Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/x9qm6tMBUHNoKbYhTQooO_-qacI.roa
File: x9qm6tMBUHNoKbYhTQooO_-qacI.roa (raw, json)
Hash identifier: T1Y3p1yUc/GJBgqIH9ZgPja/hz9NSBS2XeorXKAnjhc=
Subject key identifier: C7:DA:A6:EA:D3:01:50:73:68:29:B6:21:4D:0A:28:3B:FF:AA:69:C2
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01856FC2775F7CBDA2F1F753030E464E5EC4
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/x9qm6tMBUHNoKbYhTQooO_-qacI.roa
Signing time: Sun 01 Jan 2023 23:54:53 +0000
ROA not before: Sun 01 Jan 2023 23:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.135.254.0/24 maxlen: 24
193.73.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 15:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:77:5f:7c:bd:a2:f1:f7:53:03:0e:46:4e:5e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jan 1 23:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7daa6ead30150736829b6214d0a283bffaa69c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:80:d1:29:ec:27:a9:ed:d1:4c:05:54:66:
42:40:5e:ed:4f:db:d4:3f:10:de:db:14:f8:ec:13:
10:10:3b:3f:92:ac:cc:90:35:52:5c:6f:8b:6f:c6:
bd:f1:56:0e:12:d6:ce:63:d9:32:ba:4c:bd:f8:80:
70:50:b0:69:39:13:82:17:65:fe:c4:92:8e:db:c3:
1f:24:15:0d:00:92:ce:01:2c:f5:55:ff:8d:cd:ad:
9e:9a:f4:09:fd:d3:ac:6c:be:3f:0c:ae:d2:32:0e:
bb:cd:03:81:b0:22:e4:b5:a9:da:2a:83:b6:32:f3:
c1:9c:01:ff:8f:2c:ac:90:68:23:f7:04:80:81:f3:
f6:4a:2c:52:e6:1d:52:9d:75:fc:32:c5:d6:7c:b2:
8e:c5:3a:97:4f:ce:9c:8d:54:b4:c6:1b:66:d6:a0:
dc:06:11:27:74:20:2d:41:2a:a6:be:52:d3:04:00:
7b:81:83:16:f3:55:ef:b2:f0:e1:86:0b:1a:4d:52:
c1:26:4c:a6:59:13:96:11:a8:cb:f4:bb:8e:74:05:
9d:d2:72:ea:e3:9a:25:c5:f4:4d:98:81:97:0c:29:
6e:a2:93:6b:35:b5:f6:0a:86:40:7d:41:3a:5b:09:
3f:5d:a2:b8:ab:6e:40:0b:fb:cd:57:86:a1:b9:a3:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:A6:EA:D3:01:50:73:68:29:B6:21:4D:0A:28:3B:FF:AA:69:C2
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/x9qm6tMBUHNoKbYhTQooO_-qacI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.113.0/24
193.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:02:7f:0f:d8:d3:a0:59:0d:81:47:5c:ed:1a:cb:8b:45:ca:
76:22:a7:4b:c7:b2:a0:99:86:c4:15:24:f0:7d:da:83:2e:48:
f8:1b:79:a5:42:9d:ed:3d:c1:17:8f:ce:0a:47:fa:22:f6:2e:
95:ed:6f:0b:35:32:7c:13:8c:1e:77:6c:5b:44:ef:6d:c9:07:
06:19:0a:6f:51:c0:b4:a8:a6:22:ab:7e:31:08:e9:7a:f0:0e:
bc:4a:7b:9f:c1:8c:7c:64:32:a2:88:9e:44:a7:66:f7:a2:80:
62:3d:96:2e:b8:8f:ab:c9:f3:1a:0d:f8:3d:9e:e5:c5:96:fb:
ed:cf:7d:58:88:2a:c6:fa:09:a6:4f:4b:2b:e4:1d:eb:46:3a:
ea:e6:1b:36:b6:69:db:17:fe:1e:37:92:d0:7b:06:3e:dd:f1:
52:7f:03:c7:b6:67:86:95:ae:9c:1f:1f:df:7c:f4:46:a6:6a:
02:95:6d:37:5a:d4:17:98:23:67:fe:a8:d4:27:ba:ae:23:ba:
b1:58:e0:02:dd:81:34:6c:37:7e:3d:9e:fe:b9:65:85:aa:a4:
0c:4c:7a:43:ae:a0:48:fb:33:74:2c:65:dd:25:cb:be:50:8d:
f0:ac:7a:d6:da:a6:93:27:f0:f6:f0:38:fe:3c:a9:38:89:0f:
d5:01:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:59 2024 by rpki-client on console-ams.rpki-client.org