Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/lW2meo_FI7YQz7tffk3wifjX8As.roa
File: lW2meo_FI7YQz7tffk3wifjX8As.roa (raw, json)
Hash identifier: KzoUwITMjQo2p9riEDblAp1WtqINsaOGgkWgFg35BQY=
Subject key identifier: 95:6D:A6:7A:8F:C5:23:B6:10:CF:BB:5F:7E:4D:F0:89:F8:D7:F0:0B
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 01856F429E195796E7FB62502DDA0AB5A154
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/lW2meo_FI7YQz7tffk3wifjX8As.roa
Signing time: Sun 01 Jan 2023 21:35:14 +0000
ROA not before: Sun 01 Jan 2023 21:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31060
IP address blocks: 193.23.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9e:19:57:96:e7:fb:62:50:2d:da:0a:b5:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Jan 1 21:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=956da67a8fc523b610cfbb5f7e4df089f8d7f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:e2:8a:6c:4f:ff:93:93:fc:9b:0e:18:0f:
71:b4:96:3a:05:6e:3f:73:21:39:17:cf:3c:fe:2a:
f9:a8:2e:a4:67:4b:00:e9:bd:69:f0:6d:fb:22:d1:
16:f9:64:6c:ef:c4:2b:8b:8a:55:a2:fd:08:ec:3d:
94:c2:3f:f4:03:9a:34:ad:16:66:b4:3e:7f:72:f1:
35:74:62:0d:56:db:e9:c6:fc:c6:f8:03:c3:e4:2c:
11:ee:60:fa:2c:0d:3f:61:84:93:15:c0:96:df:cb:
39:0f:83:ba:ef:95:00:94:58:f5:a2:c2:61:26:1a:
4f:77:62:33:71:2d:f3:b5:38:c2:4d:fd:2b:68:0f:
b0:e5:e7:88:2c:09:6e:92:98:db:a0:9a:a5:28:73:
47:82:e0:95:e2:63:00:39:c5:1f:86:32:2f:25:51:
cb:4a:df:9d:bf:fc:15:14:4b:89:54:38:0d:27:ab:
f8:b4:cc:b4:ec:6f:72:68:a0:2a:88:8c:9a:81:4d:
bd:9b:04:3c:39:00:16:0a:f0:10:7d:36:4c:82:63:
4d:db:46:26:e4:d2:33:79:32:bb:e3:a0:15:0c:82:
93:8b:c8:30:96:ee:31:d7:68:ab:c3:6a:f6:88:1d:
8c:33:96:ff:60:88:c1:2e:47:b1:1e:52:f3:3b:43:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:A6:7A:8F:C5:23:B6:10:CF:BB:5F:7E:4D:F0:89:F8:D7:F0:0B
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/lW2meo_FI7YQz7tffk3wifjX8As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:36:b0:22:13:50:a4:e1:66:8d:9e:4b:22:7d:f2:6b:3b:bc:
c6:69:bf:b9:78:09:ac:cc:01:ee:c7:a3:c6:63:65:f5:71:f1:
91:b7:07:6a:8f:0a:d2:09:e2:fb:f1:80:0d:10:45:dc:c7:d2:
e9:ac:91:4f:72:8a:83:fe:f6:0d:59:88:11:6e:cf:e9:d4:f3:
72:b8:01:0b:8f:32:c7:af:c0:bf:28:4a:1e:24:cf:a4:4c:79:
e7:f8:e4:89:cf:1e:d4:a6:ce:06:d1:00:67:2f:f4:d7:b2:99:
4b:0e:11:29:71:4b:55:10:5d:b2:2d:45:c7:58:bf:61:c9:b2:
19:77:4a:fd:a1:22:e3:84:52:7e:0b:83:47:12:19:90:ab:7d:
11:89:8c:26:99:19:2f:2f:7b:ac:41:57:ce:8a:db:14:fe:82:
32:7c:0f:81:61:44:a6:2c:60:35:25:d9:77:46:3f:a6:04:8f:
aa:84:b3:02:19:e7:7d:43:49:6a:a1:37:e5:d8:39:5a:99:bd:
fb:3a:1d:c1:2c:54:5a:83:f9:8a:ce:27:d3:bb:21:2f:33:32:
4e:53:66:f5:96:9e:10:57:58:7e:b3:10:19:d0:e7:e5:6e:3a:
87:d6:3d:73:cf:23:c6:e6:07:77:4c:0d:34:0c:9f:bc:0e:8a:
7e:74:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:33 2024 by rpki-client on console-ams.rpki-client.org