Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/K1hQj9G0LIQB7et79CUXv8ULOhI.roa
File: K1hQj9G0LIQB7et79CUXv8ULOhI.roa (raw, json)
Hash identifier: Gx3OkHlOMgbzXXy6zcYDa2DG7G++VjNjYKUc01h095Q=
Subject key identifier: 2B:58:50:8F:D1:B4:2C:84:01:ED:EB:7B:F4:25:17:BF:C5:0B:3A:12
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0185738FBFF15D760B2BE14785C360483906
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/K1hQj9G0LIQB7et79CUXv8ULOhI.roa
Signing time: Mon 02 Jan 2023 17:37:58 +0000
ROA not before: Mon 02 Jan 2023 17:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:bf:f1:5d:76:0b:2b:e1:47:85:c3:60:48:39:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 2 17:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b58508fd1b42c8401edeb7bf42517bfc50b3a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:23:3b:cd:e2:10:36:39:55:c4:9c:d8:97:
52:6a:bc:fb:88:22:a1:01:91:76:70:ec:d4:c5:9f:
64:27:2f:81:63:72:e1:8f:08:f2:cb:da:81:e1:18:
9a:08:a2:75:84:b9:c2:19:dd:8a:b8:65:f9:76:63:
6e:a7:21:9c:58:fe:91:7d:f1:6d:cf:96:40:0e:c5:
fd:e1:bd:27:6d:d6:8e:67:54:f7:03:df:86:b7:e0:
98:6f:7f:79:50:07:9b:de:17:4f:3d:95:a9:3e:fd:
4e:d1:35:60:d6:ec:d3:b4:d3:4e:54:4a:ae:26:9e:
9b:03:62:7d:f4:b0:d6:a9:86:c2:46:f3:15:13:9c:
fc:04:e4:95:ca:4f:a5:55:87:2c:30:d3:66:09:7e:
33:70:94:2a:88:5f:a7:98:d5:e7:d7:41:0d:cf:b3:
e5:ab:1f:43:da:51:37:e5:2e:b8:35:58:73:98:48:
60:b6:79:d1:d9:24:88:73:ed:26:e6:85:5b:9b:30:
11:e3:b0:04:3d:6c:2c:d1:a7:bb:2a:48:7b:38:11:
26:60:6a:c7:74:6a:22:05:c1:ca:72:62:6f:51:9e:
55:d1:46:d1:e9:35:77:be:d2:a2:4c:6e:94:fa:c1:
80:1d:44:f1:af:31:22:e2:d1:3c:7d:54:a4:08:96:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:50:8F:D1:B4:2C:84:01:ED:EB:7B:F4:25:17:BF:C5:0B:3A:12
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/K1hQj9G0LIQB7et79CUXv8ULOhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:55:b1:93:36:33:5d:d9:c4:75:2c:70:72:fb:2d:a8:fe:30:
f0:06:f4:83:74:03:77:84:d4:e2:af:1a:b4:18:e4:dd:71:d7:
84:81:8b:c9:22:dd:ed:14:0d:b3:40:56:d5:ae:ac:7d:6d:44:
c4:bc:26:02:1d:89:96:7c:96:fe:76:41:7f:84:c2:a3:64:7c:
78:23:00:63:c2:80:59:90:2d:97:4c:0e:da:85:52:b5:fe:9e:
94:85:3d:d5:53:5e:1f:46:f4:b0:5d:98:4c:46:69:9b:1a:8f:
10:e9:22:a1:99:05:a2:4d:8a:a3:4c:8f:37:1d:57:84:b5:fb:
9f:ae:b1:82:8d:cc:f3:46:18:81:66:81:2e:87:bf:20:f9:92:
0b:9d:b3:39:0a:5d:61:79:75:de:70:cd:03:6a:a7:c3:1a:87:
f1:4b:1e:f7:f4:d6:69:ba:3f:e8:99:44:b7:f4:3b:d8:1d:db:
76:24:08:36:f8:39:bf:2a:35:d7:12:c8:b5:d3:1d:ac:0b:ed:
59:aa:fe:7d:ae:17:71:1c:cd:9b:ba:9b:4e:fb:17:1c:b9:e5:
25:ad:02:4e:d9:7f:38:40:e4:15:13:be:29:8e:2f:44:ad:58:
2c:84:ba:2d:cb:5f:6f:bb:11:54:44:2a:f1:02:5f:c8:11:db:
06:62:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:16 2024 by rpki-client on console-fra.rpki-client.org