Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1M-7vUSP6dDqQylpbfjXUgXGGH4.roa
File: 1M-7vUSP6dDqQylpbfjXUgXGGH4.roa (raw, json)
Hash identifier: oPOG4MFAvlB5oUVz9XOjWUm3fQDHUJJqESswVWa2gjU=
Subject key identifier: D4:CF:BB:BD:44:8F:E9:D0:EA:43:29:69:6D:F8:D7:52:05:C6:18:7E
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01856CE634D470B7B166570772883F875B10
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1M-7vUSP6dDqQylpbfjXUgXGGH4.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208065
IP address blocks: 193.8.40.0/22 maxlen: 22
193.8.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:34:d4:70:b7:b1:66:57:07:72:88:3f:87:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4cfbbbd448fe9d0ea4329696df8d75205c6187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:e6:e6:ae:00:51:3c:70:9e:71:7f:17:c6:
b9:fc:1f:5b:ba:2d:dc:6f:25:88:44:a6:93:ff:c6:
48:d8:e9:88:ba:07:26:e6:91:a5:06:b5:61:b4:11:
ab:6f:ca:a0:9d:1e:c3:15:c0:cd:f7:d5:8b:48:b2:
e3:74:20:8d:00:d3:4c:2f:d9:9f:40:db:23:5a:f4:
59:98:cd:27:c3:66:92:20:b0:71:24:cd:57:7a:09:
6e:7a:96:20:44:9b:3d:84:7b:67:19:bd:2e:6a:01:
eb:61:93:dd:9c:3c:70:26:1d:1a:05:c1:64:28:0f:
ed:b5:f3:05:8c:f2:49:79:20:bd:50:09:bf:e4:1c:
f1:29:ff:32:d6:6f:87:14:11:27:f0:21:e1:ca:65:
b4:6c:f7:3b:d9:0a:c2:86:49:49:aa:2f:eb:9f:37:
93:74:5e:74:9e:51:16:32:c7:e7:cf:b8:6e:7f:e0:
9d:8c:5f:59:87:b3:9d:b7:f6:82:da:59:e2:bb:ff:
b0:a3:de:b6:cf:cd:59:08:ca:af:97:75:41:55:99:
5a:47:16:ed:10:ef:7f:d3:da:a9:d6:14:8d:02:a2:
26:da:3f:6a:d9:cf:50:59:e5:72:d6:fd:f6:1a:94:
f0:69:8d:90:e6:8d:c9:b7:1d:5f:37:97:ef:f0:97:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:BB:BD:44:8F:E9:D0:EA:43:29:69:6D:F8:D7:52:05:C6:18:7E
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1M-7vUSP6dDqQylpbfjXUgXGGH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.40.0-193.8.44.255
Signature Algorithm: sha256WithRSAEncryption
47:7d:c6:d9:6a:c2:ad:90:d1:fe:6a:09:52:7d:1e:48:52:88:
e5:9b:55:0a:1b:b9:2c:4b:86:5d:4a:10:1b:b9:a9:2f:b4:66:
da:6c:0d:0f:57:ec:e4:66:d7:20:0a:20:ff:41:a8:7d:a2:9b:
80:e2:3f:de:5f:07:0f:d3:35:13:e9:6b:4f:72:6e:2b:fb:f9:
71:aa:28:32:38:aa:bf:6c:e4:a0:35:9f:a7:b1:6d:41:4e:c3:
d7:3a:0b:bf:5d:63:d3:70:a4:68:77:96:82:78:af:93:e2:71:
03:1b:3d:57:53:df:db:d1:65:ec:46:1b:6e:9b:73:91:e9:53:
76:9f:32:15:1d:7e:8d:c8:7e:b6:f3:ec:42:17:48:a2:6c:bc:
1d:e8:e1:11:94:b8:ab:22:ef:d6:2d:09:cc:e1:10:28:74:72:
c1:1d:9b:ba:8a:08:28:ad:5c:75:b9:d4:94:3d:90:b3:a1:54:
01:94:4f:6f:ee:b1:fd:d4:27:73:51:05:e5:51:94:5f:a7:90:
65:01:b7:44:1c:4b:98:cd:fb:0c:4c:fc:79:aa:35:49:8f:84:
f4:f8:99:37:1a:4a:7e:b6:0c:62:ec:e4:dd:99:76:41:0b:bd:
f3:57:fd:b3:1d:d0:47:55:07:6a:fd:1e:62:7b:4f:2a:d1:54:
e2:40:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:19 2024 by rpki-client on console-ams.rpki-client.org