Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/1EA3yKZ81RDAjI6GEpOoTkLZ1UY.roa
File: 1EA3yKZ81RDAjI6GEpOoTkLZ1UY.roa (raw, json)
Hash identifier: 48GrlH20gMJgyFCl4sQSYB01WHEoanV1xTnNMYAxtdw=
Subject key identifier: D4:40:37:C8:A6:7C:D5:10:C0:8C:8E:86:12:93:A8:4E:42:D9:D5:46
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01856DA641412C57D14E7DE8FE7B78DE8994
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/1EA3yKZ81RDAjI6GEpOoTkLZ1UY.roa
Signing time: Sun 01 Jan 2023 14:04:50 +0000
ROA not before: Sun 01 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47599
IP address blocks: 193.203.96.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:41:41:2c:57:d1:4e:7d:e8:fe:7b:78:de:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jan 1 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44037c8a67cd510c08c8e861293a84e42d9d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:7f:9d:f0:99:45:c3:ca:52:03:d1:b5:05:
99:8d:0e:6a:55:3a:a9:92:0f:be:2c:8d:6c:94:f4:
05:85:e2:f1:f8:58:c0:95:1e:da:4c:83:b3:5d:7b:
4d:d2:d6:33:5a:e4:e4:8d:55:fc:9e:c7:e6:3a:d0:
08:02:2b:89:ac:4a:c2:3f:f9:1b:b7:dc:3e:19:82:
b6:26:f3:7a:9c:f2:6a:9e:d2:6b:6b:6d:9c:df:f8:
fa:a4:10:b1:21:b4:26:2c:78:d7:d2:26:ad:c3:84:
6b:db:d3:e4:f7:87:d4:09:25:8a:ce:38:eb:4e:d5:
d9:f3:dc:23:4e:e8:a2:53:2c:d2:b0:70:88:8a:95:
4d:0e:4a:67:68:9b:6f:dd:d6:1c:b3:99:f5:86:ed:
fc:99:04:71:c8:81:75:5a:7e:e1:65:5c:7d:ef:a4:
f5:4e:e4:30:fd:11:15:26:c0:35:8f:65:ad:0f:fe:
a7:2e:c9:2b:16:20:8c:dc:e8:1c:5a:c9:db:b7:3e:
d2:74:59:ba:8a:61:f3:8b:b7:52:59:66:05:1a:0b:
09:c0:6d:f6:4e:c3:9f:ee:94:9d:7a:8b:0e:4c:e6:
03:91:e2:30:02:72:93:8f:5b:c8:42:9a:dd:75:a0:
a8:a7:37:06:c0:84:62:0a:7f:b7:44:4e:e6:b8:4a:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:37:C8:A6:7C:D5:10:C0:8C:8E:86:12:93:A8:4E:42:D9:D5:46
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/1EA3yKZ81RDAjI6GEpOoTkLZ1UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:07:21:c5:48:e7:d7:a9:bf:a3:ce:71:82:c4:da:38:12:b0:
1a:f4:fb:ac:12:be:da:e9:ec:fd:73:7f:84:64:57:fc:03:7f:
96:78:8d:28:61:39:ed:10:7d:5c:de:79:21:85:ef:48:c9:fc:
bc:ff:9b:be:d9:9e:6f:f9:bb:4d:df:3d:c3:4e:f5:33:63:62:
dc:69:0c:8a:af:c0:96:a9:3f:28:41:82:46:1b:e1:00:fe:6a:
c8:6c:9c:8c:f3:67:c8:f3:f4:2d:d7:83:3d:6c:09:ce:f0:f6:
70:00:07:8b:58:3f:4b:c3:39:1e:81:25:b8:74:b6:f1:9e:aa:
39:ec:cd:df:98:10:08:ed:62:2d:1d:40:55:f5:9e:22:9e:ca:
f5:d9:af:9d:81:d8:36:99:24:c5:11:31:dd:a7:18:a8:57:ea:
71:c1:e5:7b:f6:67:19:f6:f6:eb:b9:d7:7f:28:b4:83:13:5d:
dc:bc:73:f6:ba:2e:7d:d7:9c:9c:0f:c9:be:d2:c6:cc:4d:0d:
b5:88:53:c7:ef:91:61:df:83:4e:12:3d:be:32:c0:d4:37:f9:
b2:fd:be:ae:1a:4e:60:ad:76:de:80:ce:5a:bf:e6:ab:88:5d:
c7:90:b4:ef:4e:57:2b:9f:bb:7d:bb:24:e8:fe:cf:1f:63:dc:
ee:fe:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org