Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/3ahXzL8Ggg6ovdsqAsXHiZnKYzo.roa
File: 3ahXzL8Ggg6ovdsqAsXHiZnKYzo.roa (raw, json)
Hash identifier: CPX2LCul/eGtdUiMk9bijvKsjm0A8XQu7+5PFYvvM1w=
Subject key identifier: DD:A8:57:CC:BF:06:82:0E:A8:BD:DB:2A:02:C5:C7:89:99:CA:63:3A
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 0189DB904EDDFA91BB453FF7DE8084266E0C
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/3ahXzL8Ggg6ovdsqAsXHiZnKYzo.roa
Signing time: Wed 09 Aug 2023 18:30:14 +0000
ROA not before: Wed 09 Aug 2023 18:30:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35163
IP address blocks: 193.17.124.0/22 maxlen: 22
193.17.123.0/24 maxlen: 24
193.17.120.0/21 maxlen: 22
193.17.96.0/21 maxlen: 24
193.17.104.0/21 maxlen: 24
193.17.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:90:4e:dd:fa:91:bb:45:3f:f7:de:80:84:26:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Aug 9 18:30:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dda857ccbf06820ea8bddb2a02c5c78999ca633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:95:e2:71:40:fa:9c:de:3b:23:de:02:31:
1b:97:57:c9:e1:a1:e7:e2:ff:ff:fc:6f:c1:dc:6b:
70:ad:77:87:78:30:e6:20:15:cb:30:e8:b2:cd:c7:
67:5e:2a:92:f8:0a:67:1c:fb:d4:3a:d6:5b:ac:30:
93:36:6d:ee:8b:eb:f6:af:78:5c:a8:1e:a0:1c:10:
69:9e:9d:eb:45:03:15:0e:32:4d:17:32:70:aa:ab:
19:bb:b7:27:38:8c:f7:95:98:5c:67:69:21:e3:bc:
83:bb:58:ee:1c:83:77:a2:8d:92:e1:63:ab:c4:67:
ff:6e:85:34:72:ef:ec:0b:cf:0e:6b:83:b5:ca:4c:
ca:6c:62:cf:17:2e:2d:74:c0:f4:6b:68:d0:1b:e1:
85:15:e2:6c:00:7a:57:ab:11:99:9d:28:03:54:67:
c5:c3:17:6a:a7:f8:b8:82:97:fd:53:18:aa:2a:59:
a8:e6:c3:78:60:09:d6:f5:44:d6:04:c6:b3:3c:56:
cc:fa:a1:2a:92:dd:a1:cf:16:44:9f:ed:85:a6:2a:
d1:d0:a0:84:bf:b8:cf:79:e1:e8:f6:6d:65:05:b1:
85:d4:74:2d:37:e0:36:72:27:7f:38:12:d4:82:65:
ae:49:a9:30:da:de:a1:55:74:a3:db:79:35:4a:81:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:57:CC:BF:06:82:0E:A8:BD:DB:2A:02:C5:C7:89:99:CA:63:3A
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/3ahXzL8Ggg6ovdsqAsXHiZnKYzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/19
Signature Algorithm: sha256WithRSAEncryption
64:60:05:08:00:12:8f:64:d8:cd:52:31:e3:cc:09:ae:1c:b9:
03:ad:16:df:9c:67:53:92:4a:fd:a2:b1:55:7f:ea:06:35:65:
c0:67:32:d7:45:c1:f8:e4:7e:e6:18:b3:87:b1:b4:25:4e:c3:
72:39:53:04:23:3b:34:72:de:8d:55:22:eb:94:52:05:de:70:
07:6b:3e:66:47:c2:38:4b:74:a3:47:8e:be:fb:ae:82:dd:f1:
1d:19:65:8d:50:1e:29:58:30:0c:39:7d:ed:4a:8a:6e:31:06:
ae:1c:c3:f5:17:3c:a7:c7:ae:4a:6e:01:df:f2:bc:3f:e0:aa:
5e:ba:09:1b:36:7d:5d:53:41:ad:0c:87:da:f9:1d:1a:29:08:
d9:2d:53:10:12:84:6e:34:40:e3:01:10:6b:48:17:52:27:f4:
b9:5b:c3:92:9b:e5:e1:59:dc:4d:30:2a:e9:a5:1a:f0:57:2b:
14:44:5b:d0:ae:f0:f7:c4:04:b3:8d:44:49:ab:93:5f:fa:42:
7e:b9:7a:eb:a6:c8:0d:75:a7:b8:73:48:f8:64:3c:3e:94:6b:
cf:e1:43:e8:8f:de:43:f1:61:4a:0e:4b:29:27:1b:00:3c:2e:
0d:43:fa:28:23:b4:c7:01:a7:d4:cc:22:2d:03:0a:36:28:af:
76:52:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org