Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/xY2SIo2hKSvStDhCb3j_YeNYyEU.roa
File: xY2SIo2hKSvStDhCb3j_YeNYyEU.roa (raw, json)
Hash identifier: p9uCpHGnkZyzjNNUJsTlE6ecjloYJM2FYHWTzKRGinw=
Subject key identifier: C5:8D:92:22:8D:A1:29:2B:D2:B4:38:42:6F:78:FF:61:E3:58:C8:45
Certificate issuer: /CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Certificate serial: 0185708C9EB9DCC5E458B8878E166B6720D8
Authority key identifier: 7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/xY2SIo2hKSvStDhCb3j_YeNYyEU.roa
Signing time: Mon 02 Jan 2023 03:35:41 +0000
ROA not before: Mon 02 Jan 2023 03:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 193.104.197.0/24 maxlen: 24
193.104.198.0/24 maxlen: 24
2a0f:9340:10::/48 maxlen: 48
2a0f:9340::/48 maxlen: 48
2a0f:9340:33::/48 maxlen: 48
2a0f:9340:11::/48 maxlen: 48
2a0f:9340:34::/48 maxlen: 48
2a0f:9340:1a::/48 maxlen: 48
2a0f:9340:32::/48 maxlen: 48
2a0f:9340:3d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9e:b9:dc:c5:e4:58:b8:87:8e:16:6b:67:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Validity
Not Before: Jan 2 03:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c58d92228da1292bd2b438426f78ff61e358c845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:31:55:db:b1:f0:23:15:e0:97:e6:65:b2:
44:5b:d5:d3:71:41:64:85:d6:4e:b7:ef:f3:6a:71:
95:4d:2e:60:a1:aa:58:5a:e8:ec:3d:7c:7d:14:63:
15:17:4c:e9:f8:ad:c3:6d:01:c3:88:57:0b:8d:19:
de:b4:9b:0c:8f:fb:42:1d:39:0f:2c:65:21:d3:fa:
22:d8:f0:4f:79:07:00:73:7e:e9:e6:8a:4c:9d:7a:
4b:5b:90:69:6e:da:d5:8a:21:a0:0d:b7:0e:72:05:
b5:fc:6a:d2:02:f3:09:1a:30:12:62:4a:06:6c:a7:
6e:d6:16:e7:16:46:94:68:51:e6:c6:7a:7b:bd:66:
3d:25:9d:56:62:d3:e5:27:dd:06:0b:33:84:42:5e:
56:54:5f:c3:16:55:f8:4b:8c:60:83:d2:f2:9a:b6:
c0:77:ce:7a:83:0d:07:47:be:ae:18:5d:69:f1:52:
e1:16:17:44:49:3e:32:ee:e4:3b:2b:2c:cc:50:ed:
e4:9d:e3:23:32:61:3c:c7:ba:c6:ed:3a:7a:21:14:
bf:2b:7f:d8:d7:ae:90:94:b3:8a:a6:f0:d7:5c:db:
77:cc:db:1d:e6:a3:98:02:a8:bb:e1:8a:51:bf:0c:
4c:f6:29:53:33:fe:5d:5d:a9:74:4d:1c:77:e1:dc:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:92:22:8D:A1:29:2B:D2:B4:38:42:6F:78:FF:61:E3:58:C8:45
X509v3 Authority Key Identifier:
keyid:7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/xY2SIo2hKSvStDhCb3j_YeNYyEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.197.0-193.104.198.255
IPv6:
2a0f:9340::/48
2a0f:9340:10::/47
2a0f:9340:1a::/48
2a0f:9340:32::-2a0f:9340:34:ffff:ffff:ffff:ffff:ffff
2a0f:9340:3d::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e6:97:97:19:3a:1e:b7:ae:3f:99:9f:95:78:b4:4b:f2:f3:
d6:70:ec:f1:f6:46:a3:94:e4:10:ed:49:5d:a8:a4:74:64:12:
b9:71:15:a8:74:1a:81:cb:8a:8d:4c:c9:3e:32:09:26:44:b3:
2a:47:9c:70:7a:53:81:5f:df:ff:c1:15:e3:f4:a3:36:3b:a9:
c9:14:a3:d8:df:da:1e:d5:60:a6:b4:bf:6a:f9:f7:88:8d:9a:
a4:4f:9a:82:ed:a6:8c:31:9f:32:79:35:d9:50:ec:57:7b:3f:
c3:fa:5f:98:3d:e3:20:40:6e:db:17:e3:5a:93:3b:30:c9:17:
2a:87:83:4a:8b:50:21:05:d7:9d:40:5b:53:ad:02:1e:1d:1f:
2d:1d:97:cb:0f:65:92:d8:78:ab:00:82:84:91:3a:95:4b:c7:
a8:d2:bc:29:b2:91:87:52:71:df:ec:83:a6:81:eb:81:80:2d:
0a:1d:25:16:3d:0c:14:0b:af:56:94:cc:62:7d:ba:1e:7f:3d:
65:03:0d:e7:1d:c2:96:2a:bb:b7:b8:42:8f:b2:a0:11:2c:f8:
a9:ae:90:ee:e8:1e:5c:d8:81:20:86:be:20:26:d9:b4:de:f2:
b8:a6:9e:78:11:9a:71:ad:4a:24:e5:fc:b3:3f:ce:87:9d:94:
38:c3:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:57 2024 by rpki-client on console-ams.rpki-client.org