Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/s_u_VaM0iKVWapV-yplfW5Dh4HQ.roa
File: s_u_VaM0iKVWapV-yplfW5Dh4HQ.roa (raw, json)
Hash identifier: x+zXGwV7XZU77N0DZW/WX7fYBCIsIQ9WaNB/KdpRMlE=
Subject key identifier: B3:FB:BF:55:A3:34:88:A5:56:6A:95:7E:CA:99:5F:5B:90:E1:E0:74
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB09B6480CE4FB04B7B16A8E5BBD3A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/s_u_VaM0iKVWapV-yplfW5Dh4HQ.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205332
IP address blocks: 193.180.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:09:b6:48:0c:e4:fb:04:b7:b1:6a:8e:5b:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3fbbf55a33488a5566a957eca995f5b90e1e074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:0e:d8:fd:55:25:0f:2d:5e:38:d2:cd:9c:
b5:87:bc:23:f2:62:1b:1c:66:4d:24:f4:af:7d:69:
92:1f:1e:a0:ab:6b:8d:d4:be:3b:69:7a:0a:80:46:
f3:f4:87:3c:5d:7d:7e:5f:f0:03:cb:62:fd:73:59:
86:c0:83:44:a3:b3:e8:17:44:c0:a3:3f:56:76:dc:
7e:cc:b6:48:67:65:5a:3d:3f:90:c2:1d:92:a4:34:
df:a5:a0:a0:e6:6a:a8:53:02:15:63:85:9c:0f:c6:
39:19:58:b3:bb:0d:13:27:81:dd:d4:3e:09:71:50:
91:79:a0:69:b3:44:40:e4:a2:10:a7:47:48:13:fd:
cb:e8:26:8c:7e:52:df:96:44:ea:50:17:3c:54:2a:
19:c8:dc:d5:39:7f:c8:81:46:4b:51:f3:15:84:a6:
fe:32:6f:cf:84:9e:24:9b:78:cf:55:e9:1b:aa:6a:
8c:35:db:cb:7d:3d:00:87:33:89:51:35:b3:b2:0b:
a3:e4:37:43:c6:0d:bf:59:65:ca:7a:e5:dc:81:fd:
9d:fb:ec:df:7a:a7:91:e6:d6:e5:52:09:41:7b:09:
21:f6:65:85:b1:9d:7a:c3:59:4a:4c:94:3e:1d:d8:
ad:89:3b:a7:c0:d7:98:50:80:7f:37:7a:c0:98:de:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:BF:55:A3:34:88:A5:56:6A:95:7E:CA:99:5F:5B:90:E1:E0:74
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/s_u_VaM0iKVWapV-yplfW5Dh4HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.93.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d9:51:ff:fc:ea:59:63:ee:a7:40:b3:30:7c:c4:18:bd:e3:
ab:ff:22:01:ed:97:e7:f0:08:1e:7a:c0:e6:25:92:8f:8e:4e:
80:de:c9:a7:af:67:22:77:21:ce:08:1d:33:29:c8:8f:21:43:
9a:7b:e6:f8:b1:0e:76:c0:3e:ce:d3:bb:19:f7:72:07:b2:ba:
c3:d5:e6:61:e3:25:67:54:93:f7:bc:16:66:57:a4:b8:a3:17:
9a:49:d2:f2:ba:55:4e:4b:e3:5e:d2:0c:5b:cf:44:9c:17:cc:
a4:b6:2b:f6:0c:3a:c9:1e:b4:2a:de:b8:9d:73:d6:20:c5:80:
53:3e:ae:55:65:7a:46:4d:a8:0c:85:d7:42:c5:5b:0d:92:db:
f5:fe:82:00:58:07:55:83:e1:34:ae:15:d1:bf:3a:9b:59:db:
c3:31:41:79:d3:54:fc:8c:ee:ad:38:0f:90:05:17:24:52:16:
f1:47:b6:2a:fc:fa:bd:75:cc:79:09:f9:35:0f:6d:56:8c:47:
76:34:a2:58:2c:98:ad:fd:97:c8:82:36:bf:87:74:5a:b6:1a:
73:8b:e1:c8:6f:b0:b3:bd:56:22:78:ca:47:fd:ee:32:ed:ce:
4e:55:d9:f4:d6:b9:94:f8:83:5b:6d:13:32:be:74:6f:a4:ca:
58:b9:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org