Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/M1Ys5eboDqngwL9AiCBJuOlbkCg.roa
File: M1Ys5eboDqngwL9AiCBJuOlbkCg.roa (raw, json)
Hash identifier: 0eCtEtM5uWj1RyYGV9qvKnPFmBN13CbpM/D6ShWMug4=
Subject key identifier: 33:56:2C:E5:E6:E8:0E:A9:E0:C0:BF:40:88:20:49:B8:E9:5B:90:28
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018570CBFCB8EBBB45705265F51F3FC1A876
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/M1Ys5eboDqngwL9AiCBJuOlbkCg.roa
Signing time: Mon 02 Jan 2023 04:44:54 +0000
ROA not before: Mon 02 Jan 2023 04:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49063
IP address blocks: 193.0.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:fc:b8:eb:bb:45:70:52:65:f5:1f:3f:c1:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 04:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33562ce5e6e80ea9e0c0bf40882049b8e95b9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:fc:f4:a9:60:ee:2b:7f:f4:68:af:01:16:
59:3b:c5:35:ed:39:76:f6:76:69:ee:b9:78:e9:c0:
dd:50:67:92:12:03:3a:fc:66:33:44:4a:65:50:b7:
75:5d:1c:b9:a0:f7:b6:98:87:a4:e6:fa:ba:f0:5e:
02:75:fb:06:6c:d5:12:84:f4:ea:c0:01:0f:c2:39:
22:bb:ec:17:15:52:15:4f:3d:2b:b2:47:84:c1:cd:
fb:1b:18:5d:dd:15:5b:9c:72:af:6e:c5:cb:17:32:
dd:1e:39:13:fc:01:e7:55:52:c0:ac:3c:e4:d3:bb:
93:07:1b:67:ba:7e:20:b1:31:b2:be:1d:73:ec:1b:
81:cd:92:06:eb:27:cc:ab:f9:07:d2:58:11:39:c3:
0f:a9:38:9d:3a:f5:7a:92:a4:13:e1:c9:3a:69:b5:
28:de:b7:fb:d4:c7:2f:d4:97:1f:75:44:97:d0:89:
c4:20:45:d9:bc:54:86:94:0a:9e:1a:66:fa:88:26:
f9:3b:df:f7:18:47:1f:6b:ef:16:6d:51:45:c8:6a:
07:4f:ab:0e:93:f2:ff:83:58:4d:ee:a3:aa:22:b9:
32:a3:45:71:a3:a7:1d:11:0b:60:63:59:9c:e6:41:
fc:f7:f5:8b:a6:be:47:f2:c7:50:83:c3:e7:50:28:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:2C:E5:E6:E8:0E:A9:E0:C0:BF:40:88:20:49:B8:E9:5B:90:28
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/M1Ys5eboDqngwL9AiCBJuOlbkCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:90:f3:5b:d0:16:4f:0b:13:63:46:93:d6:31:ec:d8:81:d5:
61:7f:29:93:18:1c:14:cc:27:d2:11:47:4c:dd:01:57:f2:f4:
72:d2:9a:67:77:60:03:70:7e:be:33:ce:22:ee:dd:d1:67:02:
4e:7e:49:83:96:1d:38:e3:ae:9b:7d:bf:04:14:5d:e6:2c:3a:
13:3e:f8:d0:ae:fa:cf:81:a2:7a:a5:7a:2f:d2:6f:12:e8:c6:
2c:2e:28:4a:b7:bf:34:cb:61:a9:a5:7e:d6:36:0e:70:67:67:
f8:f6:cf:c8:13:c0:37:d3:4b:0d:bf:79:58:d1:f8:00:b0:ec:
bf:43:22:b9:6a:25:0f:44:8c:06:b1:66:1a:94:fc:32:63:2f:
7b:27:3e:1e:0b:7b:a1:37:3b:c0:b3:fe:86:71:df:87:10:d6:
d8:ef:39:42:c8:c3:96:8f:a1:6c:74:1e:99:ee:9a:eb:2e:ee:
86:42:7f:60:d5:67:73:51:7c:86:36:2c:81:a6:86:68:2b:88:
35:73:7a:7c:16:5b:88:9d:1e:9a:a7:ac:21:81:60:ed:95:40:
cd:fb:e1:ed:8a:0b:13:fb:70:6d:ba:9a:cc:3d:3f:41:5d:8b:
e1:17:de:42:60:98:d9:b4:73:5b:9a:5c:fa:48:91:34:6d:aa:
08:7e:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-fra.rpki-client.org