Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/1mM2QfS9B1-EJu3vtapRs-SyfOM.roa
File: 1mM2QfS9B1-EJu3vtapRs-SyfOM.roa (raw, json)
Hash identifier: ZX7M70IHIbnJf6X4gZ0mRpZmxUhVFS9CbIdpPvAkYJs=
Subject key identifier: D6:63:36:41:F4:BD:07:5F:84:26:ED:EF:B5:AA:51:B3:E4:B2:7C:E3
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01857246A84FEE34D3A5262EA32A2EABCF92
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/1mM2QfS9B1-EJu3vtapRs-SyfOM.roa
Signing time: Mon 02 Jan 2023 11:38:31 +0000
ROA not before: Mon 02 Jan 2023 11:38:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39142
IP address blocks: 193.17.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 11:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a8:4f:ee:34:d3:a5:26:2e:a3:2a:2e:ab:cf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 2 11:38:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6633641f4bd075f8426edefb5aa51b3e4b27ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:35:cc:d2:57:c8:37:af:a1:e9:50:cd:85:
c7:50:7f:ff:0f:d4:48:94:3d:40:b7:70:e7:00:5d:
00:e6:43:e0:d7:33:fb:da:38:d6:ac:d3:1f:44:37:
40:48:69:e2:e3:90:d5:11:28:6a:26:8f:73:af:8e:
28:d1:c2:88:e4:b0:7f:a9:a0:f5:91:d6:d7:b2:73:
21:2f:15:36:6c:62:ac:db:e0:62:80:dd:a7:4d:14:
3a:92:c5:7d:4d:5b:8b:a4:03:e5:3d:5c:d1:4b:ab:
9a:b9:0e:70:cf:34:b8:73:21:6d:1e:99:99:06:44:
a3:59:43:8e:d6:1a:4c:3e:98:6e:aa:9c:61:34:bf:
42:36:6e:0e:1b:de:a3:c2:8d:99:99:bd:f6:52:4e:
7a:5a:65:f6:9a:09:be:64:28:cc:8f:4b:01:12:d3:
de:3c:5f:34:5c:18:f2:91:43:ae:25:b7:31:7b:db:
a0:ae:77:4d:92:01:ca:01:98:80:03:94:f6:7d:84:
0a:63:76:f1:48:aa:1f:1b:c3:44:84:57:ae:68:5c:
03:5b:10:e0:3e:13:ad:3c:1e:63:87:4f:d5:49:5e:
5f:f6:fd:8a:03:87:14:0b:91:aa:50:2f:2b:d7:d5:
1b:f9:f3:1a:b3:c2:f6:35:64:c7:57:bb:8a:4b:9e:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:36:41:F4:BD:07:5F:84:26:ED:EF:B5:AA:51:B3:E4:B2:7C:E3
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/1mM2QfS9B1-EJu3vtapRs-SyfOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.24.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f5:e1:c4:16:b8:db:e5:ed:fc:59:97:f1:46:82:88:b2:b8:
ea:d3:99:f6:da:4e:ed:75:7e:8b:e0:3f:d2:e8:15:ea:60:ac:
31:7b:99:a1:aa:53:dd:85:0e:15:c7:4c:20:8f:06:11:ea:94:
0a:d3:1a:d0:ce:55:c8:53:1d:55:98:10:40:9b:21:49:80:fb:
79:9d:4d:a5:69:e3:f6:b5:24:7c:9e:f2:12:78:7c:e6:c2:9c:
4d:0c:0b:06:13:43:4f:e5:f1:34:81:62:bf:a1:78:de:4a:36:
7f:a8:42:b9:e4:ad:46:f7:e3:90:20:89:ee:6c:a1:06:1d:36:
c5:b7:c4:fb:a2:dd:27:53:20:25:0b:ae:7a:24:88:31:79:5a:
e7:45:60:c1:c6:fc:f6:52:ab:ac:76:bd:a5:89:4d:da:29:f4:
04:b0:5e:e6:01:78:a2:b9:87:bc:67:96:24:c9:e3:75:34:4b:
77:84:f9:3d:4f:a1:2e:60:da:b4:a3:23:5f:0c:f6:89:8b:0e:
02:1b:e3:2d:7e:b9:70:d6:4d:a6:1b:99:59:ef:2d:dd:12:6b:
93:81:fe:e2:a0:f0:b4:a2:2e:ee:99:c4:bd:61:f1:19:f2:48:
a3:82:31:25:39:3a:14:db:24:f7:e7:c4:96:6c:40:0b:a5:b8:
d8:ea:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:55 2024 by rpki-client on console-ams.rpki-client.org