Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/0uhNVuNFMcWenDuSx1tNiTqbKfg.roa
File: 0uhNVuNFMcWenDuSx1tNiTqbKfg.roa (raw, json)
Hash identifier: Dtq8LtB96VsrOqa3T6HUf5Y+FriQnOnpHj7nvO1lZs8=
Subject key identifier: D2:E8:4D:56:E3:45:31:C5:9E:9C:3B:92:C7:5B:4D:89:3A:9B:29:F8
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0185723A29F8F57F2F09AEB1538CFB362206
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/0uhNVuNFMcWenDuSx1tNiTqbKfg.roa
Signing time: Mon 02 Jan 2023 11:24:52 +0000
ROA not before: Mon 02 Jan 2023 11:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1935
IP address blocks: 193.160.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:29:f8:f5:7f:2f:09:ae:b1:53:8c:fb:36:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jan 2 11:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e84d56e34531c59e9c3b92c75b4d893a9b29f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:ca:66:0b:a0:de:25:31:cc:44:86:93:18:
36:45:95:58:f2:58:01:44:f5:65:fa:0e:99:ee:ea:
a2:20:1a:7c:0d:ca:2d:ee:40:b3:8d:bf:ce:86:c8:
55:d7:2b:12:29:15:ac:1e:20:86:cb:3c:0c:16:5c:
da:d4:e7:7c:1b:42:8c:59:69:62:12:f6:48:63:3a:
82:54:03:36:a6:bd:69:e4:37:5a:c9:8e:a0:b8:e4:
8e:dc:2f:82:39:b3:18:81:4b:64:14:34:e2:cf:59:
c1:59:de:c1:09:27:3b:11:d2:8f:e3:1c:b7:f3:36:
97:bf:0d:d6:75:fd:77:1d:33:38:d1:89:d4:74:43:
b7:59:e0:3f:79:7d:81:74:bf:76:35:94:56:6a:4c:
39:ae:55:db:aa:44:3e:ca:27:be:3e:23:4d:ae:b3:
54:b4:12:01:6b:7b:fd:e4:1d:df:27:e4:30:1c:f3:
de:72:7f:a9:46:07:2c:3a:6a:d1:b3:00:09:48:72:
94:94:68:cc:68:77:ff:dd:90:e5:3e:05:74:1c:68:
4f:61:99:39:7b:e9:5c:14:d4:c4:83:7f:2a:b5:dc:
b6:d2:be:62:82:92:6f:6f:2f:76:e5:3f:91:2a:99:
f5:57:cd:9c:d1:d6:43:90:6a:24:16:9f:f1:1b:55:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:4D:56:E3:45:31:C5:9E:9C:3B:92:C7:5B:4D:89:3A:9B:29:F8
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/0uhNVuNFMcWenDuSx1tNiTqbKfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2d:b8:87:26:e1:53:24:24:93:1d:0a:ae:d8:ec:be:19:4b:
b6:44:1b:94:5d:a7:7f:46:34:e4:45:84:7d:dd:8a:f2:f8:48:
88:c3:c7:e9:8d:4c:68:01:73:b5:19:85:24:dd:45:dc:24:4a:
38:ab:34:e7:ea:91:fa:97:db:20:85:3e:6c:dd:8c:2d:82:a5:
83:e4:7c:68:70:c9:81:32:2c:d1:2a:a1:9e:e2:94:90:2d:9b:
fa:37:e2:13:42:c5:dd:e1:13:6c:ae:20:5f:49:65:f6:f5:a8:
bc:c3:40:e2:8c:fe:9a:08:e0:19:30:91:02:55:b8:11:4a:0d:
f5:74:b9:a3:9b:e8:81:40:07:5d:ca:09:94:73:1d:49:92:69:
e2:53:47:1d:1f:1c:0e:f2:06:57:66:94:cd:fd:10:f2:c2:84:
bf:25:7d:c3:d0:af:f9:7d:ba:7f:3c:ff:27:9f:56:56:15:14:
6f:d9:00:5c:1a:32:6d:ce:3a:ce:c3:f0:86:43:6d:ce:94:58:
42:29:24:1c:72:20:17:80:86:33:b6:ee:3d:20:ac:86:9f:0a:
61:9b:b6:b6:41:dc:91:83:cf:af:90:84:43:6d:b7:cd:35:ba:
6d:e3:3d:79:e6:2c:7a:6b:1e:ad:4a:f4:d4:b3:03:78:c0:33:
17:89:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:54 2024 by rpki-client on console-ams.rpki-client.org