Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/FE3k9hVMa2WvQ4mqRwNHIs45qKc.roa
File: FE3k9hVMa2WvQ4mqRwNHIs45qKc.roa (raw, json)
Hash identifier: uVA+YHqr9kegBmEQJTTRgDMoJfyU+VPFdAUh7hsYF8M=
Subject key identifier: 14:4D:E4:F6:15:4C:6B:65:AF:43:89:AA:47:03:47:22:CE:39:A8:A7
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01856F3932281583022998E157B86CC2E663
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/FE3k9hVMa2WvQ4mqRwNHIs45qKc.roa
Signing time: Sun 01 Jan 2023 21:24:57 +0000
ROA not before: Sun 01 Jan 2023 21:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25101
IP address blocks: 193.111.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:32:28:15:83:02:29:98:e1:57:b8:6c:c2:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 1 21:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=144de4f6154c6b65af4389aa47034722ce39a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:7c:ed:c9:0c:84:31:43:68:1b:80:11:fc:
f5:0b:98:35:6b:a3:ab:32:b0:2a:1b:09:13:5e:a4:
0c:9c:f6:ae:0d:7d:d3:28:6e:79:d7:19:32:08:53:
03:13:e1:92:74:d9:e9:c3:0b:bb:e5:04:6b:60:23:
0d:9f:bf:a2:e4:75:28:24:3b:ed:9c:87:ef:86:e0:
54:e9:ba:40:19:41:00:94:12:81:27:0f:ce:91:a0:
3f:d8:c1:81:96:90:8d:7c:88:0b:53:3a:54:fe:71:
a1:d1:5c:c4:a7:0f:fc:b4:58:07:3d:a3:af:82:b5:
13:02:60:e8:87:f6:a0:67:f1:48:8f:89:ef:2c:4c:
92:90:6d:16:0a:3a:02:15:be:8c:b2:0f:33:6e:06:
85:3f:4e:54:f1:e7:32:da:4a:45:fb:37:a7:53:cd:
07:d9:ef:3f:f5:19:44:91:49:d2:07:5a:26:c1:2c:
6d:03:bd:47:8b:ed:1a:53:ba:d9:ec:11:e5:9b:c5:
cd:6f:13:ad:90:6d:9d:86:dc:d6:fd:f3:cc:94:47:
de:99:7e:a8:d6:4d:22:8a:15:a3:4c:03:68:ce:2c:
2b:94:83:de:af:da:13:c9:25:e0:11:94:19:d2:42:
21:ca:c8:5d:2c:04:18:16:65:0e:5d:81:6f:92:25:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:E4:F6:15:4C:6B:65:AF:43:89:AA:47:03:47:22:CE:39:A8:A7
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/FE3k9hVMa2WvQ4mqRwNHIs45qKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:21:5a:d4:83:07:77:c0:1f:08:ac:52:56:76:2d:35:4e:47:
d3:a3:3e:b7:24:2d:0f:a2:aa:5f:90:79:4d:58:40:63:0c:4e:
6c:ae:9b:50:7a:29:82:1e:77:a1:82:99:1f:c9:30:95:ba:03:
2a:16:d4:18:ef:d8:5e:2e:f1:40:6d:0a:47:fd:33:cd:30:b9:
16:d8:7a:03:8d:06:7a:67:80:8f:5a:95:ba:21:55:34:ea:12:
e2:28:b4:af:ee:de:bf:53:ab:bc:ca:7d:d7:10:06:33:fb:31:
72:05:f6:5a:54:ba:f4:28:c1:f8:5c:1f:2e:cc:74:34:9a:07:
ed:c4:ed:9b:f1:c8:4d:1c:c6:74:27:1c:70:8f:f5:3d:4d:c5:
40:86:4a:e7:f4:ea:f5:b6:ec:ae:26:5d:80:76:3d:6c:0c:9f:
26:6c:96:1f:a4:76:a1:e9:11:61:8e:35:17:f0:04:77:23:a2:
b9:f6:c1:ab:cb:d7:6e:0f:cc:e6:a5:15:49:a7:3e:5b:32:99:
f5:db:c7:6b:95:66:d6:29:1b:f6:58:5b:c5:92:ec:3a:3c:05:
f6:b5:6c:fa:40:e6:fa:ea:21:e1:56:21:f0:b9:35:ca:10:5a:
4b:04:1f:d9:3d:ce:16:ea:da:a3:83:d6:e3:33:09:3e:18:41:
77:72:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:14 2024 by rpki-client on console.sobornost.net