Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0uA5hTB-4fC8lMXX1J_2tPpYziY.roa
File: 0uA5hTB-4fC8lMXX1J_2tPpYziY.roa (raw, json)
Hash identifier: d0Am+KzVnaKHjzQnvJqOd++2iE6B/WH9wjsOfpncJiw=
Subject key identifier: D2:E0:39:85:30:7E:E1:F0:BC:94:C5:D7:D4:9F:F6:B4:FA:58:CE:26
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA4508A5AFA9DB24723F3448BDDE9
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0uA5hTB-4fC8lMXX1J_2tPpYziY.roa
Signing time: Sun 01 Jan 2023 11:14:52 +0000
ROA not before: Sun 01 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44639
IP address blocks: 193.255.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a4:50:8a:5a:fa:9d:b2:47:23:f3:44:8b:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e03985307ee1f0bc94c5d7d49ff6b4fa58ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:bf:c2:31:7e:d2:99:9c:78:4b:7a:78:90:
09:d5:7d:80:b8:bd:91:a0:0d:f1:17:4f:eb:08:41:
20:ba:06:17:88:c0:ee:09:50:8a:84:d8:17:4a:69:
ce:8b:61:aa:bf:11:a5:4e:28:e2:e2:77:62:8f:9c:
64:ec:c9:01:39:74:44:a5:11:36:f6:21:f1:18:bd:
3e:3f:e6:af:6b:22:2d:60:86:83:0a:4a:fa:33:c1:
bb:5f:8d:7d:1e:dd:84:7a:55:07:a2:eb:81:5c:8b:
a8:78:d9:95:f1:2b:63:7e:31:fe:b8:00:09:73:69:
11:0d:9c:1b:5e:f6:81:33:12:ed:01:93:0d:2f:a0:
79:56:01:30:8b:4a:c2:63:99:bb:ef:66:4a:64:cb:
4b:41:a5:e7:96:15:5c:77:a4:cf:7b:2c:e8:bc:16:
b0:cb:ea:99:d2:c3:c8:e8:a8:be:3b:57:e2:9d:d8:
10:1a:08:e0:53:9d:c8:eb:35:43:13:93:46:58:09:
8e:ab:9e:71:5a:eb:c8:c7:88:22:3b:2d:ed:27:d5:
e7:c2:7a:f3:81:23:45:41:a7:71:50:d0:b5:b6:64:
90:9c:c0:27:28:7a:d8:bc:ca:e5:6e:85:e2:22:f7:
14:bc:8e:d1:1c:8c:5a:6b:36:ee:44:01:22:60:0e:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:39:85:30:7E:E1:F0:BC:94:C5:D7:D4:9F:F6:B4:FA:58:CE:26
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/0uA5hTB-4fC8lMXX1J_2tPpYziY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.120.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1c:95:d2:b2:20:ac:03:4d:1f:2a:67:8b:8f:68:7e:76:de:
fc:9c:18:fb:f6:3e:5c:84:db:4e:31:44:2c:51:46:6b:5b:a3:
92:33:86:ae:85:74:3f:f3:d0:1f:ea:25:68:8c:af:32:83:63:
42:b7:5f:ae:f6:a0:61:5a:ed:00:8e:2a:b5:16:0b:16:83:65:
28:73:a3:d1:c7:47:1d:df:1b:5a:36:d3:2b:ea:ba:43:87:dd:
06:96:d5:68:ad:ce:dc:42:9e:3e:c2:0b:b1:2e:b6:96:8c:d3:
99:94:af:32:3e:77:60:21:13:f7:e2:e6:73:8d:9e:ac:7e:d3:
38:10:30:56:69:ba:82:5e:0e:4f:2f:c3:36:32:78:48:42:dd:
98:41:d3:c1:f8:16:c4:ea:84:65:1c:3e:df:27:74:de:11:ac:
69:a0:11:22:b4:d7:82:dd:31:67:e3:10:14:26:31:25:c7:51:
8b:44:43:58:d2:b2:00:f4:df:35:cb:58:ca:99:e3:56:a5:6c:
44:58:65:11:0e:c1:21:17:1d:bb:4d:87:90:e2:27:7b:19:91:
54:57:b5:96:d8:79:2e:b6:0d:76:40:7e:70:4c:83:fe:a7:e0:
07:20:67:5b:d3:aa:26:1b:fa:75:1d:36:e5:78:c6:7b:af:62:
e4:84:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org