Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/rW0J8wy3EPDTVqJeGOUp2ox4TOE.roa
File: rW0J8wy3EPDTVqJeGOUp2ox4TOE.roa (raw, json)
Hash identifier: vwxmaKu8GsvcGLzt/3gBc+1ANrT4XKf0y/6p0pmdSiQ=
Subject key identifier: AD:6D:09:F3:0C:B7:10:F0:D3:56:A2:5E:18:E5:29:DA:8C:78:4C:E1
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 0185DC4CC04F3D3697347181BD4BA3F51D7C
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/rW0J8wy3EPDTVqJeGOUp2ox4TOE.roa
Signing time: Mon 23 Jan 2023 01:44:55 +0000
ROA not before: Mon 23 Jan 2023 01:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20902
IP address blocks: 193.192.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dc:4c:c0:4f:3d:36:97:34:71:81:bd:4b:a3:f5:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Jan 23 01:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad6d09f30cb710f0d356a25e18e529da8c784ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:b8:85:01:ad:db:88:b2:fd:87:31:74:15:
c0:5b:c3:7c:95:52:27:75:a5:58:6a:bc:ea:1a:fa:
08:9d:bb:e7:4f:31:66:f4:67:ef:ac:08:c4:61:da:
fc:f1:11:e9:c6:1a:3a:6b:dc:54:ba:21:de:db:3f:
5d:80:05:55:a3:37:9e:73:29:e7:28:79:0b:17:46:
37:28:89:89:40:48:76:3e:93:7a:13:8a:73:06:bf:
1f:7b:3f:83:ab:e6:30:28:02:38:da:c0:72:d1:e1:
2c:70:44:1a:e6:c0:bc:45:41:22:8b:d0:fb:cf:70:
a3:37:c7:4e:1d:07:4b:e7:8d:4a:ee:67:a9:a3:8c:
89:35:15:a0:0e:34:f5:7e:77:89:49:55:15:61:bd:
8b:75:08:03:6c:bd:39:99:09:21:e2:e6:04:aa:71:
22:6c:86:08:5a:1f:e7:41:80:6d:34:4a:63:cf:bf:
32:e4:78:60:08:3e:41:57:2d:c6:5a:45:b9:55:92:
3a:9d:df:09:14:af:9e:7e:14:b9:12:9e:45:8f:e8:
50:96:d7:87:66:f0:39:90:77:1d:47:d6:44:1e:50:
b2:12:e8:11:cb:fc:79:f1:bd:0e:9d:fb:56:88:04:
22:2e:34:2c:0e:e3:29:eb:9b:05:e4:0a:61:3c:e2:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:09:F3:0C:B7:10:F0:D3:56:A2:5E:18:E5:29:DA:8C:78:4C:E1
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/rW0J8wy3EPDTVqJeGOUp2ox4TOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
48:37:24:0c:91:a7:28:ec:96:9a:6f:00:77:dc:98:6b:1e:ad:
0d:af:9c:f7:4a:79:05:8b:96:78:aa:eb:08:e4:87:23:1e:69:
d2:2e:12:f7:e6:b0:bf:ed:67:03:88:c8:2f:e6:86:0c:50:60:
df:bc:43:03:ea:19:c5:9f:e4:b7:fb:6c:6d:7a:96:9b:3d:28:
2a:e5:6c:2c:a9:f6:5a:6f:02:21:9b:08:ea:e3:8a:c7:17:c3:
29:a3:da:79:5a:09:f5:fd:23:b7:f8:d1:94:74:6f:0a:b3:82:
36:54:91:9a:4a:8c:c9:83:48:d1:fb:db:f2:4b:62:79:5b:b4:
0a:f1:8e:36:bc:46:a6:9f:40:46:16:52:31:46:08:5d:2b:10:
d7:bb:bb:dc:1a:a8:93:85:9b:9e:9c:05:bc:f8:ef:ca:b0:ec:
b0:ef:5f:a0:31:11:3f:bf:b1:7d:01:10:54:98:79:55:c9:e7:
88:32:f3:28:bb:18:0b:9b:40:e6:be:c4:7d:53:a3:16:a0:aa:
da:ac:58:b5:19:e3:5f:c1:39:04:51:da:bb:3a:a6:28:2b:f2:
46:49:b5:94:77:ca:67:b8:22:be:a9:dc:70:0e:44:30:17:25:
d2:c3:4e:c0:d6:08:77:06:db:be:d3:ac:fb:5b:12:89:8d:f1:
fc:70:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:26 2024 by rpki-client on console-fra.rpki-client.org