Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/xzy4pU-X30NpjncKon2SHslay10.roa
File: xzy4pU-X30NpjncKon2SHslay10.roa (raw, json)
Hash identifier: YkMTWbGQy62fUC39999tW6qld/p4S1tZjxyqKbFPNNk=
Subject key identifier: C7:3C:B8:A5:4F:97:DF:43:69:8E:77:0A:A2:7D:92:1E:C9:5A:CB:5D
Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial: 01856F6FF845E7ABA01B3F64B641E73F80B0
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/xzy4pU-X30NpjncKon2SHslay10.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29695
IP address blocks: 193.160.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f8:45:e7:ab:a0:1b:3f:64:b6:41:e7:3f:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c73cb8a54f97df43698e770aa27d921ec95acb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:af:bc:ee:4a:0a:4b:f8:3c:0a:b3:9a:2c:
c1:ac:39:b1:80:ad:9c:56:f8:18:8f:fd:3c:d5:b0:
08:9b:4e:51:89:17:75:75:24:22:b0:75:09:3d:60:
1b:1b:36:83:ba:2d:b5:83:d5:e8:1f:8c:ca:1e:69:
3c:5c:c7:10:53:48:77:bc:94:ec:6d:b2:a5:ec:a4:
bc:42:95:52:fe:54:55:ac:98:db:1c:e2:63:2b:14:
9f:e8:3c:43:40:64:6e:76:5d:25:6a:28:15:80:8a:
cf:0f:94:9e:85:e1:b4:6b:03:83:10:57:71:4c:b8:
b0:ff:38:69:0c:3d:96:d3:c5:a6:d1:ef:30:ba:f1:
44:87:f4:bc:40:e9:b9:4b:78:46:aa:91:1a:d4:b1:
ad:80:c6:56:88:cd:b8:2d:8a:7b:79:71:71:50:9a:
2a:fe:ce:f0:90:20:e5:94:f7:fb:d3:94:04:3c:df:
fd:78:a3:dd:61:9a:70:24:c7:61:b1:5a:ae:46:95:
2c:93:59:0d:1c:7f:e5:e4:e7:f1:d0:19:d9:de:52:
35:69:d3:59:58:d0:f0:6a:d5:ce:29:ef:f0:68:c3:
40:9d:7b:90:88:9b:2a:e2:fa:ee:73:8b:c7:5a:25:
e3:81:87:66:49:09:fe:5e:b7:bd:ec:c7:6f:11:21:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:B8:A5:4F:97:DF:43:69:8E:77:0A:A2:7D:92:1E:C9:5A:CB:5D
X509v3 Authority Key Identifier:
keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/xzy4pU-X30NpjncKon2SHslay10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ee:a2:72:2d:e8:d6:4c:23:1f:81:3b:25:e9:0a:73:1a:3c:
b1:3e:a3:95:6a:53:2d:a0:91:08:e4:3c:f0:22:eb:4e:18:bc:
2e:78:d7:ca:2b:49:84:10:4c:ea:ae:3a:5f:d1:80:b5:37:59:
0c:a8:fd:cb:b8:00:3a:9a:ca:ad:b7:f3:33:a9:52:93:f5:b8:
dd:9e:5a:d0:f0:df:88:35:1b:a1:78:bb:de:d1:95:80:8f:53:
f5:bd:64:b2:8f:44:d1:2d:39:dd:73:a6:25:e6:98:d9:3f:6b:
24:4d:ff:1c:01:94:55:9c:19:6c:75:ba:9f:27:2e:4e:c7:17:
9c:48:26:19:e9:8f:92:fe:c6:9a:f7:44:93:e1:9a:07:69:19:
f2:9b:f3:87:f4:7a:65:95:ea:e6:66:52:6e:27:b5:47:39:b7:
d4:a5:1d:eb:2c:42:54:ec:c1:fc:cc:95:ed:2d:05:9a:70:5e:
0d:36:77:14:f7:59:6a:75:1a:db:3c:97:2f:ab:b3:3f:04:c2:
3f:37:43:55:ef:44:5b:bf:16:af:90:d3:20:26:f0:8f:70:66:
e1:0f:c8:c8:ab:eb:d6:59:da:2c:1b:cf:35:84:00:4c:af:31:
4d:ec:bd:ce:88:30:48:5d:80:fa:fd:5b:6f:34:3a:ce:1d:14:
59:63:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:54 2024 by rpki-client on console-ams.rpki-client.org