Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5VO-MDNMbNOxSD2VU13Jec--juI.roa
File: 5VO-MDNMbNOxSD2VU13Jec--juI.roa (raw, json)
Hash identifier: I9Ysv3hWM2GwJotPn2AZIj/rgGxtsRz598Gg8l8QuV4=
Subject key identifier: E5:53:BE:30:33:4C:6C:D3:B1:48:3D:95:53:5D:C9:79:CF:BE:8E:E2
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0188B0BE549939088334C565840B09499E8A
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5VO-MDNMbNOxSD2VU13Jec--juI.roa
Signing time: Mon 12 Jun 2023 17:54:03 +0000
ROA not before: Mon 12 Jun 2023 17:54:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:be:54:99:39:08:83:34:c5:65:84:0b:09:49:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jun 12 17:54:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e553be30334c6cd3b1483d95535dc979cfbe8ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:88:bb:b9:79:84:c3:1c:79:c6:b3:69:5a:
f6:46:0d:f0:32:d4:04:3f:9d:29:06:ce:0c:07:c3:
ae:8a:06:7c:b4:5d:55:8a:aa:f3:95:af:44:9a:7d:
ae:d4:89:a5:fd:ec:b6:75:c9:d0:09:18:0e:ca:b3:
de:a7:5d:68:4a:85:d6:f4:0c:8a:d9:36:41:93:3b:
3c:ea:5c:3b:b3:9e:2d:b7:4d:6a:6b:8f:57:86:75:
b3:a0:6c:62:4c:5c:9f:88:66:c8:48:84:81:4a:6d:
a3:9e:b8:75:d6:1f:41:78:c7:ad:a4:f0:c7:51:b9:
c1:32:3f:cc:d5:bf:02:55:96:57:a4:b2:35:b2:60:
fa:0a:fa:8a:9c:c8:0d:ee:fd:f6:8f:c4:93:df:89:
c7:5c:9d:27:5c:ca:58:41:9d:f7:28:aa:3a:53:49:
08:54:8d:a9:36:67:d7:91:c7:a0:bc:8b:d3:7b:4c:
d0:c1:1a:a8:94:61:a7:76:dd:d0:ee:ab:56:ab:87:
4c:51:e7:fb:c1:ab:de:d5:35:0e:a0:79:47:3b:2e:
6c:ab:ae:20:e5:f8:08:7b:ce:e0:e9:2e:cd:d7:7e:
11:15:f1:e4:3c:56:b2:f8:d2:ee:5f:9c:0d:5b:01:
7a:c1:7d:7b:cb:93:9d:95:a6:69:66:ea:be:44:c7:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:BE:30:33:4C:6C:D3:B1:48:3D:95:53:5D:C9:79:CF:BE:8E:E2
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/5VO-MDNMbNOxSD2VU13Jec--juI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9d:23:c3:ea:dd:21:1a:46:89:3c:d6:41:d7:8b:40:ad:62:
6d:5b:97:78:c9:56:33:48:72:f7:99:6e:70:ff:ce:f6:a5:49:
1a:9f:e8:5b:83:a8:7d:c7:2b:cd:f2:d2:7d:cc:54:c2:24:1d:
43:29:97:ff:68:91:ca:f7:9a:1a:11:92:99:48:2e:4a:27:5a:
50:6a:09:98:41:ae:5d:01:26:5f:cf:82:b6:2d:f2:8a:6d:e2:
99:bf:f4:30:64:34:0f:2a:d9:1f:f1:50:15:b5:f8:45:b7:83:
fa:33:3e:66:08:db:77:fc:12:49:82:53:8c:f9:26:f9:7f:35:
dd:ac:c7:4d:0a:67:76:69:b6:00:f3:40:48:0a:6c:74:48:e6:
86:ef:d7:ee:74:2d:22:7a:05:e0:f6:4a:03:63:80:b2:9b:48:
0f:6e:8b:62:d9:08:86:0f:bc:61:63:ab:60:d2:47:87:be:bd:
d0:cc:f6:cf:da:f8:cf:2f:cd:2e:bc:c3:9f:e9:a9:15:fe:4f:
3a:7e:e3:46:8f:2f:b1:7c:2a:25:ef:2a:9d:8e:44:54:8a:89:
75:17:38:06:c2:e5:3d:e3:a0:b9:c9:31:ef:1e:1e:54:ea:60:
2f:7a:bb:8c:57:b0:34:7a:96:e9:f0:d5:16:0e:02:d3:6e:af:
f5:28:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-fra.rpki-client.org