Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/9l5ukERPnJm4Kz4H7rzdcj_L2VA.roa
File: 9l5ukERPnJm4Kz4H7rzdcj_L2VA.roa (raw, json)
Hash identifier: byFOStu+jwKMeqEQjbKM3VlSgMC1ua85OGl4TC64L2A=
Subject key identifier: F6:5E:6E:90:44:4F:9C:99:B8:2B:3E:07:EE:BC:DD:72:3F:CB:D9:50
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01856E01D83D35E7DCD8E18A7BD94F1C176D
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/9l5ukERPnJm4Kz4H7rzdcj_L2VA.roa
Signing time: Sun 01 Jan 2023 15:44:52 +0000
ROA not before: Sun 01 Jan 2023 15:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42814
IP address blocks: 193.8.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d8:3d:35:e7:dc:d8:e1:8a:7b:d9:4f:1c:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jan 1 15:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65e6e90444f9c99b82b3e07eebcdd723fcbd950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:b5:5a:fb:e9:93:1d:b6:a5:1a:98:22:c4:
c0:6e:cb:03:7e:ca:bd:da:45:f8:d5:1a:21:08:46:
68:60:9b:cb:9a:bb:d8:29:17:df:f9:14:54:73:d8:
4d:35:f1:6c:a4:15:20:94:06:20:ef:58:ed:4a:7a:
c1:29:8e:88:66:bc:1f:6c:3d:d6:8e:e0:0b:71:6a:
12:42:93:58:62:47:d0:22:89:e9:93:af:4a:57:bf:
b1:8f:9a:45:53:71:0d:25:2d:43:34:28:ce:bf:3f:
be:6c:37:a0:36:fd:9f:4b:33:13:2f:07:e8:65:f1:
75:7a:c0:72:2e:4c:40:57:19:20:ad:29:c3:02:e8:
7a:c7:2b:f1:2c:7b:5e:dd:be:59:06:f1:c8:0b:33:
8b:d3:87:69:8f:fd:1f:36:1a:05:41:fb:27:64:c4:
43:b5:18:17:5d:95:14:54:b0:62:30:1f:6e:06:2a:
e3:d4:09:93:2f:02:d7:7d:73:a5:6f:82:68:49:bc:
1f:07:70:c3:58:fc:09:7e:f0:bf:d5:47:b2:1d:7c:
3f:4b:6e:1b:58:9a:de:02:65:ec:e6:af:65:0c:8f:
ab:d8:8d:0f:73:79:57:c6:84:19:91:82:a0:6a:23:
8b:0b:37:2b:a2:26:01:9d:f6:f7:b3:1c:6f:51:2e:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:6E:90:44:4F:9C:99:B8:2B:3E:07:EE:BC:DD:72:3F:CB:D9:50
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/9l5ukERPnJm4Kz4H7rzdcj_L2VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.248.0/24
Signature Algorithm: sha256WithRSAEncryption
63:88:26:fd:25:4d:9b:4a:99:ff:05:1e:05:70:19:e0:41:2d:
df:da:8a:d7:3b:3e:e3:b9:c6:89:e2:9c:14:9a:c5:7d:8c:b8:
e4:19:f8:0d:58:fd:ca:17:f8:f5:76:0a:41:da:87:ba:a2:3f:
d9:b1:dd:9d:ac:fd:d0:c5:b4:24:ac:6a:ac:cb:a2:e2:48:28:
e5:59:79:ad:cd:3f:1b:d7:fe:a3:6c:df:a9:89:6f:bc:ad:d0:
5c:5d:07:a2:0c:54:39:08:2b:c8:64:a0:83:38:e7:30:d1:ea:
91:4e:71:9f:23:1d:54:6e:a1:4c:62:61:a3:8b:cf:49:2c:3b:
89:7e:63:36:f0:71:7c:ab:53:be:76:e9:e4:ff:ed:83:a3:0d:
41:61:1b:9d:cd:7b:d1:13:21:98:bb:73:02:2c:40:4c:4a:0d:
25:d7:b0:7a:6d:d2:56:5b:82:35:5a:bf:d3:f1:af:13:1d:e5:
b9:11:a9:40:a5:45:97:6e:8a:ce:7e:ff:e1:10:02:5e:16:70:
5a:c9:74:e4:ca:c9:e7:37:3d:3d:1c:d1:d1:9a:ef:3f:b7:54:
d2:dd:f8:13:14:04:42:64:d4:20:d9:0f:0b:26:ce:5e:3e:e8:
4c:84:4b:23:1e:61:40:ec:eb:11:e2:3b:69:b0:27:af:fa:ec:
b0:5d:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:29 2024 by rpki-client on console-fra.rpki-client.org