Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/O6ZxAW0z-ioIDGW2aDXn9zh-ClU.roa
File: O6ZxAW0z-ioIDGW2aDXn9zh-ClU.roa (raw, json)
Hash identifier: xaiZZXd8TCVYOf4vuJq29ym1KjpkKxI9ao9p7KAqCIw=
Subject key identifier: 3B:A6:71:01:6D:33:FA:2A:08:0C:65:B6:68:35:E7:F7:38:7E:0A:55
Certificate issuer: /CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Certificate serial: 0185711E4E8D7FFAFACFF67354EF6EFE4029
Authority key identifier: FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/O6ZxAW0z-ioIDGW2aDXn9zh-ClU.roa
Signing time: Mon 02 Jan 2023 06:14:49 +0000
ROA not before: Mon 02 Jan 2023 06:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.38.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4e:8d:7f:fa:fa:cf:f6:73:54:ef:6e:fe:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Validity
Not Before: Jan 2 06:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ba671016d33fa2a080c65b66835e7f7387e0a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:1b:35:cc:98:b5:80:c4:dc:ec:60:f5:17:
f5:3a:3b:0a:c2:ae:69:67:1e:85:58:06:c6:da:1f:
5c:06:d3:3b:e5:0d:aa:23:e7:f8:19:95:17:05:8b:
76:c5:a3:00:c9:2e:7f:47:3a:53:17:0d:34:5a:67:
4b:90:f6:16:b0:bc:22:00:85:e6:a8:2c:53:a6:f6:
7a:f5:d2:9d:dd:7e:08:c2:80:cc:70:21:1a:ed:98:
be:8b:c9:10:c6:28:9c:72:12:df:1d:65:36:8b:3d:
ed:76:9f:50:a1:1c:a8:cd:f2:2b:a4:e3:ba:98:be:
01:51:b5:55:5f:86:4f:22:20:0c:59:ce:6c:fd:e7:
fb:3b:bd:4d:6a:45:d5:13:e5:a8:d9:eb:ee:e7:b9:
fd:e5:b8:0f:b0:01:0a:89:0a:3f:d4:ca:9e:c4:2e:
b5:71:ba:4c:b8:95:5c:a3:77:8b:5d:61:4f:7f:23:
2c:5a:5e:67:e8:e5:7f:c7:b5:34:1f:04:9d:09:56:
0c:5d:bd:9a:28:8e:f7:da:2c:4b:95:5e:54:ea:63:
08:dc:83:ba:0e:70:5a:f9:37:8f:d1:23:4b:de:1d:
74:f5:00:5c:3a:06:a9:0b:1f:2a:47:5b:27:12:2c:
cc:27:98:dd:f5:d9:64:07:6e:7a:bd:f0:f5:61:a4:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A6:71:01:6D:33:FA:2A:08:0C:65:B6:68:35:E7:F7:38:7E:0A:55
X509v3 Authority Key Identifier:
keyid:FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/O6ZxAW0z-ioIDGW2aDXn9zh-ClU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3e:bc:99:c1:c6:8a:3a:7c:0b:36:7d:01:28:b4:4d:34:60:
60:85:27:50:b2:bb:81:fa:38:b0:1a:31:4e:18:ea:51:a0:3f:
35:93:a8:31:67:ad:8e:95:a9:ba:05:64:e9:11:1d:e7:e1:de:
f7:d3:76:36:71:49:d8:f5:52:a7:8e:73:d2:ed:de:78:75:b2:
09:74:d4:15:30:20:d3:dd:09:b6:88:89:16:8f:a3:b0:38:cd:
74:cb:8d:6d:31:86:33:5f:7b:9a:1d:d8:96:60:4e:ed:79:fa:
e0:e7:89:09:30:d0:ca:62:ae:55:16:fb:b9:43:da:c5:e9:28:
e2:02:83:59:72:31:90:5d:b0:68:c0:36:c2:25:17:57:33:29:
32:3a:a0:93:0f:36:18:e8:33:e3:c0:29:23:c8:2a:52:f3:a2:
64:20:2f:fe:5e:f8:b0:82:44:5e:aa:c1:ca:ae:5f:48:34:11:
1f:9c:34:f3:a2:0f:a9:6b:46:19:a0:70:5f:bc:b4:66:09:4a:
d2:a0:6b:cf:f4:e6:0b:c1:fc:93:58:b5:9d:50:39:8d:af:3e:
9e:db:5d:10:11:3a:48:34:8c:85:e8:db:20:2b:54:15:4c:b3:
19:d4:38:21:c7:a9:33:38:40:d5:4c:b9:25:49:ab:fb:13:0a:
bf:dd:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:36 2023 by rpki-client on console-ams.rpki-client.org