Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2915a1-4a6b-427f-9c45-4bf301d598e5/1/4L7rIgADEC96m7pzY9Jt-tMWRv0.roa
File: 4L7rIgADEC96m7pzY9Jt-tMWRv0.roa (raw, json)
Hash identifier: clUvr9hwbFeOtG+EQasFEXVVyBwo56w2T5uWnA0o82c=
Subject key identifier: E0:BE:EB:22:00:03:10:2F:7A:9B:BA:73:63:D2:6D:FA:D3:16:46:FD
Certificate issuer: /CN=7e99b674f5f41d37982203c95ac6c3f008ef88a4
Certificate serial: 01857139BB3A5BF88771CC3E663245AD2FDE
Authority key identifier: 7E:99:B6:74:F5:F4:1D:37:98:22:03:C9:5A:C6:C3:F0:08:EF:88:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpm2dPX0HTeYIgPJWsbD8AjviKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2915a1-4a6b-427f-9c45-4bf301d598e5/1/4L7rIgADEC96m7pzY9Jt-tMWRv0.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bb:3a:5b:f8:87:71:cc:3e:66:32:45:ad:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e99b674f5f41d37982203c95ac6c3f008ef88a4
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0beeb220003102f7a9bba7363d26dfad31646fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:78:87:10:fe:94:d6:d0:6d:6a:7d:42:d9:
ed:52:5f:f7:dd:78:9c:07:5c:91:03:29:9c:0d:d8:
be:87:44:35:34:48:5b:5c:2f:09:34:c2:e2:82:5b:
e7:1a:b6:f6:60:90:01:bd:7b:1b:61:b3:89:00:ba:
d3:db:d3:69:01:2d:36:c5:0e:46:cc:cf:23:74:52:
a6:e1:63:e9:48:50:57:3b:fe:da:08:cd:99:ee:81:
0c:e6:0b:a1:a9:b5:30:b1:58:06:30:2c:1a:a5:04:
94:d3:46:6c:b1:07:1a:b4:e7:e0:7c:67:3c:99:db:
5d:0d:6b:42:8c:3b:44:c7:07:f0:fd:95:af:ee:b8:
48:fa:c9:06:f9:90:0a:2a:7a:a0:97:d3:09:58:d1:
9f:20:e2:60:fe:de:74:6b:d3:a1:07:1d:bc:63:75:
66:b5:69:ea:eb:30:23:f5:4b:e6:04:95:d9:fc:67:
12:80:03:2a:73:59:a1:23:e1:f3:24:7f:19:3b:36:
78:e9:6f:fc:f8:e8:3d:99:19:45:43:b2:34:cb:db:
fc:ad:ba:cb:20:33:73:02:26:e1:92:2b:4e:de:6d:
e4:5b:e4:60:79:44:3d:e3:cf:8b:6f:16:f0:75:5d:
d8:6d:f1:e1:8a:04:6b:aa:a9:77:7a:78:0f:a8:cd:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:EB:22:00:03:10:2F:7A:9B:BA:73:63:D2:6D:FA:D3:16:46:FD
X509v3 Authority Key Identifier:
keyid:7E:99:B6:74:F5:F4:1D:37:98:22:03:C9:5A:C6:C3:F0:08:EF:88:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpm2dPX0HTeYIgPJWsbD8AjviKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2915a1-4a6b-427f-9c45-4bf301d598e5/1/4L7rIgADEC96m7pzY9Jt-tMWRv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2915a1-4a6b-427f-9c45-4bf301d598e5/1/fpm2dPX0HTeYIgPJWsbD8AjviKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b0:19:ac:53:80:51:7f:73:28:15:40:09:04:e9:d1:de:53:
88:0d:89:0c:f6:ec:bf:62:8b:de:53:6d:1b:d1:56:be:4c:d6:
1b:cd:3f:da:a7:fd:39:e6:30:b0:3e:3f:9f:2e:f6:4f:68:31:
31:1c:3e:2a:cb:9e:eb:15:ac:d1:f0:ae:3c:09:92:14:ed:3e:
2d:e0:c0:72:7a:14:7c:f0:9a:61:6c:82:7a:e6:d5:dd:18:2a:
73:3f:bc:7c:48:dd:95:5c:47:57:c5:1d:ca:c2:a8:7d:64:ee:
99:d4:db:2f:ab:fb:72:d1:c4:1f:df:2d:2a:79:19:ad:cd:8c:
2c:10:65:2b:0a:f2:9e:d7:56:43:bc:6c:61:2b:ce:15:7b:46:
24:0a:7d:b3:e3:29:b2:96:c6:f1:3e:91:da:be:1e:96:2f:9a:
89:32:fb:45:ba:a2:08:c1:48:c2:3c:8a:5b:52:70:2f:62:9e:
63:a0:ca:dd:9d:99:b5:4e:5e:b8:06:21:51:0b:57:e6:7b:00:
31:b3:1b:45:33:ce:e6:73:f4:2a:d8:16:3f:dd:0f:c9:0e:83:
aa:6b:6a:39:49:4f:95:4e:43:50:c4:5f:a2:9e:11:a9:11:35:
9e:ef:6a:80:b8:8c:04:54:5b:37:93:e6:97:84:cd:12:d7:b2:
3f:3d:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:27 2023 by rpki-client on console-fra.rpki-client.org