Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/a7w35HDI5kHLXMYHp6YpJv9NzKc.roa
File: a7w35HDI5kHLXMYHp6YpJv9NzKc.roa (raw, json)
Hash identifier: /AtA+ssqwaAdsKMhe3dYFEU6oOEg6D3kk8uI+LAC53A=
Subject key identifier: 6B:BC:37:E4:70:C8:E6:41:CB:5C:C6:07:A7:A6:29:26:FF:4D:CC:A7
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018C93D7BC83E8EC2670F0A9F03D64C1758B
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/a7w35HDI5kHLXMYHp6YpJv9NzKc.roa
Signing time: Fri 22 Dec 2023 23:23:58 +0000
ROA not before: Fri 22 Dec 2023 23:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:93:d7:bc:83:e8:ec:26:70:f0:a9:f0:3d:64:c1:75:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Dec 22 23:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bbc37e470c8e641cb5cc607a7a62926ff4dcca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:14:66:62:6f:bd:24:58:04:3c:11:d1:0d:
4d:78:fa:b5:d6:d7:73:14:15:f3:77:18:21:d7:2e:
f7:8b:08:0e:4d:47:69:07:48:c9:c6:2c:71:cb:15:
1a:08:0f:4e:c9:cd:79:42:05:af:84:86:93:f7:82:
dd:e7:5c:75:1f:27:cb:fe:1d:60:c0:29:a4:95:fa:
05:ac:2c:77:ca:ff:c0:ee:18:86:d2:52:23:84:91:
b0:04:e3:a7:b6:dc:89:39:6c:e2:c3:ad:88:f3:f4:
58:0f:60:13:91:7b:0c:d1:36:81:df:43:6f:3c:85:
05:e8:48:b5:45:d8:07:e5:ee:09:4d:ec:c7:f7:bc:
93:58:f1:ce:28:e2:6b:7d:e4:4c:89:da:44:7e:f4:
f7:25:13:1b:81:7f:a6:6c:91:59:25:8b:3f:67:4d:
81:f5:4b:9f:6e:e0:f1:38:38:ff:f4:53:bb:56:59:
2b:be:f2:26:2b:8d:40:fa:f3:e3:72:d5:fd:c4:1f:
79:18:9f:e0:46:a2:6e:a3:a3:de:0b:82:ea:20:57:
0b:e9:bf:40:b7:db:68:19:18:bc:b3:66:5f:1e:22:
30:83:b3:72:5f:96:94:0d:7d:7c:13:e0:52:52:cc:
ee:bb:bd:bd:8d:88:8e:f6:3e:44:78:0d:4a:a7:47:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:37:E4:70:C8:E6:41:CB:5C:C6:07:A7:A6:29:26:FF:4D:CC:A7
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/a7w35HDI5kHLXMYHp6YpJv9NzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0-193.26.22.255
Signature Algorithm: sha256WithRSAEncryption
6a:81:c9:eb:e7:f8:48:d4:2e:9b:74:2c:a8:f6:2c:17:18:9f:
80:59:90:43:05:ff:9b:58:68:08:2b:20:66:ad:2f:e1:12:7c:
c3:41:ac:c4:e3:34:3b:22:1f:e7:81:65:c0:5f:51:51:43:10:
be:c3:15:96:de:53:0b:0a:df:a4:12:13:24:16:40:cf:3a:b8:
86:08:1a:39:7d:28:9d:77:f9:5a:2a:30:77:89:89:af:13:2b:
ae:a4:68:ea:60:78:9d:07:57:54:7a:8e:b9:65:7f:89:c5:dd:
a6:33:ad:6f:8d:e4:21:bd:5b:1c:b2:25:63:28:a8:e1:bf:a7:
63:46:c2:80:69:01:38:c0:89:f5:26:12:1b:06:0c:87:e3:00:
f0:7c:02:e6:e9:26:40:b0:58:88:e4:51:9d:b6:de:a1:c6:b1:
42:27:fe:86:df:97:49:2f:22:cf:12:3f:b0:17:6d:85:cf:4e:
62:fa:8e:53:5b:00:9f:2e:ef:a0:28:97:4f:71:fd:f7:b6:27:
f9:f3:e1:d6:6b:ba:a3:02:6b:0a:7b:d0:37:be:17:92:de:6d:
af:8c:a7:38:97:8d:ac:4f:38:87:f9:e2:f9:53:10:17:59:8a:
f3:88:00:a1:1d:a8:34:40:66:3c:80:21:08:bc:b7:eb:17:fc:
1d:19:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:43 2024 by rpki-client on console-ams.rpki-client.org