Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/1-bLMz4a6ARC0Y-IkEh_LKi320vU.roa
File: 1-bLMz4a6ARC0Y-IkEh_LKi320vU.roa (raw, json)
Hash identifier: AygtqYQWu6PVgtV1SDvV++ek7X1rrnoOLEJw8Himz3Y=
Subject key identifier: F9:B2:CC:CF:86:BA:01:10:B4:63:E2:24:12:1F:CB:2A:2D:F6:D2:F5
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 018BF6B77B46B6D17EB019838EEBA8915C79
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/1-bLMz4a6ARC0Y-IkEh_LKi320vU.roa
Signing time: Wed 22 Nov 2023 11:08:21 +0000
ROA not before: Wed 22 Nov 2023 11:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.107.46.0/24 maxlen: 24
2a13:7f00::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:b7:7b:46:b6:d1:7e:b0:19:83:8e:eb:a8:91:5c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Nov 22 11:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9b2cccf86ba0110b463e224121fcb2a2df6d2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:5c:78:6e:90:b3:e5:fb:56:e3:a7:2c:50:
90:19:73:ea:52:70:5e:d5:64:74:6d:6e:62:32:a2:
53:5d:79:b0:da:04:ad:ce:58:fc:37:ed:b0:56:cf:
8e:f3:4d:d6:39:79:f2:aa:53:00:c5:52:b0:ff:c0:
ee:dc:ee:b9:53:9c:a0:0c:04:b9:78:a9:ac:cb:bf:
cb:1d:6f:50:c7:ab:eb:b1:10:44:d4:59:dc:2b:ab:
48:5e:89:d9:08:18:45:f6:42:e4:bc:ef:19:c7:ab:
d3:bd:11:cc:0e:17:03:63:b0:cb:8c:6a:ed:c0:91:
53:2b:f2:f1:be:80:cc:fe:4e:d0:9a:6a:79:72:53:
f5:58:5e:35:28:c3:6e:00:2c:cb:55:f5:ac:95:3c:
ac:d0:97:a8:e2:d8:58:74:75:fd:ff:51:f9:0b:1c:
0f:50:e7:94:ae:bc:b6:6b:34:48:09:10:c2:83:6e:
5c:6f:89:07:6c:64:50:bd:b9:c5:c6:1b:d8:89:fa:
e9:b6:5b:f5:9a:ce:d1:2e:8b:63:d4:56:6e:1c:f1:
df:6e:db:73:32:a7:c9:c3:0f:41:4d:ed:86:2d:50:
2f:14:36:d4:13:d8:c2:a1:70:f0:74:b2:c0:d6:b8:
c4:a5:fa:42:2c:bc:4f:ad:1c:19:a0:53:8a:48:35:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:CC:CF:86:BA:01:10:B4:63:E2:24:12:1F:CB:2A:2D:F6:D2:F5
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/1-bLMz4a6ARC0Y-IkEh_LKi320vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.46.0/24
IPv6:
2a13:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
80:c5:99:7b:1e:dd:32:5a:3f:64:a9:af:2f:f4:bc:00:1a:4e:
bb:99:7c:46:d3:15:f9:0a:9e:0a:0a:41:72:49:f0:6c:e9:92:
17:79:b9:08:1d:7a:3b:13:09:75:ea:9c:62:a1:84:bb:cd:4d:
87:87:1d:63:cf:2b:dd:6a:aa:3a:b3:ce:a4:53:01:e9:e2:a9:
e4:f3:fb:e9:5f:24:ae:c1:0e:68:ff:e3:1f:6e:76:64:42:22:
8c:9d:9b:25:ac:31:4c:b9:61:a8:ab:3d:a7:e9:ca:36:da:eb:
93:3f:82:b1:e5:95:76:89:84:35:ea:57:f1:aa:f0:fa:e3:a4:
e9:be:cd:06:0d:90:ba:41:e5:70:8c:ae:c0:49:45:53:a0:90:
a8:21:dc:79:a9:7a:2a:67:9a:5c:5f:ef:ed:62:f7:bb:1d:f1:
c1:24:1e:0e:80:ef:23:95:7d:6d:3e:05:fa:0e:1c:87:74:ef:
4a:2a:9a:aa:f1:4e:62:91:4d:f1:9f:31:60:92:45:1d:e4:f3:
62:19:be:15:ea:da:2a:84:8b:cf:53:1f:12:2d:70:01:35:f6:
45:d4:d7:65:4a:1e:00:c4:6b:ca:3b:38:1b:e2:ed:ec:34:dc:
6e:c2:84:37:27:bb:4e:32:0c:d8:75:af:14:00:fd:59:b3:e1:
96:1e:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org