Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/1-3J-70xHoHDWLjkj0CxDkrHQp8o.roa
File: 1-3J-70xHoHDWLjkj0CxDkrHQp8o.roa (raw, json)
Hash identifier: gMKBeiPvlAF4/3fBtnPgjkoiGSu+dJ6rcuHGoDtjIVw=
Subject key identifier: FB:72:7E:EF:4C:47:A0:70:D6:2E:39:23:D0:2C:43:92:B1:D0:A7:CA
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01856DE67C4928E784B8AA4B5E8FE8CCB620
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/1-3J-70xHoHDWLjkj0CxDkrHQp8o.roa
Signing time: Sun 01 Jan 2023 15:14:59 +0000
ROA not before: Sun 01 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.47.187.0/24 maxlen: 24
193.200.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:7c:49:28:e7:84:b8:aa:4b:5e:8f:e8:cc:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jan 1 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb727eef4c47a070d62e3923d02c4392b1d0a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:b2:ec:48:dc:2e:05:a3:24:0a:20:ea:fe:
7f:e9:88:df:6c:c3:ba:54:d6:8e:84:a5:7e:e0:13:
8e:0f:7a:31:0c:a3:c3:03:d5:24:3e:f8:7e:dd:cb:
2c:f2:c5:c5:9b:c9:f6:3c:6a:3b:a6:8b:97:47:02:
5b:3c:62:c6:36:02:ed:58:ef:e9:94:3c:ae:3e:4c:
7b:bc:56:e4:79:62:e0:04:7d:ee:09:9b:5a:92:ae:
4e:76:57:d2:2d:ad:f7:b0:b6:d3:93:cf:59:34:ef:
e9:58:8f:6f:05:f5:7a:82:eb:7f:00:03:28:93:0e:
c7:3b:9c:0f:cf:0d:65:5f:89:9e:08:77:5f:fb:f4:
ee:a6:22:5b:c1:67:24:62:a0:4b:ad:c8:c5:cf:83:
7b:e0:33:6f:9d:95:6b:2e:87:b1:a0:79:ef:02:2c:
13:f6:f9:48:92:6a:86:95:7c:32:c9:93:40:58:7d:
6e:86:a8:c7:b1:b3:cb:fc:5d:d2:24:10:d9:03:06:
31:1e:9f:81:58:0f:a3:a1:ba:dc:9b:75:91:2d:4c:
49:71:09:bb:3b:dc:8a:f6:11:48:49:91:c4:80:42:
7b:41:96:70:3f:43:20:0f:68:c9:f7:53:37:9c:dc:
8a:59:85:a3:94:b2:15:e4:1b:6e:c2:36:30:c4:14:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:7E:EF:4C:47:A0:70:D6:2E:39:23:D0:2C:43:92:B1:D0:A7:CA
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/1-3J-70xHoHDWLjkj0CxDkrHQp8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.187.0/24
193.200.156.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:44:7a:23:7a:13:cc:f6:0c:5a:f6:e9:62:4a:bc:48:a9:b7:
62:1d:80:2e:35:8a:d8:f8:75:73:9e:75:cf:9d:09:f5:d1:94:
fe:70:c0:0b:4f:df:e9:bf:2e:bd:61:c7:85:2e:07:a8:89:3e:
62:d1:66:11:ba:26:77:98:f8:d2:0a:6c:4d:d1:b6:db:d6:03:
d3:d8:a7:f6:b7:b1:57:60:ca:2c:6c:67:cc:d0:b8:e8:22:5c:
f7:eb:8b:51:f7:e9:c5:9a:8a:0e:93:60:bc:c8:e4:58:ec:c1:
0f:22:17:1f:ed:26:97:d2:28:46:c3:8c:24:02:8a:b2:3a:e6:
14:3a:a9:f6:d7:84:9b:09:49:2c:5d:33:35:be:bd:6a:ef:95:
be:bf:44:6f:d2:e9:e7:fd:74:42:49:08:6c:4f:d8:39:cc:ae:
e3:2a:36:15:b1:f3:fe:61:af:86:6b:1a:b3:08:8d:c0:56:74:
d1:af:38:b3:e3:bf:bd:91:4e:d2:64:9c:86:13:d3:17:09:29:
0b:98:27:4a:4f:32:a2:ea:eb:e5:7d:15:70:8b:78:e4:8e:56:
fe:8a:51:dd:ba:67:63:e7:8c:8e:10:ba:26:a7:e2:05:f3:e8:
d0:ff:9c:92:49:cc:db:3d:86:de:01:92:53:d6:e9:50:22:41:
b5:1c:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org