Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/redydpXjwFftwBj-NG1yjQWz2yw.roa
File: redydpXjwFftwBj-NG1yjQWz2yw.roa (raw, json)
Hash identifier: NVZA47lF6765gs1SjqRnBa/k3ia8TUdoJbiJG7jlePQ=
Subject key identifier: AD:E7:72:76:95:E3:C0:57:ED:C0:18:FE:34:6D:72:8D:05:B3:DB:2C
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 01856B933B13EF4EA4B5F6496790AFE58027
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/redydpXjwFftwBj-NG1yjQWz2yw.roa
Signing time: Sun 01 Jan 2023 04:24:49 +0000
ROA not before: Sun 01 Jan 2023 04:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211371
IP address blocks: 193.162.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:3b:13:ef:4e:a4:b5:f6:49:67:90:af:e5:80:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jan 1 04:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ade7727695e3c057edc018fe346d728d05b3db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:17:da:c6:21:6b:2f:d8:27:9f:f6:0c:6f:
be:90:44:f9:b2:21:48:0a:9d:00:93:ad:51:2c:e2:
b0:18:5f:c7:8c:3a:87:88:05:e1:5b:34:81:47:2b:
64:09:07:7a:fe:1d:63:bb:04:0a:4f:e4:80:bf:04:
8b:f6:f2:38:85:0a:e2:1e:42:99:c8:dc:62:fb:07:
20:58:e4:14:51:67:d1:1c:eb:41:08:46:42:85:d5:
b1:1a:28:1e:c4:6d:27:73:bf:46:51:4f:e4:63:83:
8d:dd:8e:97:f7:e7:dd:ad:ce:57:ad:56:23:a6:99:
5e:58:66:a1:d3:70:17:66:40:99:ec:24:1a:06:f0:
9d:a4:60:8d:55:d3:07:ff:a4:bd:11:fb:6c:2f:d8:
a0:95:09:41:53:6b:d0:54:d4:17:12:15:e4:d7:a7:
7b:1b:8a:07:20:39:cd:83:df:6f:13:46:15:ee:6f:
80:ce:d0:53:f8:d6:3b:48:39:10:82:9c:bf:44:03:
16:05:23:5f:0b:82:d2:41:b8:3e:cc:42:7c:38:60:
93:a5:b0:15:01:4b:9f:36:b3:1c:7c:aa:8a:dd:2b:
ee:d9:78:66:ab:ad:d2:28:a8:a5:41:70:18:8c:93:
72:52:fe:7e:d8:e2:39:19:c5:3f:2c:2d:0d:5c:ba:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:72:76:95:E3:C0:57:ED:C0:18:FE:34:6D:72:8D:05:B3:DB:2C
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/redydpXjwFftwBj-NG1yjQWz2yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f1:cb:3f:57:be:3b:8f:c6:92:82:ca:37:0f:8f:2a:4b:a0:
ab:7b:c9:52:ed:f7:f4:5f:56:ab:8e:ff:82:00:b0:cf:36:69:
59:1a:f7:c0:9b:87:47:8c:98:3f:55:82:c0:99:62:ba:4e:3d:
d0:d9:e2:de:4f:9c:ea:2c:4a:2b:23:e3:7a:8a:f0:b6:4f:b7:
dc:2d:d9:1b:e1:66:ed:33:1d:7a:9e:1e:63:ca:71:80:30:cf:
c0:8e:f1:aa:05:8d:b1:14:15:7a:6a:c6:96:20:cd:8b:46:fe:
23:b9:20:d7:5b:fb:64:57:6a:df:f4:a1:dd:b7:4d:f0:fd:5d:
07:3b:9f:d2:ce:b1:2d:3e:49:08:74:0e:03:24:7c:b8:15:2f:
89:09:cc:7c:99:13:32:f4:5c:92:8e:97:24:10:15:57:58:49:
3a:99:cb:18:de:7c:2e:71:7d:51:25:a6:7b:bf:7e:72:c9:3a:
dd:aa:29:27:e4:3f:7f:44:54:db:16:82:43:66:9d:85:a1:67:
9d:2f:23:f7:da:7c:e6:09:3c:81:68:c5:65:1b:71:de:a5:e3:
10:a7:aa:83:88:c4:c9:6a:c6:ca:52:e1:df:57:24:50:03:84:
31:7e:c1:2e:1c:98:e0:8f:64:d2:e8:86:49:fb:b5:f2:3d:8d:
70:93:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:19 2024 by rpki-client on console-ams.rpki-client.org