Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/dJpiBrBoR4A55BRa79BMbbdxKrA.roa
File: dJpiBrBoR4A55BRa79BMbbdxKrA.roa (raw, json)
Hash identifier: vEHhYz69EwdbUebH7zgHAdgPWp/HNfMFldc1DMQPIds=
Subject key identifier: 74:9A:62:06:B0:68:47:80:39:E4:14:5A:EF:D0:4C:6D:B7:71:2A:B0
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 0188BF29070EEAD6CDF347ED58309393F882
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/dJpiBrBoR4A55BRa79BMbbdxKrA.roa
Signing time: Thu 15 Jun 2023 13:05:16 +0000
ROA not before: Thu 15 Jun 2023 13:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199697
IP address blocks: 193.37.158.0/24 maxlen: 24
2a12:6040::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:29:07:0e:ea:d6:cd:f3:47:ed:58:30:93:93:f8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Jun 15 13:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=749a6206b068478039e4145aefd04c6db7712ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:47:e0:55:53:fa:f1:2e:1b:e7:44:27:db:
b9:db:18:23:94:e9:4a:b9:a0:2c:f9:05:a7:14:89:
1e:ca:c5:99:f4:22:59:17:21:f3:fa:20:10:c4:48:
bf:0c:6f:68:de:c0:ea:01:a9:b1:1a:8c:c9:33:20:
c7:41:1c:c9:a8:f7:d2:4e:64:9f:50:84:35:f1:4c:
18:96:19:fe:e6:94:d1:32:15:89:dc:60:e7:4f:33:
ce:8f:4b:ac:2e:d3:23:94:b1:83:92:8d:b4:3f:da:
e3:2e:5e:22:9f:1e:d9:dc:02:af:ce:9a:f1:5b:d9:
cc:4f:3e:19:e0:73:91:23:87:83:5e:af:67:db:77:
c2:98:bb:00:da:61:a7:a8:c3:ca:26:a1:cf:84:24:
ed:e6:2c:60:bb:c4:c8:52:91:ad:b1:a5:ce:d0:0f:
75:d5:64:9e:d0:ab:7d:6e:20:b0:b5:8b:90:f0:67:
ae:1a:b0:e4:18:e2:01:38:55:56:a0:c5:6f:81:1f:
4b:38:b8:6f:de:ac:3c:b2:f6:9c:ed:24:ae:82:09:
58:af:b0:85:e6:78:9f:2d:d6:2b:fb:86:ef:a3:d4:
41:5e:ef:92:32:c9:b7:01:81:e6:f8:54:98:b8:15:
09:50:cc:6f:14:38:e6:21:a6:ea:71:ea:ee:db:a4:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:62:06:B0:68:47:80:39:E4:14:5A:EF:D0:4C:6D:B7:71:2A:B0
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/dJpiBrBoR4A55BRa79BMbbdxKrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.158.0/24
IPv6:
2a12:6040::/29
Signature Algorithm: sha256WithRSAEncryption
7d:95:08:a7:6a:70:ea:f1:aa:6b:c1:63:66:17:9b:a6:9f:61:
40:d5:3c:09:0f:59:22:1f:a9:e8:4a:9b:93:d8:72:20:e3:66:
8b:e2:a9:c4:96:82:29:ae:f9:65:ff:37:ef:ec:58:44:fd:bc:
e7:1c:0d:f9:35:09:54:66:b4:60:ae:99:64:7d:49:2e:d5:4d:
77:6a:73:d1:0a:37:20:17:e0:1a:d9:e1:ce:6f:8f:a1:31:48:
c8:c3:60:71:1a:72:e7:d7:ee:29:04:4b:09:bc:08:3b:5a:51:
66:d5:16:3d:91:19:e4:f5:6b:c6:73:80:1f:ec:e5:90:e2:e9:
84:8b:87:01:7c:86:fb:99:2c:6a:e6:19:bf:3b:c9:3c:93:77:
2f:0c:28:c9:67:65:59:03:e3:4e:c7:3c:ed:c6:47:d2:6a:07:
97:8a:df:3a:3d:00:ee:f5:9e:c7:0c:d6:fc:2a:eb:ae:da:15:
c8:bc:d5:24:62:3d:0b:35:08:47:71:d1:22:df:65:18:32:c6:
1c:ec:a0:3c:3d:b0:44:13:b3:b5:d8:cf:35:79:86:d0:c8:17:
6d:b8:b7:25:7a:d4:60:9b:67:06:86:ae:1b:a6:d8:db:81:4c:
3d:31:e7:63:c8:fa:c7:28:4a:87:0f:a5:db:25:b7:0d:22:23:
2a:4b:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net