Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/C3HVj_zjxi1YAebrmQam6FuEhGc.roa
File: C3HVj_zjxi1YAebrmQam6FuEhGc.roa (raw, json)
Hash identifier: Z5OWXkjzliaWtkLAuq85upD+MXPhRMDZBsST0RSLuvE=
Subject key identifier: 0B:71:D5:8F:FC:E3:C6:2D:58:01:E6:EB:99:06:A6:E8:5B:84:84:67
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 018571CC274AD8727F9DFBB4A26ADC5E6C94
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/C3HVj_zjxi1YAebrmQam6FuEhGc.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:27:4a:d8:72:7f:9d:fb:b4:a2:6a:dc:5e:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b71d58ffce3c62d5801e6eb9906a6e85b848467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:66:06:5f:6e:99:d3:d1:48:05:08:c1:5d:
b3:cf:e6:14:a2:26:9f:0b:35:cf:ff:a1:05:9b:d5:
e4:b1:0e:34:41:d2:c0:3b:57:fe:54:ac:e4:4b:29:
4a:a1:3a:2a:98:32:19:51:ac:3e:64:4c:fc:34:db:
6b:12:e4:02:c4:e5:b0:8a:a7:02:db:89:df:55:ea:
15:eb:12:0f:66:b8:56:5c:38:19:7e:05:9a:ab:a5:
96:00:24:2c:72:0d:34:e1:92:5f:c4:9b:3f:a4:3f:
51:a6:ce:00:ec:19:68:df:f2:b1:e2:49:49:25:71:
cb:cb:1a:db:b0:fe:df:64:02:ec:95:d9:e6:af:3c:
7a:5d:90:6e:88:22:ca:d3:e0:25:33:a0:f8:52:cc:
79:a2:c4:03:64:79:18:0d:49:7c:7b:a5:cb:98:c3:
f6:07:a9:73:af:ed:4e:3f:ad:1b:cc:ab:fe:80:38:
b6:1f:cf:8f:cf:c6:52:f9:03:97:f6:a3:f7:11:09:
5a:0b:f8:35:de:ef:92:73:0b:77:69:0b:b2:b8:8a:
94:c7:7f:88:e3:9b:fc:ed:8c:03:99:ab:6c:e8:53:
4e:4b:af:db:ce:56:4e:6c:6f:70:4c:da:23:19:bd:
a6:25:da:07:d2:c4:2f:f6:47:10:13:7a:83:22:2a:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:D5:8F:FC:E3:C6:2D:58:01:E6:EB:99:06:A6:E8:5B:84:84:67
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/C3HVj_zjxi1YAebrmQam6FuEhGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ab:6f:b0:21:a6:d0:79:b6:7a:ce:84:88:2a:0f:7f:64:cf:
8d:3b:61:d7:c8:42:36:32:b7:09:7d:d8:26:41:84:26:7c:fa:
98:bc:ae:fd:cb:41:67:fd:2e:b5:a7:da:f3:f9:55:84:c8:bb:
a9:37:e5:b7:c1:0d:47:69:97:22:7a:58:51:9a:1b:c0:b1:62:
de:aa:32:63:ab:b2:74:39:7a:15:ae:25:a2:97:2c:ed:21:87:
de:f1:26:13:38:f0:8a:71:48:8c:88:65:b5:6a:90:47:f9:76:
47:51:e6:5f:e0:90:68:c9:d5:a1:74:40:93:6d:7c:56:17:56:
ee:9f:32:a3:40:dd:34:69:b0:ee:26:68:09:ae:a8:09:f3:ba:
23:8a:48:6b:91:bc:d9:b7:d4:54:32:b1:53:90:8f:67:dc:86:
4f:89:f2:cf:58:55:8a:0f:2d:22:79:78:22:1e:b7:86:6b:8f:
fe:b8:2c:73:d8:c2:45:bf:ce:2a:5b:68:df:63:51:c2:b5:91:
6e:b0:f7:eb:c0:db:bf:d5:76:c7:82:50:0c:ae:e6:76:b3:6a:
b3:e6:f2:d2:d7:2e:94:41:53:2d:42:e2:ed:85:4e:2a:13:6d:
18:29:92:93:7e:54:af:0f:3b:0c:dc:85:e3:7f:f0:d4:6f:22:
18:08:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:41 2023 by rpki-client on console-fra.rpki-client.org