Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/sfrRaUyRCOMEArwU-qmOavUFYJw.roa
File: sfrRaUyRCOMEArwU-qmOavUFYJw.roa (raw, json)
Hash identifier: 2kVdAWk4xhfAiNjZRSsfdxxMaIAx+3FME0mS7JDW8To=
Subject key identifier: B1:FA:D1:69:4C:91:08:E3:04:02:BC:14:FA:A9:8E:6A:F5:05:60:9C
Certificate issuer: /CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Certificate serial: 0187ACB34180F5B0165B2B15B238C3AF0CF8
Authority key identifier: 13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/sfrRaUyRCOMEArwU-qmOavUFYJw.roa
Signing time: Sun 23 Apr 2023 06:00:41 +0000
ROA not before: Sun 23 Apr 2023 06:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.163.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:b3:41:80:f5:b0:16:5b:2b:15:b2:38:c3:af:0c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Validity
Not Before: Apr 23 06:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1fad1694c9108e30402bc14faa98e6af505609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:e1:b5:75:7e:97:29:36:58:45:09:1d:d1:
76:fe:51:30:13:c7:da:41:82:9a:7f:5d:58:32:20:
53:df:b5:01:a4:bb:25:82:1a:93:06:8e:40:36:5c:
cd:76:06:e2:9c:a6:a0:63:bd:8e:92:23:2d:8b:02:
44:0d:76:6d:b7:83:97:dd:2d:bc:cc:e0:a2:f5:ee:
e5:3d:c7:32:19:42:06:1a:96:db:4d:cf:b2:ed:93:
9e:f4:98:52:63:7e:49:70:65:22:f1:d3:3e:82:63:
60:d3:27:c5:2a:af:c8:fd:c1:1c:e3:3a:9e:0e:0e:
24:eb:32:9e:64:74:01:22:cf:56:0c:86:dd:89:28:
ad:65:65:2c:65:f7:8e:c0:ab:99:7c:da:c7:88:b0:
30:48:37:b5:1b:cc:f4:ab:ee:3e:e4:9f:e8:12:6b:
97:94:18:d4:0f:c3:06:0c:d6:5e:b9:83:20:8c:17:
29:8c:f1:17:e0:98:0f:28:a1:b3:d8:6f:d2:c2:36:
5f:ed:55:d2:25:d8:a0:a2:c3:7c:35:f9:f5:48:e5:
5c:97:aa:25:01:94:05:5b:48:79:30:60:c6:ae:99:
71:7b:7f:38:99:70:ec:a5:2f:1f:0a:aa:0b:9b:fe:
6c:99:7b:3a:eb:5c:29:12:94:e1:ad:42:5e:d9:df:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FA:D1:69:4C:91:08:E3:04:02:BC:14:FA:A9:8E:6A:F5:05:60:9C
X509v3 Authority Key Identifier:
keyid:13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/sfrRaUyRCOMEArwU-qmOavUFYJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/E6W90tYeuo78nKnMYy2AKuHz0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
69:71:13:21:71:da:75:de:29:df:03:2d:28:a0:76:7f:19:f3:
a5:fb:66:51:8e:68:a7:03:50:bb:e3:1c:83:99:2f:bf:4e:6e:
23:78:7c:7f:95:27:d0:da:3b:98:24:cc:69:de:49:b2:2f:9d:
7b:28:98:0f:37:25:8e:9d:d4:1f:b7:43:14:f7:a7:fd:1b:3b:
f9:1e:75:65:17:48:ce:db:0a:ff:b5:75:88:c3:d5:ba:c3:7b:
ae:91:18:52:23:86:59:3f:b2:8a:8d:9a:10:90:9d:ad:f3:7d:
05:22:58:6c:41:b4:7f:e7:8f:57:47:95:3f:35:65:b7:0c:b5:
9f:ea:21:b2:38:84:aa:a3:e2:64:e6:e9:6f:1b:d1:80:72:32:
33:d5:0b:00:d6:d9:5b:1e:06:2b:52:a8:07:24:51:a1:ee:c5:
c9:53:01:f3:4c:06:6a:f8:d5:2e:03:74:c3:54:9b:66:70:0a:
4d:d4:89:16:c4:55:a5:56:50:6c:a0:f8:6e:6c:5a:4c:a3:a3:
a3:28:5a:c5:b0:50:19:37:6d:40:9b:3d:56:a6:f6:a9:ce:03:
d2:b3:fd:aa:d7:b3:46:d3:bb:14:e3:1c:da:36:09:d9:b1:15:
ef:cb:e1:ea:e1:92:90:2f:df:7f:cc:c7:d3:1c:8d:53:55:58:
78:f5:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:19 2023 by rpki-client on console-ams.rpki-client.org