Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/U_ERlbJhhdttBd4RNaHPrecZD34.roa
File: U_ERlbJhhdttBd4RNaHPrecZD34.roa (raw, json)
Hash identifier: VkZG2TRSLqu6Pocc8HN0FTRJiio60QM09a7lBTE3eRY=
Subject key identifier: 53:F1:11:95:B2:61:85:DB:6D:05:DE:11:35:A1:CF:AD:E7:19:0F:7E
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA864D10D52C23A8F8B1FB3DCFE87
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/U_ERlbJhhdttBd4RNaHPrecZD34.roa
Signing time: Sun 01 Jan 2023 11:14:53 +0000
ROA not before: Sun 01 Jan 2023 11:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210690
IP address blocks: 193.255.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a8:64:d1:0d:52:c2:3a:8f:8b:1f:b3:dc:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f11195b26185db6d05de1135a1cfade7190f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:34:93:eb:36:35:93:44:88:02:70:ca:fe:
ab:b5:ce:2e:ae:fc:aa:bb:fb:3a:8f:0d:4f:40:96:
b3:8a:94:c7:1c:63:e8:0c:3e:6b:47:4e:3d:db:91:
cb:eb:2e:f4:5d:d9:95:9a:8c:4a:94:3f:3c:df:81:
a8:75:ac:bd:f3:ad:52:90:3d:e2:11:59:e7:f4:ec:
07:13:7a:6a:fa:d9:a4:fb:53:6a:86:9a:93:dd:d3:
19:1a:79:f3:ef:35:0b:b2:e5:fa:2c:0a:98:e7:9c:
43:f8:15:f2:91:64:07:de:ac:37:7f:d9:47:50:e9:
49:0a:be:a7:73:f3:a4:f5:19:70:e4:24:6b:80:f5:
72:1b:54:ae:55:a6:34:44:78:3c:9d:16:63:8d:da:
54:93:67:7f:13:f3:33:49:d9:b8:fb:a6:c5:e4:dd:
7b:6b:64:d2:6c:a8:ca:cb:2e:db:0f:f5:dd:7b:32:
16:68:2e:0d:90:ef:8e:93:f8:41:1e:16:11:9e:68:
1b:5c:bc:3f:35:d2:76:e4:27:fc:db:33:e2:6b:45:
7a:56:1c:58:50:c1:05:b9:e9:00:5b:be:38:55:05:
81:c8:f1:22:9f:04:a3:49:9a:ad:e7:f5:bc:cd:0e:
1e:3b:cc:b6:d2:45:84:7e:5c:ce:bd:5d:96:52:96:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:11:95:B2:61:85:DB:6D:05:DE:11:35:A1:CF:AD:E7:19:0F:7E
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/U_ERlbJhhdttBd4RNaHPrecZD34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
94:6c:27:0f:23:b1:98:34:7b:75:cf:76:cf:16:5e:b1:f3:bd:
5a:50:0e:bb:7a:f0:0a:d6:ab:ec:1f:42:19:60:14:5d:51:27:
bc:d7:ba:2a:a2:ab:22:2d:b8:28:2b:9a:78:7b:67:4c:fb:c8:
24:ed:0b:84:db:5a:92:90:66:4d:2e:06:23:31:a4:18:70:a9:
0b:ae:d6:4f:a0:24:eb:04:b3:42:bf:34:ba:ab:6c:88:f8:45:
f1:c8:93:14:1c:f5:7d:e5:fe:02:5c:28:54:7d:32:09:b8:8e:
14:97:28:09:4a:ed:c2:e4:06:8d:b1:fc:b3:3a:c6:69:87:06:
4d:24:9f:3a:8f:7f:fa:88:de:4d:ad:ed:3d:85:c0:91:16:20:
3f:2e:71:09:76:35:be:ea:d4:3f:45:fc:97:29:84:f6:bf:42:
99:bc:a7:49:26:6f:ad:86:dc:b3:a8:15:02:10:0d:7e:88:d4:
fa:f4:9f:d4:e0:9a:b0:17:fd:c9:ea:87:6c:cc:47:82:e0:7c:
d4:54:e9:c6:08:e4:84:36:ab:01:0f:f9:e7:11:53:cb:88:b8:
15:18:2b:d2:c8:38:f1:90:8f:3f:66:bb:4a:83:44:fe:f0:3b:
0f:6b:ce:6e:7c:bf:18:89:40:61:03:59:e8:3a:6b:27:19:fe:
e4:62:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org