Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/pkuiYZRnt83ERmgekCE2XPVoYyY.roa
File: pkuiYZRnt83ERmgekCE2XPVoYyY.roa (raw, json)
Hash identifier: xuLhnIRUSGaZ+DMqg4qr75RXRXBVN5kfqp1ycC8woU0=
Subject key identifier: A6:4B:A2:61:94:67:B7:CD:C4:46:68:1E:90:21:36:5C:F5:68:63:26
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01857246A8E38CFC6D1129CCB6104B8AC612
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/pkuiYZRnt83ERmgekCE2XPVoYyY.roa
Signing time: Mon 02 Jan 2023 11:38:31 +0000
ROA not before: Mon 02 Jan 2023 11:38:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51262
IP address blocks: 193.17.26.0/24 maxlen: 24
2a0f:7940::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 10 Jan 2023 18:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a8:e3:8c:fc:6d:11:29:cc:b6:10:4b:8a:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 2 11:38:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a64ba2619467b7cdc446681e9021365cf5686326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:01:36:16:42:82:90:f2:89:d1:14:a7:b1:
65:a0:8d:b7:f6:97:6e:5a:6b:06:54:51:13:20:64:
44:40:fd:06:66:1d:97:6d:6f:13:5b:7e:ac:bc:31:
3a:11:98:81:00:fc:e3:06:ed:5e:da:c5:f0:51:91:
a5:8d:3c:62:92:ab:d5:02:2e:2f:9f:cc:9e:8f:50:
5e:b7:e8:0d:16:56:87:c7:1f:93:13:ae:70:4e:82:
9a:97:58:d9:3c:5d:05:aa:a5:48:7d:7e:4a:7f:33:
d2:90:50:76:ab:9e:0d:44:4e:4e:08:4b:4b:74:37:
bf:77:19:c5:64:95:26:6d:44:09:5a:ce:af:a7:2c:
9e:45:f6:36:ac:2c:4f:91:32:8a:3e:26:53:97:21:
0c:68:db:ac:c2:d8:87:91:8a:d4:36:42:a6:be:73:
8b:a8:8e:9b:bf:21:7b:66:2f:42:11:93:c2:77:6b:
9b:9e:af:2d:fc:0d:d1:89:40:a8:66:32:2b:a7:21:
40:46:79:f5:e9:1d:79:68:fb:82:34:1b:6f:59:ff:
0a:45:7c:4a:32:9c:e9:09:55:83:c0:8b:6c:49:69:
4a:c6:22:92:d1:e3:89:4d:76:ca:70:cc:03:1c:74:
ff:dd:2a:2c:13:d8:00:56:86:9b:27:08:c5:90:90:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4B:A2:61:94:67:B7:CD:C4:46:68:1E:90:21:36:5C:F5:68:63:26
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/pkuiYZRnt83ERmgekCE2XPVoYyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.26.0/24
IPv6:
2a0f:7940::/29
Signature Algorithm: sha256WithRSAEncryption
68:70:99:70:ae:38:ba:c8:f8:d8:1a:e4:b1:69:26:a1:9f:8a:
79:c1:44:5e:2e:c5:3c:d5:60:6d:bd:6d:f1:e4:a4:c1:e5:6b:
2b:7b:39:bc:52:09:fc:59:0c:3b:a1:be:bb:88:1e:8b:81:43:
a4:e9:cb:ae:a9:10:a4:ff:68:f0:71:3f:62:51:c0:59:4e:f3:
e5:0a:9d:70:d6:f5:c3:af:25:d3:53:d5:a5:a7:6a:84:c5:5e:
22:c7:42:62:8b:53:bf:2d:32:a7:97:1d:f8:5f:ba:4c:b1:57:
b6:c6:17:dd:fb:f4:29:4e:5f:5a:c0:2d:a9:f1:7d:52:11:23:
b1:5f:0c:58:c1:da:c5:22:37:9d:13:73:9f:be:58:3f:d1:a0:
e5:5e:47:44:a4:df:ea:00:2f:90:67:91:cf:42:b5:ab:a6:bc:
52:81:4b:1c:cb:52:57:04:e1:44:af:f8:6c:09:dc:ac:d0:f0:
39:a6:55:0c:5b:5f:94:8a:c7:68:e3:ed:7a:c2:f2:1c:43:db:
b6:8a:58:a2:28:8f:6a:16:f8:df:68:c7:59:31:db:b6:4b:b1:
3e:1f:b1:c9:14:0f:e9:af:12:34:dc:55:e0:a0:b9:82:bd:c8:
02:31:a5:8f:c8:5c:69:cb:ba:f9:4a:d7:71:8e:8b:3c:93:0d:
88:ea:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:16 2024 by rpki-client on console-fra.rpki-client.org