Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/SWBRPNSMSOHpERfL5-zOTg354rk.roa
File: SWBRPNSMSOHpERfL5-zOTg354rk.roa (raw, json)
Hash identifier: 8w7IKbyPByKXr0zaHdati8JHitHeREbcRyPmkx6W4es=
Subject key identifier: 49:60:51:3C:D4:8C:48:E1:E9:11:17:CB:E7:EC:CE:4E:0D:F9:E2:B9
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 0185729EEC031CB0DF449551F6FB8D84FFA6
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/SWBRPNSMSOHpERfL5-zOTg354rk.roa
Signing time: Mon 02 Jan 2023 13:14:55 +0000
ROA not before: Mon 02 Jan 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50209
IP address blocks: 193.104.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:ec:03:1c:b0:df:44:95:51:f6:fb:8d:84:ff:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Jan 2 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4960513cd48c48e1e91117cbe7ecce4e0df9e2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:f0:91:b5:8c:d4:5e:72:7f:6b:4f:c0:3c:
37:99:73:08:ad:de:ed:3d:54:56:35:6d:86:db:fc:
ac:78:2d:90:58:a2:0b:90:e5:fd:45:20:6d:ee:82:
6b:2f:d2:88:95:94:76:85:c8:85:95:55:b8:85:bb:
b6:de:79:b7:a3:82:1c:26:c1:8c:de:d6:82:71:e1:
23:19:42:96:3f:3f:43:90:b9:28:22:0e:d4:c6:2d:
a9:84:72:ad:bc:7f:ef:fb:22:a1:b3:1c:19:ce:45:
ca:ea:f0:c9:05:52:fa:45:3b:d9:a7:e5:11:9f:06:
ec:32:be:92:8d:34:2a:af:da:ef:a4:37:a8:74:06:
ed:68:6f:ca:86:c7:0b:2b:97:d0:61:d2:d8:15:b8:
be:dc:5d:e5:e3:31:ac:48:e4:1f:6e:60:29:e8:3f:
fa:d5:5f:a2:86:26:29:00:31:0a:a7:bc:06:d7:7a:
59:b6:f8:1d:01:51:42:a1:56:01:27:4b:3b:90:fc:
21:87:1d:fe:9d:40:c8:5a:90:17:b7:9f:22:08:54:
4a:a4:b8:6b:40:68:e3:0a:a2:ce:3e:82:a7:31:49:
bf:a6:06:54:38:54:e8:84:25:85:98:5c:5c:be:e9:
1d:bc:8b:f2:f6:0d:77:2a:11:d6:e8:91:d7:6e:f9:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:60:51:3C:D4:8C:48:E1:E9:11:17:CB:E7:EC:CE:4E:0D:F9:E2:B9
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/SWBRPNSMSOHpERfL5-zOTg354rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:45:1f:39:cf:7f:ba:0d:3f:99:ce:e4:7c:82:f6:00:e4:62:
fd:0b:38:e9:70:2b:12:8d:c0:6a:bd:e5:c6:ba:b0:ba:2c:50:
11:40:47:22:b3:5d:70:39:f0:ec:b8:9c:da:71:2d:85:df:a4:
4f:4f:59:a1:ca:fe:04:86:f8:d7:95:a9:ad:4d:d5:fa:b1:a7:
b1:86:28:4f:83:5c:bc:9a:19:cf:3f:d8:73:0e:33:c2:a0:2c:
fe:0c:86:25:a4:1c:6e:ef:c6:8a:a0:d5:b1:15:a9:30:2b:6a:
1b:f7:59:89:6a:5a:ab:92:82:df:26:c4:bb:86:98:81:1a:be:
60:72:57:58:ba:8b:80:9d:fd:60:59:54:e0:63:77:73:d7:e7:
8b:70:7c:52:81:92:d5:fa:1b:f9:b9:36:8a:83:53:12:d8:e1:
10:e8:56:0f:26:2b:68:4c:51:cb:64:27:22:45:42:df:73:90:
6d:24:5d:f5:a3:df:95:c0:3a:e5:75:b2:99:bc:cb:50:59:9d:
b4:7d:63:dc:89:e6:24:17:3f:05:3c:64:2a:7b:b6:c4:c7:db:
b4:06:df:68:6d:80:95:c8:11:96:f9:42:c8:54:2e:5d:49:d1:
fd:9e:fb:09:d7:b2:5a:a5:86:de:ec:65:d6:54:8c:3d:57:d2:
95:9a:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:51 2024 by rpki-client on console-ams.rpki-client.org