Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/G9ZuVzUpPia77izzWb75oc5j9pE.roa
File: G9ZuVzUpPia77izzWb75oc5j9pE.roa (raw, json)
Hash identifier: Q+zYJIXFpWypfnx3YQVYbgBu9wrnbIYd/vUPl2fGbR8=
Subject key identifier: 1B:D6:6E:57:35:29:3E:26:BB:EE:2C:F3:59:BE:F9:A1:CE:63:F6:91
Certificate issuer: /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial: 01856B49F73E62DBEFD74CC8462963873702
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/G9ZuVzUpPia77izzWb75oc5j9pE.roa
Signing time: Sun 01 Jan 2023 03:04:47 +0000
ROA not before: Sun 01 Jan 2023 03:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50508
IP address blocks: 193.105.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:49:f7:3e:62:db:ef:d7:4c:c8:46:29:63:87:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Validity
Not Before: Jan 1 03:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd66e5735293e26bbee2cf359bef9a1ce63f691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:ef:2c:59:5e:60:93:54:8f:80:dd:ec:6a:
84:d2:30:25:3c:a0:aa:41:d2:52:92:6a:aa:75:30:
a5:57:e4:15:45:6e:08:10:fb:cb:6a:fe:92:ca:9e:
c1:2b:2c:f5:ff:64:e8:61:68:dd:43:1b:e1:7d:28:
4b:5e:b8:df:19:6d:cc:91:88:1e:74:96:40:17:fb:
be:62:31:eb:48:6b:97:f0:85:8b:af:cf:60:9a:4a:
40:6d:65:b2:9c:59:bf:95:94:7c:a1:82:c5:be:a8:
c4:0d:79:8f:67:de:5f:da:3f:22:94:16:e6:59:a0:
c1:70:10:16:a9:13:a1:63:e0:7a:cc:bc:39:10:43:
a8:94:56:3e:a2:2b:51:32:3b:f0:9c:2f:12:7b:55:
64:d0:4e:bd:7f:51:85:f6:03:4d:71:2d:38:97:76:
68:ec:1e:fa:5d:5d:22:75:86:4e:97:6f:bd:6b:6f:
23:e0:be:6d:bb:4d:ef:eb:37:1a:e3:b1:7f:20:67:
92:b2:08:08:2c:45:f3:20:90:36:1c:19:86:53:c9:
0e:ef:d8:01:da:6a:68:d4:66:72:b6:6f:19:e1:2b:
55:5e:43:8b:9a:03:e8:7a:f6:07:30:fb:0d:a7:d0:
82:79:73:47:ae:55:62:04:c8:80:f2:71:25:b3:c5:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:6E:57:35:29:3E:26:BB:EE:2C:F3:59:BE:F9:A1:CE:63:F6:91
X509v3 Authority Key Identifier:
keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/G9ZuVzUpPia77izzWb75oc5j9pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.87.0/24
Signature Algorithm: sha256WithRSAEncryption
24:30:35:c5:e7:03:25:ac:04:13:69:f9:40:ae:bc:49:37:61:
06:f0:b7:e6:87:17:63:5a:69:dd:96:49:15:83:eb:2f:6b:38:
e1:ea:27:70:b1:e2:9b:d2:8b:4e:0b:23:dd:8c:cb:2b:bb:cd:
ea:d2:90:81:28:44:ee:50:2c:b7:a2:e6:b8:ca:0c:b5:80:59:
24:c1:d8:f9:8e:82:b9:7f:cc:82:7e:9b:99:5e:8f:46:7d:d2:
27:e8:cd:d8:fd:a0:fc:0f:c0:a3:f0:c9:a2:14:58:45:6c:4c:
6b:01:e6:d1:1e:3d:32:72:89:b0:7b:93:ab:51:46:f2:3b:0f:
3d:ba:5b:6e:fe:95:9b:6e:e3:f1:43:86:68:54:47:e5:a2:91:
d1:af:1b:0f:c6:54:fc:66:e1:90:07:1b:d3:bd:1b:71:c6:0b:
ca:62:0b:c3:1e:1c:9e:96:68:cc:2b:52:e2:bd:5c:64:08:c9:
cc:95:5a:58:b1:98:d8:bc:30:f7:aa:a0:60:81:0d:26:28:be:
88:89:56:e0:7b:00:6c:57:d8:11:68:9c:0d:89:75:99:0b:e0:
e1:77:19:32:5d:53:ea:cd:f7:bd:dd:5c:33:66:61:bc:e0:4f:
7c:4a:81:62:e3:4f:f2:c6:24:44:b7:3d:66:f4:fb:61:97:ac:
fb:c9:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:41 2024 by rpki-client on console-fra.rpki-client.org