Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/s3ZpRviNS2UN0o-B5wyhl90rQAY.roa
File: s3ZpRviNS2UN0o-B5wyhl90rQAY.roa (raw, json)
Hash identifier: WNqlVbbUGohFAyjC/8fnGxkeO7+QOrVizOqiqu8idXg=
Subject key identifier: B3:76:69:46:F8:8D:4B:65:0D:D2:8F:81:E7:0C:A1:97:DD:2B:40:06
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01867DA9C4CF76E5D3F05571EB469163E69A
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/s3ZpRviNS2UN0o-B5wyhl90rQAY.roa
Signing time: Thu 23 Feb 2023 09:45:23 +0000
ROA not before: Thu 23 Feb 2023 09:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 192.145.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 08:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:a9:c4:cf:76:e5:d3:f0:55:71:eb:46:91:63:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 23 09:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3766946f88d4b650dd28f81e70ca197dd2b4006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:be:1f:3e:b4:e2:47:07:87:e1:51:bc:97:
c0:d0:97:6b:c7:3c:f9:18:ec:c7:5e:77:bf:f5:4d:
45:0e:fb:84:5b:3e:54:40:c6:b3:9c:6e:07:59:a2:
a2:ec:c2:3c:47:5f:b1:a5:45:61:b3:9f:10:e4:e1:
5c:12:11:74:3a:0a:c7:e6:43:60:a3:d7:4e:b9:80:
9d:aa:8b:14:55:4b:11:0a:e7:d9:81:f5:17:1e:58:
dd:52:6e:d1:07:d4:8a:c0:f3:c5:55:68:8f:69:93:
cb:49:17:3c:40:d7:a3:2a:0a:21:dd:2b:b1:92:42:
92:41:59:1d:74:a5:9b:9b:75:48:c1:ea:3d:a0:12:
2b:b1:fb:8d:b0:83:8b:da:ff:6f:ce:58:cc:d6:72:
42:d6:b1:07:a6:c8:e1:68:b2:82:3e:20:cd:18:ce:
49:2a:76:9b:b9:ad:19:13:91:dc:ca:2c:9d:de:2a:
e0:d1:bc:b9:c1:4c:aa:e5:4f:f0:62:b8:fc:0b:21:
4d:89:8a:4f:69:1b:a2:84:cd:fb:66:f0:0e:5e:5e:
bc:d0:a8:d7:25:fb:c3:be:1e:a4:aa:3a:35:2a:b4:
9f:19:1e:ba:1f:af:2b:9f:a4:72:31:6f:1e:30:a4:
85:40:fe:a2:82:82:c3:43:94:0a:1f:ce:07:25:bc:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:69:46:F8:8D:4B:65:0D:D2:8F:81:E7:0C:A1:97:DD:2B:40:06
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/s3ZpRviNS2UN0o-B5wyhl90rQAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.54.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5a:84:e2:8b:e0:e9:1f:51:cc:63:4a:fe:36:22:ad:76:50:
5a:bc:21:91:9b:bc:99:e0:58:85:2f:4e:42:25:12:23:f6:a3:
08:53:3d:5b:fb:66:13:07:37:45:ed:b2:36:02:13:4c:32:79:
85:53:47:bb:5c:47:00:38:7d:c1:38:a2:b1:25:11:aa:fc:3d:
18:a9:40:ab:29:9e:74:07:83:54:09:a2:4d:aa:7b:31:cb:b7:
e0:40:e4:81:a8:9a:c1:5a:a0:86:31:a4:7b:b1:f9:e0:f1:f2:
a3:66:d2:3c:c5:7c:49:72:de:85:c0:e8:cb:d7:ee:f5:54:15:
dd:7e:d5:4d:15:8c:fc:b7:be:e8:50:17:0d:29:c2:47:5f:ca:
12:66:16:a7:d0:41:b4:e0:e9:e1:8d:62:d6:2e:a9:5d:de:15:
9f:e9:28:ba:6e:90:36:02:39:e1:62:94:29:7c:75:aa:5c:c2:
cc:af:54:1d:d8:c3:73:53:69:d2:c6:64:fd:45:6a:76:45:e9:
d4:00:c2:ce:8b:07:40:0f:57:44:a5:3f:b5:a8:a2:7b:47:9f:
a4:20:21:ca:63:75:06:ea:d5:38:52:f3:cd:43:b0:f8:e3:43:
93:45:5d:9c:dc:39:3d:1e:65:a6:a2:90:f7:60:eb:da:21:ef:
aa:ba:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org