Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6UmxtVisfEqF5uvgvFIXXyEzrvc.roa
File: 6UmxtVisfEqF5uvgvFIXXyEzrvc.roa (raw, json)
Hash identifier: y5sXT0JVmEZoAPXvcZXQx9SsAeDjVfn30Mpt5okSBfo=
Subject key identifier: E9:49:B1:B5:58:AC:7C:4A:85:E6:EB:E0:BC:52:17:5F:21:33:AE:F7
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018AE89A4882815891A96D6A0223EFA69B53
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6UmxtVisfEqF5uvgvFIXXyEzrvc.roa
Signing time: Sun 01 Oct 2023 00:18:59 +0000
ROA not before: Sun 01 Oct 2023 00:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e8:9a:48:82:81:58:91:a9:6d:6a:02:23:ef:a6:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 1 00:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e949b1b558ac7c4a85e6ebe0bc52175f2133aef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:81:01:5b:bf:de:00:b8:49:ff:25:c4:99:
e0:ad:e4:d6:84:83:9b:dd:6c:5e:02:b7:5e:2b:85:
e1:7e:60:5a:5f:b3:52:e8:3c:c0:24:c3:b1:41:20:
db:0e:de:e4:a1:2d:e0:4b:c5:4e:9c:ee:ff:e7:59:
83:05:0e:4e:19:75:14:1e:69:d6:b3:cf:f0:3b:04:
62:cf:75:97:70:7a:51:10:3b:1f:ce:7c:59:e3:ee:
6e:c2:5f:36:8f:df:82:bb:80:97:ea:b0:44:fe:9b:
ea:a2:29:2c:06:89:3e:7c:d3:c1:3f:51:b4:1d:78:
27:9c:07:cb:3d:99:e2:b2:f7:94:9e:f9:ef:77:b0:
1e:66:33:46:ee:6e:08:a6:a9:9d:32:72:68:2d:e7:
c4:39:d7:eb:ba:4d:02:77:6b:98:57:25:be:23:81:
9c:57:ea:5b:c7:b7:fd:b4:67:09:b6:be:85:71:a3:
60:12:36:09:b5:ca:09:c7:40:02:84:dd:81:e7:54:
71:5e:5b:0f:82:71:e5:6b:e0:57:16:05:5b:50:03:
0f:46:97:2f:1f:75:5b:10:78:1f:07:47:cf:2e:4c:
41:2b:4f:02:3c:98:cd:f0:16:db:d3:6a:ec:46:75:
5b:5d:28:3a:f8:29:b6:2a:04:70:d2:82:b3:bd:42:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:B1:B5:58:AC:7C:4A:85:E6:EB:E0:BC:52:17:5F:21:33:AE:F7
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/6UmxtVisfEqF5uvgvFIXXyEzrvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
54:73:cb:aa:cf:8c:69:7b:3e:3c:a7:97:35:88:b8:c5:fb:4b:
97:68:96:8c:1e:a1:e2:10:3a:61:18:e2:a5:d9:88:58:b6:4c:
24:02:dd:94:66:70:68:50:12:c1:6e:26:42:28:84:55:1e:b1:
5c:91:7e:1a:9c:96:29:db:9c:86:d2:18:ce:f6:d7:20:d8:c6:
f5:b4:41:db:bb:cf:a4:09:71:e5:d0:bb:ad:0d:4a:28:ce:46:
1e:93:bc:44:78:ea:8f:a9:0d:07:94:33:62:f2:fc:04:13:fa:
89:0c:b3:71:5d:b1:41:66:cc:0b:58:70:e9:7c:e6:af:45:51:
68:03:14:51:c3:6c:a2:9d:9c:68:dc:28:9d:c3:fa:ce:a3:13:
3d:64:74:da:e9:23:60:f4:91:f3:d0:83:62:f8:87:07:46:4b:
fa:da:89:d3:74:f9:b3:fd:46:88:9d:9d:28:47:90:7a:96:b2:
70:1d:bd:23:34:2d:9d:c7:45:cd:c1:94:2a:a9:2b:22:8d:2f:
99:9b:2a:00:a2:4a:0b:bc:49:9f:42:0e:02:b0:52:b5:92:d2:
32:5d:32:72:69:4b:c7:2e:44:c8:60:bd:9e:ce:65:a8:f7:de:
45:40:dc:25:00:99:6c:48:be:c4:cd:59:56:26:db:74:cb:d2:
b2:89:c5:d0
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 21 18:48:18 2023 by rpki-client on console-fra.rpki-client.org