Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/MBNhz1IEWsQi0Qk_FwgJ3Q4djVA.roa
File: MBNhz1IEWsQi0Qk_FwgJ3Q4djVA.roa (raw, json)
Hash identifier: y2vO98CYGgnVrG85jb0VBvx1zZd5z4PKAxeS0aA5638=
Subject key identifier: 30:13:61:CF:52:04:5A:C4:22:D1:09:3F:17:08:09:DD:0E:1D:8D:50
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01856B8A001FB4F1F09AC5B2F64F608BEDAF
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/MBNhz1IEWsQi0Qk_FwgJ3Q4djVA.roa
Signing time: Sun 01 Jan 2023 04:14:44 +0000
ROA not before: Sun 01 Jan 2023 04:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:00:1f:b4:f1:f0:9a:c5:b2:f6:4f:60:8b:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 1 04:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=301361cf52045ac422d1093f170809dd0e1d8d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:aa:2c:f1:87:e8:15:22:97:42:cb:f2:dc:
9c:8f:a5:2e:5d:2c:65:42:92:d8:d6:4a:02:69:c6:
8e:a9:54:b8:be:8b:4a:a9:20:95:0f:10:79:50:3c:
41:30:46:cd:1e:91:6e:9b:5f:71:46:c5:79:f7:8a:
c6:6e:3a:e7:20:ed:e5:bb:ee:0c:64:fe:de:a6:6e:
ee:32:60:ba:20:f0:01:e3:5d:b6:d9:0f:9c:37:d8:
a6:73:c9:6a:8c:95:84:95:f4:8d:ba:cd:93:53:aa:
57:79:69:88:c7:3e:bf:14:17:19:d7:2e:91:ff:61:
87:a3:35:06:ad:08:cd:4a:5a:5e:e8:1a:03:57:60:
62:cc:84:c6:bd:1f:48:74:a0:2d:a2:ca:43:84:7e:
0b:61:bd:45:29:f7:eb:b7:91:7d:cf:2b:a0:b4:bd:
52:ad:82:30:e2:47:1b:72:8c:f2:75:05:db:44:d6:
6e:e8:cf:34:90:e5:83:28:21:27:12:a8:98:81:93:
84:21:c9:95:65:1a:c1:7c:19:8b:e3:82:1f:9e:80:
65:ad:2e:4e:2a:18:ee:e1:79:a9:21:c7:a9:fb:71:
63:fe:bd:98:87:17:7e:87:43:da:82:76:d7:d9:e5:
f2:fb:61:a0:67:7b:38:55:36:2b:29:32:24:70:8b:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:61:CF:52:04:5A:C4:22:D1:09:3F:17:08:09:DD:0E:1D:8D:50
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/MBNhz1IEWsQi0Qk_FwgJ3Q4djVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:7c:58:15:89:f4:e7:33:6a:1e:a4:0a:2e:ba:b1:90:33:
32:f9:af:1c:e9:a1:e2:5d:a1:af:05:f2:8c:d1:f2:6c:e2:b1:
b1:34:6e:5a:c8:41:9a:e0:26:8d:fe:2d:17:e9:d7:15:6d:a1:
4c:12:6a:42:ce:10:55:c6:35:d1:1f:c6:aa:87:e6:34:8c:c7:
40:43:12:46:de:1f:c2:57:1e:61:e0:e6:cf:77:23:e8:5f:2c:
6a:23:44:21:2c:09:a6:b3:e8:d3:16:d8:7a:0e:9f:8c:de:fc:
38:92:9c:6e:2a:29:71:51:4d:85:2e:2a:66:1b:d0:7f:d5:aa:
df:33:ed:ec:87:0f:e0:07:96:cf:98:4f:23:8c:95:ef:d2:40:
fe:47:d7:e5:e4:a2:c3:e4:6c:24:2f:0a:0b:90:c1:98:f2:54:
0a:b1:0a:a4:62:92:ab:74:f4:a1:5f:3e:5d:34:7c:8a:85:91:
73:dd:fb:b5:6e:41:9b:90:fc:58:c5:ea:c0:d9:af:cc:f1:f3:
7e:b1:48:f0:f8:cc:c1:4e:6f:a7:80:e3:6e:af:94:9a:33:8c:
85:d5:37:b6:aa:59:7a:07:51:9e:7c:eb:19:8f:ae:a2:8a:43:
b0:76:03:68:9f:62:db:9a:aa:30:de:28:fb:31:f9:31:0a:21:
8a:ad:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:47 2024 by rpki-client on console-ams.rpki-client.org