Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/l_aROsfJbUGMcSjdDrtVsB3wZiM.roa
File: l_aROsfJbUGMcSjdDrtVsB3wZiM.roa (raw, json)
Hash identifier: 7roiXcJlIOt+kWCbyj4wt8QnG2cBltHwqEXSopcBx8Q=
Subject key identifier: 97:F6:91:3A:C7:C9:6D:41:8C:71:28:DD:0E:BB:55:B0:1D:F0:66:23
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC550718A61C73080AF6764149711
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/l_aROsfJbUGMcSjdDrtVsB3wZiM.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198851
IP address blocks: 193.192.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c5:50:71:8a:61:c7:30:80:af:67:64:14:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f6913ac7c96d418c7128dd0ebb55b01df06623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:4e:8e:2c:25:c8:82:be:94:b1:41:99:01:
a4:be:6d:27:17:3f:cf:0a:59:44:c5:56:39:18:8b:
48:58:3d:fd:3e:6a:85:ac:10:20:20:fd:52:5d:9f:
a2:87:a0:8c:5d:73:22:da:5f:7a:ee:8d:4c:94:e5:
9e:a7:cc:bc:98:1b:35:85:aa:ea:d0:8f:3f:d6:d2:
67:ed:17:2a:0a:8a:3f:c6:80:63:9d:f6:c4:ff:2e:
6c:6f:df:76:a6:5d:19:0c:6a:49:99:10:ef:d6:63:
f3:a0:55:53:ea:e6:50:02:85:4f:79:0a:d5:c6:7a:
8a:a8:73:c0:c3:b7:bb:4c:89:d8:09:73:ae:2d:b4:
1a:e2:9a:44:77:b3:de:72:00:37:a5:ec:b1:8a:e1:
30:b7:01:86:0a:a0:12:21:f3:2f:7a:c6:fc:fc:15:
bc:51:7e:f5:9f:b8:7e:2d:d9:6d:88:77:25:fc:19:
1c:a8:c4:a7:68:4e:e9:de:c1:ac:54:35:bd:f9:db:
27:b8:25:87:f4:c5:f7:4b:ac:54:47:7c:7d:c0:bf:
a0:fa:06:a3:d0:7e:66:6b:4c:69:5b:54:19:8c:c8:
21:71:db:71:6e:00:c2:10:e8:f8:c2:11:7c:61:c3:
46:97:66:6c:d6:34:03:df:50:0d:82:a3:3d:f1:1a:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:91:3A:C7:C9:6D:41:8C:71:28:DD:0E:BB:55:B0:1D:F0:66:23
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/l_aROsfJbUGMcSjdDrtVsB3wZiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
68:de:55:ec:be:56:48:ea:e3:76:ed:f0:65:7b:1b:4f:d0:81:
9a:24:d9:35:1c:55:96:61:87:96:fa:81:8e:a5:86:5a:81:21:
5c:69:42:d3:dc:31:d7:34:f3:56:51:b6:c0:cf:5b:8a:0e:42:
79:f0:e2:fb:73:7f:da:ec:bb:60:75:6b:13:1d:84:bb:86:05:
95:ff:71:06:e6:24:28:79:08:51:ba:6d:f4:6f:8a:78:a8:ae:
e2:d0:48:1c:be:9e:10:1a:2c:df:9b:f6:f9:ce:13:6c:4e:85:
83:f8:4e:6f:b1:01:ab:33:fa:88:9a:09:aa:6b:59:43:4d:ae:
e5:b7:63:e6:df:f1:4d:6d:5a:fc:af:b8:83:58:e6:94:24:ca:
6a:3a:f2:8e:72:5f:f6:82:0c:59:6b:7d:0e:48:fa:1a:37:1c:
61:de:99:09:39:dc:20:3f:96:f7:a8:f5:e8:c9:82:10:24:92:
22:e5:0a:e7:0a:d2:8a:77:43:94:ee:1a:a3:0e:f2:6b:22:03:
89:0b:4e:c7:29:04:f0:84:c0:c9:fb:58:9e:17:e7:23:6a:b9:
8f:f6:19:6d:10:50:14:a0:0b:03:89:be:76:64:b6:07:bf:4f:
bd:cf:db:50:f5:aa:57:a4:79:eb:2a:d8:68:89:ca:89:6d:08:
2e:7a:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org