Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa
File: qJyE6N9IbvZh-L_8KgwxIBNHebY.roa (raw, json)
Hash identifier: G3Ewtg75kP89et/2H0K4b7vK1skaRUJ6SQ8Mqn3A0HA=
Subject key identifier: A8:9C:84:E8:DF:48:6E:F6:61:F8:BF:FC:2A:0C:31:20:13:47:79:B6
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 01856B89FF34D9409129852C7A5F31DBE6B8
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa
Signing time: Sun 01 Jan 2023 04:14:43 +0000
ROA not before: Sun 01 Jan 2023 04:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:89:ff:34:d9:40:91:29:85:2c:7a:5f:31:db:e6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 1 04:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89c84e8df486ef661f8bffc2a0c3120134779b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:e4:9d:d5:18:d1:69:43:93:93:2d:38:d7:
71:56:00:82:14:aa:d7:2f:e4:cf:c8:90:c0:92:55:
fb:4e:f6:c3:8f:c4:27:3c:f3:9e:a5:40:1e:0b:34:
8d:f6:a5:f3:5e:9b:a9:13:69:81:2f:4e:d1:06:b0:
7e:45:b3:f6:16:c0:cc:23:6f:67:7e:bb:17:70:14:
29:cd:78:3f:98:13:f5:13:8b:c0:c4:a1:d0:cf:99:
26:40:1d:6f:e3:7c:d0:b0:c7:2b:73:e6:11:65:b9:
6a:3b:09:96:38:41:77:6d:d5:b4:80:36:fd:c9:c5:
37:39:74:bd:80:9c:7a:7b:c0:0d:15:f2:e8:b2:9d:
49:a9:09:a4:31:d3:6b:dc:a7:0c:d6:77:2e:42:d2:
11:4a:07:e7:32:f4:28:df:14:3a:76:7c:70:3b:5f:
42:f1:c8:1f:73:c8:d5:70:c9:60:91:3d:9a:7e:1c:
92:c7:c1:e4:c9:2a:82:8f:38:ca:50:f0:38:1f:90:
a7:33:d7:32:7b:d0:81:16:36:42:31:b3:2e:98:85:
b4:12:07:53:3c:24:ce:50:00:5c:4e:50:9c:60:4d:
36:75:31:10:dd:d3:04:a1:28:55:21:4c:ba:c6:e0:
c1:ae:b2:c9:f7:ea:b6:72:11:d8:8e:e7:ab:f1:53:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:84:E8:DF:48:6E:F6:61:F8:BF:FC:2A:0C:31:20:13:47:79:B6
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:08:3a:19:e3:6c:aa:00:19:33:b8:53:cb:d2:bb:7d:40:b5:
d9:94:d5:e5:19:95:7e:2d:9b:44:1e:83:d3:86:25:26:1a:35:
98:b4:41:45:3e:c4:24:6c:10:27:5a:58:58:92:f8:ba:ae:e0:
01:e9:2b:80:99:c6:ca:fe:8f:d8:ee:04:20:49:b8:58:69:ef:
53:e9:6f:c8:71:7d:c9:26:aa:b3:8d:42:25:4f:e3:35:b5:38:
51:11:ec:e0:1a:60:63:2b:13:52:b7:69:a6:c5:6b:59:f2:1b:
26:a6:d6:1e:92:e2:8b:5d:80:2f:62:1a:b0:d5:a4:59:d4:f1:
46:fb:01:1c:04:1f:3a:50:1b:d5:d0:0a:f4:02:38:40:d6:a8:
55:28:c1:ef:3d:b8:bc:f3:5f:7b:d8:ae:eb:42:97:5c:c2:1a:
8e:43:c0:67:0c:7c:8d:73:c4:8c:cc:df:e4:4f:a3:83:ea:4c:
8f:49:88:4d:b2:a1:14:67:73:ab:16:3f:e1:87:ed:13:2b:72:
0f:d1:58:bb:a2:6b:66:d0:76:c6:2e:34:91:48:71:27:c5:02:
01:8f:e5:9b:d9:50:c5:f2:ef:64:1e:f7:3e:08:35:a3:3f:65:
31:60:62:40:ae:e6:80:d0:b8:af:9b:00:85:ed:1b:f3:63:ba:
92:45:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:49 2024 by rpki-client on console-fra.rpki-client.org