Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/Pjj6NhJWg3NpqxXXuyQqG5Exuio.roa
File: Pjj6NhJWg3NpqxXXuyQqG5Exuio.roa (raw, json)
Hash identifier: B9/hXjS6IbZDrL/o9Kpx/4GWHXA0cXM4KGwIJ2W9PqU=
Subject key identifier: 3E:38:FA:36:12:56:83:73:69:AB:15:D7:BB:24:2A:1B:91:31:BA:2A
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 018571F10C0CC8CC51B2578B258994E1B98A
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/Pjj6NhJWg3NpqxXXuyQqG5Exuio.roa
Signing time: Mon 02 Jan 2023 10:05:00 +0000
ROA not before: Mon 02 Jan 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 193.47.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0c:0c:c8:cc:51:b2:57:8b:25:89:94:e1:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Jan 2 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e38fa361256837369ab15d7bb242a1b9131ba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:cc:08:bd:09:ad:82:2e:3f:56:e3:92:70:
09:ba:7b:ae:ae:d0:0e:7c:3a:ad:c3:30:46:69:99:
46:f4:80:79:f9:7a:a3:a3:f7:1b:dd:13:3a:a8:f8:
4b:9f:12:7f:75:fa:33:d4:70:8a:1c:74:bc:43:02:
0f:dc:1d:ef:26:15:30:13:95:08:02:4c:b7:20:a2:
c5:c6:1a:5c:fa:7f:e6:72:de:6b:f2:0e:de:b4:e3:
87:3c:04:81:6c:8a:86:33:d2:9c:1a:62:28:2f:43:
4d:8f:65:22:f8:d1:10:35:1b:00:a9:c1:d4:bc:51:
01:3d:c9:88:2c:51:b0:fc:83:59:4d:03:7d:f3:05:
43:29:31:50:93:8b:15:bb:3b:a4:db:6a:3d:52:49:
00:44:94:8d:ef:27:ef:cf:72:fc:47:60:31:45:de:
25:d5:3a:92:04:fd:4d:12:d5:e7:dd:29:21:2e:09:
ce:a7:41:e8:e9:92:db:7b:99:f7:0a:fa:ba:32:67:
d2:0b:0f:46:1b:97:4d:88:bc:14:a9:08:44:c8:c9:
b8:31:78:e9:d7:d9:22:db:c3:0a:61:e9:a6:90:f7:
3a:be:66:87:c1:87:80:0e:03:c4:5a:fa:55:1f:86:
2b:4c:d2:a9:63:d3:d7:e2:26:4a:f3:70:53:1b:c3:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:FA:36:12:56:83:73:69:AB:15:D7:BB:24:2A:1B:91:31:BA:2A
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/Pjj6NhJWg3NpqxXXuyQqG5Exuio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.103.0/24
Signature Algorithm: sha256WithRSAEncryption
81:af:04:df:cf:79:4e:0d:c9:9b:f9:44:a1:7f:0c:a3:2d:19:
a3:1a:16:5c:01:10:2b:76:b2:d8:a9:19:e8:0d:a0:cf:2d:77:
7e:fa:3b:47:e7:95:01:1d:e1:34:0b:3a:67:66:8a:2b:c1:d8:
41:99:cc:c8:f8:95:4e:da:85:b4:b1:4b:de:9c:86:db:f6:fb:
27:ab:fa:fb:6f:95:c9:2b:28:a6:68:85:6a:6e:12:0c:5a:d5:
27:b1:5b:bb:0e:34:68:fb:38:20:65:b2:5b:d3:e0:8a:fb:35:
78:4b:db:c9:ae:2a:4f:20:7a:67:97:2f:99:5d:c2:fc:aa:8a:
a9:8b:47:84:bd:d4:b2:85:5b:bb:ce:d1:e0:e3:5f:5e:d9:ae:
dc:21:c6:d6:97:40:38:1b:1a:fd:8a:1b:3e:ce:0b:bd:38:6f:
7b:1e:b3:69:92:68:2d:e9:26:e8:78:44:ce:22:79:c1:40:7f:
6d:31:08:dd:b4:08:af:03:0c:da:14:7d:a8:8e:73:85:f8:72:
ae:7c:8e:e6:6c:91:3e:bc:3e:6e:81:84:e6:20:07:4f:3c:10:
72:c7:d8:d4:9a:56:91:12:48:a8:f5:9f:f3:24:2c:cb:20:ac:
cc:4a:d9:00:6d:6a:f1:60:b7:88:c4:e2:39:ed:19:8f:3b:59:
7f:61:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:11 2024 by rpki-client on console-fra.rpki-client.org