Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/chMZWXtocOX5mSIqHi9VhpQHf2s.roa
File: chMZWXtocOX5mSIqHi9VhpQHf2s.roa (raw, json)
Hash identifier: GEWz15bSjIhezCcGOJuqNzoYFoBpMLPNq6WMirb+gRo=
Subject key identifier: 72:13:19:59:7B:68:70:E5:F9:99:22:2A:1E:2F:55:86:94:07:7F:6B
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 01857295DD76CC2FA5555534FF782257C69E
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/chMZWXtocOX5mSIqHi9VhpQHf2s.roa
Signing time: Mon 02 Jan 2023 13:05:02 +0000
ROA not before: Mon 02 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12993
IP address blocks: 193.105.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:dd:76:cc:2f:a5:55:55:34:ff:78:22:57:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jan 2 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=721319597b6870e5f999222a1e2f558694077f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:cc:81:5c:a2:9c:ee:1e:46:63:c3:6a:d7:
7f:88:c6:8d:80:c1:7c:cc:5f:d3:9e:fe:fc:6e:e7:
1e:e2:01:95:d4:2c:38:60:ae:8c:03:a9:53:fe:ef:
6a:13:3d:6e:ca:cd:71:ff:b6:68:9f:99:7c:31:0e:
4b:45:04:ca:dc:be:b9:40:12:17:e2:75:36:b4:36:
e2:71:f4:cb:a0:8c:98:19:48:0e:81:0d:f6:00:c7:
3a:bb:a1:c4:80:98:05:db:89:2a:99:2b:9a:9d:e1:
61:ee:44:99:bb:d2:ca:1c:e8:e6:78:dd:45:f2:6d:
f6:2b:5d:8d:e9:d2:3f:c7:17:85:52:16:79:d2:f2:
52:a1:4c:8a:10:9b:8d:9b:46:76:a8:c9:1c:af:7e:
f2:ab:12:52:16:04:3d:16:e3:e3:b8:74:33:40:cc:
a6:52:04:94:5a:69:b8:54:2f:26:fe:8e:73:3d:cd:
d0:9e:56:1c:e9:77:c9:fa:a5:c3:d6:06:08:8d:d5:
d3:4a:93:00:80:cb:05:1e:61:f6:3b:fb:91:f2:4e:
08:fa:8f:46:70:0a:0c:fd:41:f7:3e:49:75:a9:f7:
77:9d:39:6f:d6:78:8c:92:cc:4c:02:54:5c:c6:f7:
16:08:55:93:63:43:f3:86:29:f7:39:f0:2a:f4:97:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:19:59:7B:68:70:E5:F9:99:22:2A:1E:2F:55:86:94:07:7F:6B
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/chMZWXtocOX5mSIqHi9VhpQHf2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.104.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8e:07:95:79:aa:38:b7:b8:1d:f7:c7:67:c5:45:5a:89:4d:
3d:ca:17:15:6c:27:85:cd:9a:87:4e:d7:e2:f7:d4:44:a4:62:
39:02:9d:2e:87:af:0a:60:6f:21:60:57:cd:aa:53:76:e8:5a:
63:58:c7:a7:33:00:2a:29:33:19:29:c7:f6:b9:a2:4f:20:7f:
ff:d7:ed:e4:f3:fe:0a:35:07:d7:3a:9e:83:89:ff:30:b0:0a:
0d:bc:49:82:49:68:f4:db:f7:a2:c3:4d:5d:77:c8:45:75:82:
c2:4c:af:ff:3d:7a:fd:eb:80:d0:d6:b3:8b:52:51:ef:72:58:
9e:a3:02:08:5d:e4:15:bb:93:0c:ca:c7:a8:7e:7d:e6:13:06:
cd:dd:2d:c7:dd:24:ad:85:20:92:79:88:2c:54:f7:b1:aa:3a:
d8:cc:56:ec:af:5a:d7:b2:34:a0:38:81:ae:9e:8b:d6:d4:c0:
6c:44:76:2b:21:04:3d:e0:c4:cf:ef:85:94:42:d2:0b:7d:a6:
43:73:52:34:6b:25:07:3c:33:c5:b9:0a:b3:77:da:dd:22:84:
94:74:bd:db:29:51:11:af:be:d5:36:5d:ae:60:b5:d9:d6:f3:
0e:68:38:dc:0a:41:f3:c8:80:ec:bf:1a:a3:ef:9e:eb:f6:12:
31:e7:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:35 2024 by rpki-client on console-fra.rpki-client.org