Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cii_1LFa2-LD47WHgm5jjkuGUyc.roa
File: cii_1LFa2-LD47WHgm5jjkuGUyc.roa (raw, json)
Hash identifier: qDRInQntqVifjvIidc1F7SomIigRcW2WL3JStG68Y78=
Subject key identifier: 72:28:BF:D4:B1:5A:DB:E2:C3:E3:B5:87:82:6E:63:8E:4B:86:53:27
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA9F80BEAF7C6189F7928391A95A0
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cii_1LFa2-LD47WHgm5jjkuGUyc.roa
Signing time: Sun 01 Jan 2023 11:14:53 +0000
ROA not before: Sun 01 Jan 2023 11:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213309
IP address blocks: 193.255.92.0/24 maxlen: 24
193.140.143.0/24 maxlen: 24
193.255.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a9:f8:0b:ea:f7:c6:18:9f:79:28:39:1a:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7228bfd4b15adbe2c3e3b587826e638e4b865327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:47:7b:69:a8:83:e4:05:24:64:68:bf:6b:
e0:a8:da:8e:dc:c9:e6:ee:79:81:2f:18:3f:bf:a7:
9e:c3:fc:2f:23:92:8b:85:cb:de:2d:8a:4a:dd:f0:
dd:e8:46:05:92:de:9d:9f:f4:cb:40:34:83:08:75:
5a:e8:32:5d:f2:51:63:8b:56:6a:50:20:8a:16:26:
64:9d:41:d3:2e:48:af:43:ab:62:41:91:eb:3b:63:
ec:b8:7c:6a:1f:0a:c2:cd:44:ca:c3:99:89:55:a4:
e2:30:29:90:33:73:e2:1e:de:c2:93:4f:a2:3a:06:
4b:b7:19:11:89:10:88:43:df:b6:2d:fa:e9:b4:82:
04:80:87:94:b5:20:b6:b0:fd:67:ed:ce:51:b7:41:
45:b0:ba:a9:fb:c8:81:54:fa:16:62:98:e3:02:5f:
c6:5e:bd:a4:99:17:17:d8:3e:99:f6:e9:58:10:4f:
10:62:6b:f0:17:94:5d:fa:7b:1c:ab:bc:6e:de:61:
d2:9b:44:7e:03:e0:82:d6:03:ca:8d:23:84:6e:91:
e2:68:6d:aa:4c:0a:bb:79:f1:b4:e9:fc:52:53:42:
23:0a:d8:be:00:20:55:0a:fb:f3:7e:bd:bd:9d:37:
87:1d:97:26:26:81:92:a6:c9:dc:fc:7d:52:e6:5a:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:BF:D4:B1:5A:DB:E2:C3:E3:B5:87:82:6E:63:8E:4B:86:53:27
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cii_1LFa2-LD47WHgm5jjkuGUyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.143.0/24
193.255.92.0/24
193.255.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f1:ed:d4:f8:be:37:a5:9e:84:66:18:4e:eb:38:27:f9:80:
e1:aa:e4:06:15:91:7d:4e:ad:3c:b7:39:09:35:44:25:45:3d:
46:4a:d2:c2:42:7b:00:eb:70:34:0c:63:53:26:b8:17:2b:9f:
6c:eb:0f:45:a7:97:60:72:77:d4:da:9f:b5:5f:39:68:0a:1f:
e3:08:10:9c:88:1a:d6:3c:c3:5c:69:ea:1c:46:c2:f3:f6:f0:
bd:db:57:05:45:bb:a8:6b:1e:35:85:a4:0a:05:f7:fe:95:91:
e5:18:eb:4f:20:90:30:d0:3c:04:d6:64:e9:cb:cf:79:a9:3d:
10:2d:18:9c:12:97:1a:38:9b:d4:8e:bf:3d:52:4a:80:1a:b7:
de:e3:b8:0c:ad:12:6e:29:4e:9e:10:bd:e1:99:d9:69:9b:91:
2c:d3:3e:b1:cb:c5:88:06:60:02:02:08:73:36:69:af:90:3f:
b8:36:3c:3e:50:fd:85:86:a4:81:85:17:ee:b4:18:0b:35:00:
f2:63:6e:a1:79:44:d6:d2:1b:6a:58:16:94:cb:63:60:b9:1c:
2e:1e:56:1b:4a:fd:49:59:ca:bb:65:aa:e1:12:ee:ab:0e:22:
ee:7f:64:77:d2:f6:80:b6:53:45:80:a9:01:f6:91:c0:c8:78:
99:f2:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org