Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/w893-Sw3QLTh2Yx_LMmq_maKBMY.roa
File: w893-Sw3QLTh2Yx_LMmq_maKBMY.roa (raw, json)
Hash identifier: 7OSAprvIjiluQ0+FhUTDcRCi5V5XAfP3W9nB95YV2H4=
Subject key identifier: C3:CF:77:F9:2C:37:40:B4:E1:D9:8C:7F:2C:C9:AA:FE:66:8A:04:C6
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 018570CC0C88B42BB1FD96A8EAF265080B7F
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/w893-Sw3QLTh2Yx_LMmq_maKBMY.roa
Signing time: Mon 02 Jan 2023 04:44:58 +0000
ROA not before: Mon 02 Jan 2023 04:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.246.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:0c:88:b4:2b:b1:fd:96:a8:ea:f2:65:08:0b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Jan 2 04:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3cf77f92c3740b4e1d98c7f2cc9aafe668a04c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:8f:98:e0:c4:eb:71:29:54:ab:b1:d6:b3:
9a:e7:62:9a:75:cb:85:cb:49:dd:df:78:61:bc:72:
c7:b7:2d:34:da:dd:f5:ea:44:f9:10:70:48:ca:4d:
a6:4e:ef:72:ca:b1:32:f6:c4:bd:f1:14:7f:52:c5:
98:91:00:76:5c:87:3c:df:57:8b:e0:5c:6a:e9:7e:
ed:c8:c2:83:2a:6c:60:db:d0:81:12:43:f2:d4:6a:
07:23:a8:2f:0b:99:8e:76:70:5a:ad:74:e6:c7:a3:
39:aa:f5:3d:35:4a:16:92:4d:8c:34:18:85:36:8c:
26:b9:1b:d0:cf:92:af:f6:18:f9:04:eb:fb:d5:db:
5a:ae:cf:c7:03:17:0e:50:a3:48:3b:9d:7a:d2:9a:
b8:e9:46:98:e4:f1:17:27:20:aa:1b:8b:1a:43:2b:
b3:76:bc:59:c2:62:bf:92:3d:51:30:0d:49:40:3e:
9e:d7:ad:90:56:1a:b4:87:98:49:58:37:c9:09:8b:
b3:34:38:bf:1c:85:3d:65:93:59:92:27:00:dc:0d:
c8:ed:92:54:29:da:8f:43:7f:8c:b9:2b:58:6d:24:
78:6c:c7:2b:52:3f:d4:67:be:19:60:b7:89:dd:f2:
20:7a:3b:59:32:cc:a1:f5:6b:60:81:c0:98:5a:aa:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:77:F9:2C:37:40:B4:E1:D9:8C:7F:2C:C9:AA:FE:66:8A:04:C6
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/w893-Sw3QLTh2Yx_LMmq_maKBMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.122.0/24
Signature Algorithm: sha256WithRSAEncryption
87:14:ce:d1:e0:5c:ec:71:3e:b5:fb:55:f1:f1:af:ad:e2:e4:
d3:10:35:1d:c6:76:79:8c:2c:90:69:23:e3:26:e8:1c:fc:69:
ce:52:09:7d:80:af:22:dd:15:ac:68:dd:27:70:ec:cd:6e:b6:
02:a2:17:fb:df:af:ae:b5:69:a6:f5:f1:e0:41:87:ab:9f:f4:
11:fb:9a:98:a9:9a:1e:d4:24:e7:7d:89:d2:b6:b9:28:ef:48:
b7:a1:f8:a6:93:6b:e9:ea:be:7a:23:bd:d7:73:0c:43:0f:8c:
0d:43:42:07:53:e7:9b:43:fa:ce:11:85:50:35:8f:5c:4e:09:
1d:aa:75:79:23:fc:ee:77:f5:28:67:c3:24:c4:9c:59:9e:4a:
49:1a:ca:3d:bc:b0:33:63:f9:a6:a6:35:61:d9:31:d3:9b:30:
8d:d3:a0:bb:10:ba:fe:f9:8d:ce:03:f8:d8:73:e5:b4:9b:aa:
36:fa:7b:fe:54:d2:40:a7:34:f7:66:34:06:7f:22:27:95:0c:
2b:92:cd:fb:cf:e9:66:ca:1e:7c:92:0d:6d:ba:79:a6:5c:3c:
47:ad:a9:97:6c:cd:ec:0e:36:ef:a5:4d:a5:23:9f:1f:62:88:
ed:25:d2:c1:3f:f5:bf:d4:3d:f5:68:29:15:b3:79:f7:65:91:
75:f5:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:27 2024 by rpki-client on console-fra.rpki-client.org