Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sbpcon2yYeG2ABOFwqC0dLgtxNk.roa
File: sbpcon2yYeG2ABOFwqC0dLgtxNk.roa (raw, json)
Hash identifier: C1/VqYSY0wTsDkaZB+VDfjQOyyX7GLrtUw3F5b/yeR8=
Subject key identifier: B1:BA:5C:A2:7D:B2:61:E1:B6:00:13:85:C2:A0:B4:74:B8:2D:C4:D9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018B1E43B5821497DA5A6B9F00E46ED0250E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sbpcon2yYeG2ABOFwqC0dLgtxNk.roa
Signing time: Wed 11 Oct 2023 10:23:55 +0000
ROA not before: Wed 11 Oct 2023 10:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 193.180.76.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:43:b5:82:14:97:da:5a:6b:9f:00:e4:6e:d0:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 11 10:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ba5ca27db261e1b6001385c2a0b474b82dc4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:b1:0f:b5:49:03:e8:87:22:89:d4:6a:62:
2e:d4:2f:ef:15:87:a1:2b:b4:64:ad:43:20:9d:fa:
4d:b6:ef:89:2f:e0:c8:0c:c2:17:53:28:ab:ee:f6:
6e:10:1c:b8:54:92:da:2c:eb:92:08:12:40:45:31:
1b:67:df:4a:7f:77:56:4f:26:c9:7d:00:84:32:0e:
ab:d4:68:d6:a3:b6:a9:48:0e:38:08:6e:75:f6:c7:
c4:91:a7:83:e9:e8:82:e8:15:75:84:d3:61:f4:c7:
cb:6e:8b:be:9a:11:91:e2:57:c0:10:18:9f:a7:87:
41:cd:fd:b5:66:ce:9f:d9:a3:d2:20:8f:11:9c:9e:
d9:8a:7f:66:01:6a:f0:76:40:4d:0e:7a:4c:cd:d0:
08:b8:6e:b6:65:e3:e8:58:03:fd:aa:55:c1:f5:34:
77:87:0d:93:ab:09:ac:27:b8:d7:96:40:1c:ba:4d:
09:9c:85:bc:65:95:c3:3f:94:a5:f7:7e:64:11:96:
8e:73:4f:3d:4b:97:97:8b:52:2a:5d:76:a7:0f:72:
73:58:0d:9f:65:96:72:a4:9e:39:4c:ef:de:da:39:
2b:d1:c9:f6:73:47:fa:ad:0a:b3:e2:e7:c7:cf:15:
59:33:23:11:af:a9:28:69:f7:ec:34:fd:6c:ca:94:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:5C:A2:7D:B2:61:E1:B6:00:13:85:C2:A0:B4:74:B8:2D:C4:D9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sbpcon2yYeG2ABOFwqC0dLgtxNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.76.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e0:20:88:a7:6f:2b:c1:ab:7b:cc:36:fb:4e:da:39:7a:80:
5e:2d:27:af:d1:8e:c9:a6:95:bb:a8:7d:76:79:33:30:10:bf:
46:20:d5:ff:63:05:8d:fe:5a:29:18:14:9b:c4:bd:ee:e0:75:
94:75:39:c8:d4:3c:be:05:57:4f:4a:4d:29:78:be:2e:f7:99:
1d:d1:2a:d6:8e:6f:e3:6f:22:b5:ec:ff:1c:77:62:28:13:50:
ed:cd:3c:50:0f:2e:85:bf:8f:85:fa:19:df:9b:55:2f:28:72:
13:d0:22:e9:6e:ae:5a:a5:42:43:ec:55:b5:4a:ca:05:11:68:
83:8a:5f:20:e5:b8:03:79:45:09:cf:38:e5:dd:74:25:09:86:
86:b7:2c:50:3d:0c:81:9d:f9:d3:34:09:42:bc:a1:ba:cf:71:
59:ff:47:a9:03:e3:b2:bc:4c:73:a5:06:7f:f3:b0:67:ae:93:
c3:dc:90:41:66:d2:22:55:17:4b:f9:43:8d:57:35:9d:d0:91:
6f:19:06:d8:3f:f9:e2:e0:b3:ec:a8:5d:25:d0:df:9e:d2:5f:
11:a6:fc:53:6b:82:ab:d2:37:56:de:c0:00:a0:01:c2:aa:10:
c1:5c:64:fa:d0:ee:40:d2:35:ea:7a:da:86:a7:38:f6:96:71:
9b:5f:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org