Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/clGhxPU-F2vehiU7cvi7h_zUieY.roa
File: clGhxPU-F2vehiU7cvi7h_zUieY.roa (raw, json)
Hash identifier: hz8HUt2pJjKMcoOTmDQxRR16vb1Vs5Wna13UcCJ/5q0=
Subject key identifier: 72:51:A1:C4:F5:3E:17:6B:DE:86:25:3B:72:F8:BB:87:FC:D4:89:E6
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEECA471D3EBAFE004ED96139EB7818
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/clGhxPU-F2vehiU7cvi7h_zUieY.roa
Signing time: Sun 01 Jan 2023 06:04:49 +0000
ROA not before: Sun 01 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199980
IP address blocks: 193.192.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ca:47:1d:3e:ba:fe:00:4e:d9:61:39:eb:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7251a1c4f53e176bde86253b72f8bb87fcd489e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:7e:10:6d:97:76:52:eb:03:ae:5d:d6:61:
ed:45:75:8d:11:cf:83:37:93:73:b1:e5:40:22:4a:
20:63:f4:ea:0e:12:22:c6:0f:41:56:54:7c:1f:aa:
1e:23:32:0d:dd:3a:6d:c6:83:a9:d5:66:a1:40:86:
d4:23:14:35:2e:e6:09:14:1f:a1:6a:29:30:81:ac:
49:f0:fa:cd:61:3d:d6:04:db:72:f9:5e:8e:34:2d:
4d:25:5b:25:18:9c:64:40:67:62:35:db:a4:49:25:
b3:f4:f7:44:aa:42:ad:4c:44:97:83:44:24:1b:e1:
f8:76:01:17:70:c2:6b:79:a7:18:b2:27:fb:cd:e9:
b1:f6:7f:bf:30:2e:2d:0c:c5:06:7d:da:2c:7d:5c:
e0:d4:2c:bc:56:f7:9d:6b:e2:12:c1:4f:ee:92:6f:
68:37:5f:9c:1d:08:af:06:a3:41:b0:51:97:02:3d:
23:35:8f:e3:d5:2c:9b:b1:3a:ff:9e:2a:da:bc:6d:
5e:e3:87:bd:6b:6e:a0:0c:3e:71:6f:1d:12:64:d4:
1b:a5:a2:00:e8:5b:23:d4:f3:21:93:b4:d4:f9:f5:
69:7c:58:32:81:09:f7:c4:91:a0:80:32:9a:14:af:
43:44:4f:b9:e6:a5:28:31:71:68:d4:41:29:89:ad:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:A1:C4:F5:3E:17:6B:DE:86:25:3B:72:F8:BB:87:FC:D4:89:E6
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/clGhxPU-F2vehiU7cvi7h_zUieY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.174.0/23
Signature Algorithm: sha256WithRSAEncryption
23:b3:52:62:19:4e:c0:6f:90:ae:01:6a:69:7a:e4:47:89:e7:
5a:e4:74:49:88:58:2f:15:4c:39:e5:a8:ab:0a:29:96:2f:3c:
37:07:73:54:ae:31:7a:3f:bf:29:06:1f:a2:8f:fd:91:73:b0:
ec:d1:ee:15:8c:dd:d3:2d:86:1e:87:b2:20:99:22:58:1e:6f:
cb:71:ab:8d:8d:a3:01:ff:23:6e:dd:03:8d:61:57:92:8d:8c:
ce:24:1f:8d:6f:6b:01:52:80:03:19:dc:d4:a3:a8:b9:95:0a:
7b:21:c6:2f:73:15:f6:dd:2e:28:cf:d9:42:a7:e3:ce:73:e8:
6b:ef:60:d4:40:5c:2a:69:29:92:8d:44:a3:a3:55:73:5d:b3:
a3:88:93:ab:6d:fd:a6:9d:e1:57:23:03:c4:72:71:9b:8d:64:
58:ef:ad:5e:1d:58:8b:fc:a7:50:ca:17:bf:6f:7c:70:91:ca:
86:ad:f5:86:ad:75:e9:c1:1a:cd:4d:3e:c6:db:37:dc:b6:7f:
5d:2f:54:26:f4:2b:ac:1a:ab:50:e7:aa:a6:76:a2:e9:40:f0:
d0:fe:29:15:4a:32:ae:26:52:ce:14:c0:3c:ff:54:45:61:2f:
63:46:25:5f:d6:a7:be:fa:27:8d:e9:d3:33:2b:0d:76:1b:75:
1d:76:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org