Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/AtwNruNlDx_rhnfwUDpwiO35i5M.roa
File: AtwNruNlDx_rhnfwUDpwiO35i5M.roa (raw, json)
Hash identifier: tuqfrSxEdZN8PtqnE6Bnv/RhGqwka5O7MQh/frTMmSc=
Subject key identifier: 02:DC:0D:AE:E3:65:0F:1F:EB:86:77:F0:50:3A:70:88:ED:F9:8B:93
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 01856D4192D5764188424363497012D3C92E
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/AtwNruNlDx_rhnfwUDpwiO35i5M.roa
Signing time: Sun 01 Jan 2023 12:14:52 +0000
ROA not before: Sun 01 Jan 2023 12:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41622
IP address blocks: 193.104.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:92:d5:76:41:88:42:43:63:49:70:12:d3:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 1 12:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02dc0daee3650f1feb8677f0503a7088edf98b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:22:cd:6e:d3:fa:43:59:84:64:44:d1:7e:
72:b9:75:c7:a7:e7:e5:41:b6:1b:45:15:78:59:68:
dc:a2:a6:bf:db:ab:7c:80:c4:a2:6f:3d:f6:32:7e:
2b:6c:b9:5c:0c:ac:9e:8b:42:11:90:84:ee:2e:91:
18:bb:6a:15:3b:1c:c8:3f:de:d6:3d:03:42:48:0a:
de:94:b0:de:20:df:d4:5b:e2:c3:a5:41:e3:9b:b9:
ef:08:0a:02:a0:56:33:93:3f:94:99:db:86:20:61:
a4:d2:82:a4:c8:f1:fe:ab:0f:64:38:09:ca:d4:e0:
48:77:93:fa:ad:98:0a:28:0f:5c:f0:70:80:c3:30:
e7:4a:a8:66:3e:bc:25:22:eb:0f:a9:55:d0:1f:1f:
ee:b0:83:29:7f:ae:a9:70:67:69:1b:78:8a:a0:2a:
93:7f:d2:e6:fb:08:3c:f5:00:52:bd:3c:b4:e7:80:
b4:f2:d0:69:a4:8d:9a:0a:17:a9:02:48:65:cb:42:
67:ab:d8:a1:aa:f7:ec:4e:62:b6:68:2e:29:2c:01:
53:22:78:77:60:5e:54:03:58:e8:ab:db:08:f7:45:
c7:67:b2:83:9e:a5:48:9f:9c:fe:ae:79:d5:b8:3e:
39:4e:e2:57:11:72:dc:54:f2:59:9c:4d:dd:50:64:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:0D:AE:E3:65:0F:1F:EB:86:77:F0:50:3A:70:88:ED:F9:8B:93
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/AtwNruNlDx_rhnfwUDpwiO35i5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.116.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ee:94:82:ad:7c:1d:83:0d:eb:ca:bc:89:d8:bd:8b:73:9d:
74:45:62:f2:ea:59:7f:9c:55:be:07:13:75:51:7a:9f:9b:84:
54:13:fe:f3:d9:5f:25:a8:95:43:2d:48:75:45:bf:91:7a:0a:
84:b2:9f:d9:b7:2c:d4:03:0b:88:da:a1:43:69:86:40:29:1d:
0e:fb:cf:7d:f9:93:4b:a4:7b:eb:fd:f1:a5:6d:cc:b7:6c:83:
21:4e:32:2e:98:d6:38:6b:3e:55:c0:36:fe:98:88:2c:2c:5b:
8f:51:bc:0c:59:b0:17:d2:c2:19:ee:a4:fa:8f:cd:07:14:e9:
25:6a:8f:f6:36:e8:26:67:7e:73:4c:b5:6d:93:b7:b6:8d:d6:
58:ef:04:0a:b2:d5:81:34:b7:9c:76:c6:59:4c:9e:25:df:ef:
f0:d6:8a:ee:66:5f:3a:e8:03:bb:2b:b7:0a:af:a7:0a:e1:79:
07:d3:54:52:72:4a:63:b3:81:f6:f0:7d:fc:67:b0:6b:41:ce:
6a:26:c9:90:e4:0c:8c:5a:48:e8:c2:e2:a8:12:08:f2:bc:ef:
07:63:e6:bb:2d:44:bb:0e:b8:5b:dc:fa:5c:90:76:2b:19:3d:
4f:6b:27:9b:19:2e:a4:ed:ee:87:6d:9d:8c:f7:12:07:88:2c:
76:3a:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:03 2024 by rpki-client on console-ams.rpki-client.org