Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/3gHCVk3yjUYjkYb82dSw9wJNSaY.roa
File: 3gHCVk3yjUYjkYb82dSw9wJNSaY.roa (raw, json)
Hash identifier: /dinut24KfhSY5ZTubVQg1Oz/xe8JC4rRy1fKbG6CZU=
Subject key identifier: DE:01:C2:56:4D:F2:8D:46:23:91:86:FC:D9:D4:B0:F7:02:4D:49:A6
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 018572034F932C116B565A6473E9DD28EA03
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/3gHCVk3yjUYjkYb82dSw9wJNSaY.roa
Signing time: Mon 02 Jan 2023 10:24:57 +0000
ROA not before: Mon 02 Jan 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15422
IP address blocks: 193.104.231.0/24 maxlen: 24
195.24.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4f:93:2c:11:6b:56:5a:64:73:e9:dd:28:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jan 2 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de01c2564df28d46239186fcd9d4b0f7024d49a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:8e:fb:49:2f:94:27:f8:c4:e1:d9:e5:5a:
b3:86:50:b2:9c:15:47:75:3d:5d:8f:72:3e:f5:98:
b4:59:f8:7b:a7:54:33:4f:86:f6:e3:f5:e4:ba:46:
59:35:30:4c:fc:e9:a5:6b:76:38:46:96:0f:d5:7d:
91:43:6c:24:ec:7f:25:71:e3:60:e4:18:64:0c:f4:
01:09:fc:61:f3:7c:0f:01:c6:38:d2:a6:b5:32:8e:
3c:19:e8:bd:b7:37:de:66:69:a9:72:c5:ee:89:b1:
b1:1d:12:8c:e7:41:1e:22:3f:cd:4a:70:13:83:af:
82:7a:f9:b4:9c:41:32:7c:fc:3f:25:29:7a:00:d7:
cd:c3:53:87:d9:a9:b4:63:6a:cf:65:3f:59:54:37:
0b:7e:20:d5:81:09:c2:79:49:c7:14:9e:f0:68:fe:
69:2c:6f:af:29:f8:ad:6d:d5:48:e9:45:dd:12:d5:
bb:be:fe:ec:5c:0a:04:cf:17:21:32:5b:b1:1b:37:
a4:94:f9:17:5b:c9:a1:42:55:78:fe:77:ab:34:86:
71:44:36:4c:d2:eb:e9:8c:ba:c3:82:f3:63:32:d5:
7a:42:c5:f1:83:bb:36:3e:a6:a2:7a:64:b2:29:54:
53:32:73:9d:c3:d0:4f:fb:6d:60:8f:68:fc:82:cf:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:C2:56:4D:F2:8D:46:23:91:86:FC:D9:D4:B0:F7:02:4D:49:A6
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/3gHCVk3yjUYjkYb82dSw9wJNSaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.231.0/24
195.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f0:a1:d8:22:31:05:93:34:41:48:e6:c0:38:de:38:d3:8d:
30:b1:c1:2b:93:46:6d:d8:2a:b0:c9:38:cf:e5:21:02:97:56:
5c:e8:80:b4:cf:48:16:f0:92:f7:ab:f5:cc:82:d3:1d:b1:e4:
fb:29:c9:3d:95:da:21:e5:2c:03:bd:71:e5:64:33:ae:03:9d:
a1:20:57:ed:ae:bf:1b:63:9d:f2:da:13:25:a1:70:bc:90:8a:
40:70:34:6c:69:22:06:63:e1:5e:7b:19:91:e6:ad:2b:2c:7f:
56:79:5a:ee:25:ac:21:f3:ea:7e:4c:ed:f7:80:a8:d4:09:e6:
aa:73:7d:7f:ea:ae:78:7a:a6:1c:83:41:c5:be:6f:e9:4c:6a:
88:89:c2:67:04:fc:8f:c6:8a:93:ae:08:12:23:22:dd:03:22:
49:49:93:f8:80:69:62:b6:18:f5:0b:57:4e:88:57:7b:e7:f0:
56:93:ae:75:db:e2:7f:63:d0:81:c4:bb:50:a9:4a:3c:7e:fd:
96:0a:2e:81:6b:40:aa:51:5f:74:be:20:68:cf:1c:0a:40:48:
4f:16:7f:3b:0b:6c:1e:42:ef:b8:49:c1:ba:d2:4d:b4:8b:58:
9b:fa:0f:40:db:9c:aa:17:5c:0d:cf:12:3e:31:8d:a5:db:18:
bf:6b:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org