:70:70:4a:
93:6a:e1:37:ea:22:8c:72:f2:36:d0:50:a9:c7:09:
db:d9:96:cc:69:d8:af:b2:29:aa:73:ea:0a:d5:8f:
6f:81:4c:dc:6b:d9:66:7d:25:ca:d6:40:6e:2e:2a:
70:cc:33:c3:eb:ed:b0:3f:74:b4:6a:0c:db:ac:a9:
fa:37:08:4e:c1:70:17:1b:90:63:47:f0:07:54:d5:
ee:c6:04:db:70:80:cf:cf:86:e2:f5:7a:ba:94:78:
5e:15:de:36:03:83:2b:85:ad:18:a0:90:95:f3:d8:
46:b9:29:68:d5:7e:dd:73:62:a7:7f:6f:b5:70:94:
24:b5:71:01:1f:aa:5f:2d:64:e4:6b:ba:8f:1b:05:
2a:24:46:32:4a:48:5f:ce:47:4f:a0:15:ce:42:55:
e2:af:43:a9:5b:ce:ad:89:b4:85:63:2c:76:16:86:
35:68:2e:53:ad:5c:7c:96:15:ad:53:e4:46:60:d3:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:19:C8:7F:21:46:6B:DF:0A:51:3B:7B:B0:DE:8D:22:4F:1E:A7
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hMgZyH8hRmvfClE7e7DejSJPHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0d:46:7d:e1:b6:84:cb:b9:f9:7c:06:5f:d1:e2:9a:74:a6:
5f:f5:3c:66:0d:43:bb:53:77:97:22:ae:99:8a:12:1e:38:14:
4c:8c:3c:0d:8c:ae:60:0d:17:39:04:82:7e:c6:eb:d6:45:29:
7b:8f:19:86:11:0a:c8:15:c0:82:69:9e:a9:84:00:f0:1b:37:
08:15:d0:23:98:5b:c5:e4:c0:88:22:05:3c:09:d3:c1:f8:5b:
7a:4d:c7:51:dd:95:58:5b:de:2c:f5:a1:46:59:d7:f8:a7:d0:
b8:e5:d7:96:23:0f:ec:1a:8c:a6:c5:bc:5c:0c:52:f4:55:51:
89:a7:b6:a8:59:cc:18:74:d6:4e:1e:6c:53:ff:f5:94:a1:f5:
94:c6:3e:e7:08:65:ec:70:c9:72:a7:f3:46:ff:8a:1f:0e:8e:
ce:35:66:92:b5:9d:d1:ff:8b:58:07:71:9b:db:2c:de:4f:6b:
9c:e0:9f:ab:5d:e6:d7:3c:1c:51:7b:b8:77:19:1f:a6:e9:51:
4e:4a:df:1c:a6:1d:42:7f:ea:58:88:91:95:eb:e1:66:85:9c:
2b:83:12:00:a8:a7:b6:ba:c2:eb:75:14:c5:42:a3:e7:a4:b4:
1a:12:6f:87:93:86:4e:fc:7b:78:0c:a8:f5:97:b1:7e:61:3d:
07:28:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 13:14:44 2023 by rpki-client on console-fra.rpki-client.org