Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/n2PeanjNt0Zok3-pueRf2tRhTlQ.roa
File: n2PeanjNt0Zok3-pueRf2tRhTlQ.roa (raw, json)
Hash identifier: 9wXvm7NbmkQXJ8/ASKW/7bCArTAOhxAt2m1oPS72Cfk=
Subject key identifier: 9F:63:DE:6A:78:CD:B7:46:68:93:7F:A9:B9:E4:5F:DA:D4:61:4E:54
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 01856EAFAD0EC3C49BF99281B6BD986ACAB3
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/n2PeanjNt0Zok3-pueRf2tRhTlQ.roa
Signing time: Sun 01 Jan 2023 18:54:44 +0000
ROA not before: Sun 01 Jan 2023 18:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.31.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ad:0e:c3:c4:9b:f9:92:81:b6:bd:98:6a:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jan 1 18:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f63de6a78cdb74668937fa9b9e45fdad4614e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:39:47:41:01:08:17:2b:9d:c5:40:e5:a2:
35:0f:94:ce:f1:6a:2a:f7:69:3c:57:c6:a0:d0:4e:
29:c0:d1:4c:e6:56:12:f9:cf:a0:96:5e:4a:e7:e1:
40:ae:23:e4:b2:0b:16:3b:a8:18:70:9c:ff:87:b5:
ce:ab:aa:1b:41:87:55:27:e0:ff:f1:4f:b8:84:00:
7f:71:6f:a0:34:a0:1e:f9:ec:0f:63:b8:37:18:34:
db:ca:fb:b2:f2:2c:5e:a8:85:59:d4:a1:f4:4a:df:
06:b5:72:9a:21:d0:42:a8:41:c3:50:83:81:a0:39:
04:e3:8c:10:f5:07:1e:af:39:54:d1:c1:dd:bc:87:
5e:cb:d2:fe:29:9e:e3:d1:11:7d:f3:b6:52:3a:37:
39:b2:e6:9f:dc:51:7b:c3:5c:89:30:96:38:97:64:
c5:09:60:56:9e:ec:83:4f:42:84:aa:df:11:e1:77:
f7:ca:1d:3c:13:77:fd:2c:7c:dc:6c:6a:a6:e7:10:
04:a1:80:71:37:3c:fd:75:ce:b8:68:e4:00:0f:c2:
a9:f7:0d:56:7d:19:b6:a4:eb:2f:12:60:a9:33:94:
47:d9:81:d2:c9:f5:40:01:5d:c4:5a:4a:ac:f4:e8:
69:58:fe:11:5c:fb:61:c1:2b:fb:fa:d1:5c:c0:c4:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:DE:6A:78:CD:B7:46:68:93:7F:A9:B9:E4:5F:DA:D4:61:4E:54
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/n2PeanjNt0Zok3-pueRf2tRhTlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e3:27:66:78:11:1b:67:eb:eb:92:4e:bf:e6:1f:35:ce:0e:
cf:81:e1:48:9b:51:cd:4b:57:91:18:4a:f6:6a:80:f3:bb:e1:
6c:87:1e:30:d6:54:f5:1d:da:03:4e:27:73:9c:21:5b:b4:51:
a6:8f:18:aa:6f:25:e5:e7:6e:04:c3:a0:92:cc:55:32:b0:f4:
15:92:76:b5:eb:13:9d:9c:43:9d:70:c9:ca:e0:bf:cc:3c:c1:
49:fa:ab:9d:9b:c9:95:b7:de:cc:ae:65:1e:5f:99:e9:7c:19:
21:d9:9d:36:b9:2f:d5:84:70:b1:57:48:4d:10:78:fd:f9:ed:
40:32:b8:bc:95:2c:90:6a:f4:ce:9a:00:e6:a5:51:50:53:25:
a2:e4:20:b2:8c:44:74:c6:96:66:5a:1b:72:e1:ec:05:9b:97:
90:e8:ef:f1:5a:f8:72:7c:d2:53:20:2c:25:fe:86:a0:37:27:
74:85:1a:b3:07:48:e2:eb:49:af:b7:e4:9a:f7:eb:d7:8d:ac:
91:12:b9:4a:72:57:cb:18:e0:03:cd:06:f6:27:38:f3:23:aa:
04:30:9c:7c:53:71:9b:51:87:61:d9:47:1c:e2:8c:b9:eb:92:
bd:f3:68:79:39:5d:23:48:d5:15:48:a3:8c:2d:7a:16:a2:57:
70:b2:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:21 2024 by rpki-client on console-ams.rpki-client.org