Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/xgjdLdH9FOn5gNgBwO1wim1FvTM.roa
File: xgjdLdH9FOn5gNgBwO1wim1FvTM.roa (raw, json)
Hash identifier: QUNnWLxLz0x7JHT2o6qLEbmRVDMx8aiumUq75lpmFns=
Subject key identifier: C6:08:DD:2D:D1:FD:14:E9:F9:80:D8:01:C0:ED:70:8A:6D:45:BD:33
Certificate issuer: /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial: 0185737155BA8A9AC22073759472227646E2
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/xgjdLdH9FOn5gNgBwO1wim1FvTM.roa
Signing time: Mon 02 Jan 2023 17:04:45 +0000
ROA not before: Mon 02 Jan 2023 17:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.30.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:55:ba:8a:9a:c2:20:73:75:94:72:22:76:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
Validity
Not Before: Jan 2 17:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c608dd2dd1fd14e9f980d801c0ed708a6d45bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:ac:02:56:25:bd:b2:26:dd:b7:1f:48:f7:
f7:ce:50:f8:6c:b9:c0:2b:9d:8e:97:8e:bb:66:02:
0d:30:64:6e:4b:5a:81:a0:c0:0a:74:ad:83:f1:77:
a5:39:24:ef:6f:3e:da:1a:0e:59:fd:26:10:e9:96:
e8:1e:1d:38:cb:68:39:2d:eb:07:c8:c0:69:59:03:
a9:21:ff:0e:84:0f:ab:e4:6f:a4:87:67:a3:5c:da:
40:40:9b:fa:d1:46:82:60:02:cf:b1:04:24:43:df:
28:a7:29:42:b5:0b:f5:ca:5a:f6:6b:10:07:6d:23:
20:e5:84:27:cd:db:81:5e:52:7f:53:d5:00:e3:77:
e6:16:7d:e5:e1:31:c8:0a:02:e0:a8:b5:13:bc:06:
1a:22:fe:ba:48:10:a9:e9:51:2d:74:52:23:26:08:
f0:1e:c2:fc:2c:9d:91:4d:13:77:83:88:63:ee:5c:
97:7b:00:74:26:3e:a5:60:17:ba:62:25:af:46:88:
4b:3c:61:7d:ce:e6:e9:53:6c:69:2a:d6:a4:bd:53:
6b:d1:95:f5:4b:96:13:01:f0:ad:92:5b:b1:a3:f4:
3e:fa:53:2d:5c:08:19:56:13:72:d1:be:80:21:e5:
10:8b:aa:df:cf:e2:7f:03:37:8e:aa:57:52:d1:4a:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:DD:2D:D1:FD:14:E9:F9:80:D8:01:C0:ED:70:8A:6D:45:BD:33
X509v3 Authority Key Identifier:
keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/xgjdLdH9FOn5gNgBwO1wim1FvTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.112.0/24
Signature Algorithm: sha256WithRSAEncryption
18:75:45:3d:ab:3e:90:e1:c9:ed:35:ab:f8:d7:30:f7:90:37:
b7:09:03:bb:f9:40:85:55:fc:93:14:e4:ca:56:e8:75:f1:0b:
3a:5f:40:09:b8:01:5a:af:3c:16:60:b6:a6:27:31:00:d3:62:
e1:8f:8a:64:c0:d4:33:08:be:63:fa:95:17:46:fc:b2:18:c3:
6a:72:64:7a:df:38:e6:93:08:58:ca:cf:ce:68:09:23:52:a4:
29:e8:0b:d3:a9:5a:d9:b7:5c:4a:cf:a5:20:4b:12:7d:5c:00:
f5:08:6c:fd:9b:4b:7b:2c:d4:f0:a8:28:b7:0e:66:6f:e9:d3:
c0:5e:97:f8:50:47:be:98:5f:a5:2a:d6:6c:88:69:2f:95:2e:
2a:87:e8:63:fc:58:36:00:57:71:ca:45:96:77:f2:52:4e:f7:
1a:b8:55:60:c8:14:23:ee:88:51:fc:6e:f4:16:a5:c8:3f:c5:
83:a8:9b:44:7d:b5:42:73:bf:4e:00:11:a9:d8:22:5a:31:68:
79:dc:fc:a2:b3:b5:d1:1d:41:85:b5:10:dc:ce:c1:c4:75:c0:
e5:51:f4:38:9b:1c:57:5a:c3:aa:f9:f1:e5:b4:64:f3:14:f8:
d5:ef:1d:60:e1:de:aa:94:02:16:2a:25:a3:05:7b:15:30:d9:
05:19:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org