Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/CF613LPVqwTxjZ1lJNbxU3CZtcA.roa
File: CF613LPVqwTxjZ1lJNbxU3CZtcA.roa (raw, json)
Hash identifier: Xa+GX6o4uFviFHe0kogObX6Pf4T2F6XhxUdoqlCQPmU=
Subject key identifier: 08:5E:B5:DC:B3:D5:AB:04:F1:8D:9D:65:24:D6:F1:53:70:99:B5:C0
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 01856DD41E87961CEF59B3157BA0CCF35E41
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/CF613LPVqwTxjZ1lJNbxU3CZtcA.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202460
IP address blocks: 193.57.72.0/24 maxlen: 24
193.57.72.0/22 maxlen: 22
193.57.73.0/24 maxlen: 24
193.57.74.0/24 maxlen: 24
193.57.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:1e:87:96:1c:ef:59:b3:15:7b:a0:cc:f3:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085eb5dcb3d5ab04f18d9d6524d6f1537099b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:33:e1:fb:77:c6:c9:22:f1:1a:ef:29:30:
cd:9d:90:7c:db:92:29:e4:74:77:71:94:98:07:1a:
69:26:88:6b:df:a3:bf:ce:76:0e:51:53:f7:49:55:
74:03:a8:ba:f3:d7:14:33:1a:22:d9:72:f7:b5:aa:
69:0d:86:15:5d:0e:4c:d7:49:36:83:f4:56:c0:3b:
de:88:21:43:09:6d:fe:44:cb:49:01:d0:ed:23:14:
5a:db:32:28:69:c9:10:87:d0:59:ff:8f:eb:c1:ee:
11:eb:02:f7:e1:18:8d:35:63:33:85:1d:48:6b:a2:
37:3c:aa:8e:bd:ca:95:e0:9d:2f:93:6c:b7:48:ae:
2e:97:b6:95:c6:bc:91:96:9a:7d:aa:ee:61:7e:6a:
ac:4b:f1:28:b1:92:03:05:4d:3f:7a:d3:34:36:d8:
75:9c:04:fe:be:94:e7:08:33:44:94:5c:21:83:c2:
5f:e4:9b:29:e3:eb:70:0b:6c:ed:08:5c:c1:8e:96:
db:b7:80:f4:5b:47:d4:e3:23:3b:34:5c:2e:24:1f:
98:e4:8f:1b:14:27:fa:0e:9d:f5:17:06:f7:ef:97:
e6:da:ef:17:fd:e4:6c:10:82:86:84:c4:2d:0e:4e:
b8:6b:e3:1d:53:6e:32:39:98:dd:76:27:39:da:2f:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:B5:DC:B3:D5:AB:04:F1:8D:9D:65:24:D6:F1:53:70:99:B5:C0
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/CF613LPVqwTxjZ1lJNbxU3CZtcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
62:1e:18:60:f0:59:6a:cd:64:fc:34:b6:a0:31:3e:d5:66:27:
83:7b:29:ab:ad:03:d9:2e:c3:ad:e3:83:ef:5e:ad:b5:12:e0:
a6:48:0c:c3:97:0d:b2:6f:58:b4:03:5e:f0:e7:5c:38:f6:1b:
5c:ee:96:1a:cf:a4:e4:ad:60:bd:e0:f1:74:83:9b:e9:9f:2b:
2e:83:fa:3b:99:8c:3d:9b:b2:5b:bb:89:15:f3:f8:f9:02:f2:
1f:f2:1a:62:91:aa:3f:92:f5:b8:7c:11:46:61:f6:af:b4:b0:
b2:6b:7f:e6:4b:6a:ba:64:f8:f9:fd:ef:cd:0a:09:a1:e7:c8:
03:9f:b9:8e:3c:b9:8c:3a:7d:3c:e1:57:75:c9:15:de:20:cf:
3a:92:1a:8f:57:01:28:17:90:e9:c2:7c:e6:42:fc:a3:f8:8e:
b5:ae:e3:ec:15:30:c4:9f:5f:89:d9:b7:17:e8:c8:bb:53:3b:
19:41:a6:5d:eb:39:79:e5:08:4a:e0:ec:34:c1:68:07:40:63:
b4:44:5c:a0:26:76:3d:84:f7:e5:d0:d0:08:95:51:fe:1c:4c:
17:35:49:c1:16:df:d3:6c:ba:49:a1:bd:a8:d2:a7:83:ee:5b:
bd:52:69:f9:fa:b6:5b:8c:a7:9b:6b:14:9c:fe:e9:dd:5b:32:
af:da:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:21 2024 by rpki-client on console-fra.rpki-client.org