Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/sV3qrqVavqhJUOeRO85gHXXDYao.roa
File: sV3qrqVavqhJUOeRO85gHXXDYao.roa (raw, json)
Hash identifier: Odh+I7kFRikXqHnElDW6Pf2KTTdkeKM0Kdrqp/VeYo4=
Subject key identifier: B1:5D:EA:AE:A5:5A:BE:A8:49:50:E7:91:3B:CE:60:1D:75:C3:61:AA
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 0185737AAB9183FBCD6106A53FB13C92EDE8
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/sV3qrqVavqhJUOeRO85gHXXDYao.roa
Signing time: Mon 02 Jan 2023 17:14:57 +0000
ROA not before: Mon 02 Jan 2023 17:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48854
IP address blocks: 193.8.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:ab:91:83:fb:cd:61:06:a5:3f:b1:3c:92:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 2 17:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b15deaaea55abea84950e7913bce601d75c361aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:d8:8f:82:0a:e8:ab:2c:78:a2:27:84:f9:
c6:be:79:0c:8e:ad:91:b1:d4:3e:ba:ed:64:28:ad:
b5:87:45:9f:2d:4b:7a:1b:1e:f2:0a:54:dc:0d:55:
fc:72:0d:d9:f0:7e:9c:28:c8:bd:83:11:b8:2a:06:
bd:40:2d:39:02:6c:d4:11:56:e6:3d:45:af:ac:5b:
f6:cc:b1:aa:b4:34:52:88:de:6b:6e:2f:fa:ff:59:
55:64:42:cc:1d:17:30:bc:ab:7f:83:4b:4b:70:3b:
f1:5d:c0:45:ec:c0:ab:59:05:47:ef:37:fb:b6:fc:
ca:22:0b:19:4c:09:39:86:0b:f1:81:2e:b4:9c:a1:
4a:95:79:a2:21:7e:9d:17:6c:52:ea:7f:c2:af:98:
72:3a:d7:c7:8e:50:7f:b5:84:44:8b:83:a4:f6:14:
24:d4:61:72:53:5c:8a:94:ed:e1:ab:35:97:21:93:
e0:15:7a:b3:39:01:53:42:51:9e:aa:69:7b:dd:aa:
2f:89:4b:15:91:46:53:fd:f4:4c:46:c3:56:10:e2:
45:e8:af:11:9a:21:46:9d:5d:dc:5f:83:d4:fa:eb:
54:54:79:ee:8a:a2:a6:00:85:93:c1:5a:a5:3f:1b:
b5:d0:c6:f1:c5:85:c8:5d:6d:20:53:c2:3d:d3:44:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:EA:AE:A5:5A:BE:A8:49:50:E7:91:3B:CE:60:1D:75:C3:61:AA
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/sV3qrqVavqhJUOeRO85gHXXDYao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.38.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b6:31:00:f5:2b:12:38:bd:f9:69:4f:aa:f6:03:1a:c0:3a:
88:78:b9:c3:be:26:b8:16:e2:63:c9:b8:c7:8d:30:42:73:e3:
60:09:42:bb:3f:db:f9:dc:d1:40:8f:bc:d9:cf:87:38:21:ad:
75:95:47:bc:48:af:6b:f7:be:4e:87:a5:e5:09:59:79:79:67:
7b:6c:03:41:cf:e6:20:90:41:51:14:cf:72:0c:56:0b:06:2a:
f7:55:f2:da:71:8b:3e:b7:76:85:67:35:34:50:3e:64:10:e9:
17:e9:8b:ea:9b:aa:8f:50:59:b7:4f:9f:4b:75:bc:f4:ed:58:
c9:3d:3c:d4:2b:13:fe:b2:45:42:fa:a4:42:9a:83:00:f2:21:
c6:97:9b:84:b9:6e:6b:8b:38:e8:3e:1b:05:f1:70:67:99:66:
0b:2d:20:3e:05:ca:c3:c2:0c:fb:9a:5b:c9:cd:f1:3e:ea:2a:
78:d5:45:ba:9b:46:9d:0e:39:79:7c:a2:eb:f5:12:e9:1e:7c:
6c:07:51:92:47:6e:b2:a2:3c:17:12:c6:48:d5:04:f9:15:43:
7a:9f:87:fb:2a:97:2d:df:81:3d:d3:14:8b:cd:70:7e:ab:5a:
31:ec:a5:3c:69:bb:5b:b7:8e:ad:4e:aa:c2:63:cb:0b:21:29:
6d:57:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:03 2024 by rpki-client on console-ams.rpki-client.org