Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/TMzfVX1fjaWio5rCqbTVXkFdf5U.roa
File: TMzfVX1fjaWio5rCqbTVXkFdf5U.roa (raw, json)
Hash identifier: d0I32lUuLhAdUG/AzcNSSEkAoqZjzKJRYeM6u6wP70Y=
Subject key identifier: 4C:CC:DF:55:7D:5F:8D:A5:A2:A3:9A:C2:A9:B4:D5:5E:41:5D:7F:95
Certificate issuer: /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial: 01856D81B1314BDAA27AD3C94F6665CD3676
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/TMzfVX1fjaWio5rCqbTVXkFdf5U.roa
Signing time: Sun 01 Jan 2023 13:24:53 +0000
ROA not before: Sun 01 Jan 2023 13:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48343
IP address blocks: 193.33.192.0/24 maxlen: 24
193.33.192.0/23 maxlen: 23
193.33.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:b1:31:4b:da:a2:7a:d3:c9:4f:66:65:cd:36:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Validity
Not Before: Jan 1 13:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cccdf557d5f8da5a2a39ac2a9b4d55e415d7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:cc:0e:ed:50:2d:72:2c:8d:47:30:cd:b3:
41:b4:42:4a:03:bd:08:01:39:c9:e3:69:16:b8:3b:
5f:e2:c0:09:4c:48:2e:90:28:c3:47:12:6f:fb:71:
28:f2:86:fe:dc:7c:2a:cc:c9:5e:05:f1:29:f4:a7:
49:7d:c0:f3:e9:e8:74:d9:2e:04:3e:8a:06:9b:0e:
ce:5f:32:eb:c6:9a:d0:f7:3f:1f:f3:81:53:c8:96:
9d:0f:09:62:1b:76:db:b1:34:b1:2b:a1:46:c6:59:
5c:08:3d:d0:fe:60:92:d8:7f:65:58:0b:48:d0:c2:
27:d6:75:55:94:c3:b5:dc:fd:32:cd:f3:b5:06:bb:
94:6a:17:11:13:5f:14:d8:cf:2b:22:00:15:57:d9:
9c:4a:e5:56:7c:8b:79:6f:f0:ce:ad:80:12:22:75:
a7:16:19:70:07:7c:71:0e:dd:0c:3a:75:db:7a:43:
91:98:3f:df:c9:06:ea:36:e6:7e:47:f9:1a:18:28:
e0:82:1a:38:9d:28:69:3a:aa:30:e5:db:3a:d8:41:
e8:39:a7:b2:f9:50:06:85:e9:02:30:57:49:0f:bf:
50:83:31:df:26:9f:7b:af:6f:0f:06:3f:db:5d:61:
14:76:47:56:3b:83:2c:d2:5a:6a:f2:a4:c2:8e:c2:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CC:DF:55:7D:5F:8D:A5:A2:A3:9A:C2:A9:B4:D5:5E:41:5D:7F:95
X509v3 Authority Key Identifier:
keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/TMzfVX1fjaWio5rCqbTVXkFdf5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.192.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:b0:4e:45:3a:0a:92:af:94:0b:c0:47:ea:e6:a9:9b:a3:29:
bf:32:a3:40:97:ba:52:26:0c:5d:e8:59:c3:f1:d1:79:9c:d7:
1a:de:6f:d8:1c:28:c0:aa:8d:25:22:45:f5:a8:49:ae:c5:41:
02:f0:a1:40:19:b5:82:47:7c:61:27:a8:26:15:0f:7b:42:e0:
9c:11:63:88:62:45:7b:a9:48:f9:68:df:ca:0b:fa:92:7c:28:
0e:7c:05:71:f0:df:23:28:31:7c:2a:86:bb:46:9b:13:6e:69:
36:f6:9a:41:56:e9:d4:8d:84:2f:bb:ca:57:54:73:d7:c5:d8:
c9:4b:36:ee:20:44:ba:f9:67:fb:6f:57:33:35:9d:bf:bf:d0:
c5:55:c5:cc:6d:5f:f6:40:64:43:d8:1f:d9:a9:22:05:63:52:
ce:bc:19:95:74:d7:3c:be:70:97:77:59:0d:a0:0f:6d:4b:c1:
4f:14:9a:be:be:8b:6a:7c:8c:38:4a:55:44:e1:e5:d3:d9:a8:
0e:40:c8:e8:e3:4d:e1:78:25:a3:b0:2a:8b:a1:2e:13:15:f6:
5c:f7:8e:0e:2b:88:5c:00:29:cc:8e:ce:a3:e6:fd:80:21:8f:
bb:c1:91:03:6e:1f:3c:91:12:13:8c:cd:f2:48:93:ae:5e:0c:
ca:ac:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org