Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/AdPr_1J1AORLCEMmlzbH8YTB7OI.roa
File: AdPr_1J1AORLCEMmlzbH8YTB7OI.roa (raw, json)
Hash identifier: cQNHPwMebgOYlUdAUZ0sFY3Zyer5mqsVqO7WYRBPkAY=
Subject key identifier: 01:D3:EB:FF:52:75:00:E4:4B:08:43:26:97:36:C7:F1:84:C1:EC:E2
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 01856D4180ED8FE952F25E462031A192DEFC
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/AdPr_1J1AORLCEMmlzbH8YTB7OI.roa
Signing time: Sun 01 Jan 2023 12:14:47 +0000
ROA not before: Sun 01 Jan 2023 12:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 193.188.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:80:ed:8f:e9:52:f2:5e:46:20:31:a1:92:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jan 1 12:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d3ebff527500e44b0843269736c7f184c1ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:1c:36:90:38:3a:dd:73:02:4e:f0:8f:14:
78:33:fa:87:ad:a5:7b:f7:3c:19:c5:b3:fb:e4:3c:
ea:5d:f6:f9:a9:7e:91:31:54:71:0c:76:47:5d:51:
52:91:b3:fe:95:49:82:d1:fd:37:10:57:08:50:a3:
6f:ae:3a:78:56:aa:fe:bd:c5:6d:41:59:a5:8c:34:
d4:25:7d:29:46:be:db:e5:1c:80:b5:8c:a3:31:81:
13:65:70:19:40:e8:04:c1:6a:65:18:cd:2e:b3:c4:
c0:4c:e1:6a:34:9a:7f:e8:c8:5a:e1:67:d6:ae:63:
3e:2a:6a:48:94:ff:11:54:dc:1f:9c:e5:fd:44:0e:
27:75:b5:1b:18:cb:27:29:c3:a4:02:83:1f:fa:8d:
ea:c8:c6:c9:40:e8:a8:c7:95:9a:7c:87:71:6c:6a:
97:07:f8:65:00:a8:86:d5:d6:4a:8d:87:61:f6:67:
cb:65:e3:64:02:13:08:45:c3:4e:77:a9:b5:88:1b:
7f:a5:bb:ac:03:0f:3e:89:07:6f:1b:9d:7e:b2:6a:
c7:15:9c:dc:a6:d7:b2:6f:3c:96:22:b1:72:a9:17:
23:2f:41:b4:14:b8:07:55:0b:50:b2:f8:bc:a9:94:
80:57:61:73:1a:39:13:a9:e0:b1:5d:f4:e9:8c:fe:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:EB:FF:52:75:00:E4:4B:08:43:26:97:36:C7:F1:84:C1:EC:E2
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/AdPr_1J1AORLCEMmlzbH8YTB7OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.12.0/23
Signature Algorithm: sha256WithRSAEncryption
34:e0:9a:dd:b4:a7:28:f9:45:2d:f0:57:e5:8a:d9:39:19:ed:
63:1d:fc:1d:b6:cf:cd:2e:50:22:0b:6a:86:4b:db:14:a9:3b:
47:7f:c5:69:1e:de:c5:78:d3:7b:0a:3d:1b:de:b7:39:7e:e8:
c4:cf:71:2f:ce:f8:bc:d9:25:23:46:4a:20:39:45:e8:4d:14:
f3:1a:95:36:0f:8e:b6:fb:48:ec:81:33:25:ce:dd:cc:2f:47:
f8:1f:95:d3:48:d6:c7:53:8e:b1:79:53:65:42:1c:58:4e:80:
25:af:cf:a8:0e:cd:63:20:0d:90:79:33:57:0a:75:f7:4e:23:
e4:71:af:20:7d:00:67:7a:50:ed:56:05:a3:9d:f1:e3:d0:8f:
4b:d7:b7:b1:cb:f2:fc:dc:9a:c1:1d:bb:d2:80:8a:0e:24:ce:
b2:6b:98:0d:f1:9f:83:a3:f0:93:80:af:a8:fb:90:d6:e6:7a:
b1:7b:2e:f2:40:e0:db:10:49:e6:f3:48:44:05:f8:da:00:75:
bd:d0:b8:85:bb:07:3d:e1:1b:63:1a:c2:d6:a0:17:bf:cf:e5:
b9:11:ad:9f:61:3c:5d:ba:f6:fd:07:96:68:9e:3b:8c:07:a2:
71:8a:08:b7:b4:8b:6d:a7:2f:04:b0:73:7b:27:77:98:89:25:
8d:1b:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org