Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Rp2W7wXbrd2Imfwd7MiJZ2IhO24.roa
File: Rp2W7wXbrd2Imfwd7MiJZ2IhO24.roa (raw, json)
Hash identifier: h9cwWnN+SAOZvJ6o3KuOQh4+hDq+rdcHPgeOL66osaE=
Subject key identifier: 46:9D:96:EF:05:DB:AD:DD:88:99:FC:1D:EC:C8:89:67:62:21:3B:6E
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01856C1C7C1C83E454F0EFBD1B1B1D1A723A
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Rp2W7wXbrd2Imfwd7MiJZ2IhO24.roa
Signing time: Sun 01 Jan 2023 06:54:44 +0000
ROA not before: Sun 01 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.222.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:7c:1c:83:e4:54:f0:ef:bd:1b:1b:1d:1a:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jan 1 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=469d96ef05dbaddd8899fc1decc8896762213b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:7f:0f:15:82:a5:c3:4e:36:00:bb:f3:c4:
ba:86:3b:18:43:a3:41:6a:9e:1c:82:d4:44:db:e4:
67:48:00:d2:c4:d0:e9:44:f3:af:3c:22:49:9a:1b:
6b:96:b1:df:06:54:15:c4:00:7a:1a:cd:fd:0b:c9:
f7:e7:73:17:e2:21:fa:5b:7e:2d:a1:5d:0e:ca:ec:
5e:0e:4c:ad:15:b3:05:80:04:7b:cb:37:9a:d7:8f:
83:d9:3c:4a:3b:0d:9d:61:fa:9f:e0:04:cb:e1:fc:
9d:ce:6b:81:c2:1f:1d:bd:c5:90:92:f4:81:1d:6c:
4d:64:94:60:6d:60:7c:85:a0:c3:81:e7:7e:27:8d:
de:1c:8d:82:df:0a:57:af:8d:d6:66:8a:91:59:73:
00:0f:85:39:3f:ff:83:21:0f:f9:31:61:40:22:b9:
24:62:40:cb:11:e0:12:c5:5d:d8:94:7b:b3:08:16:
05:f0:12:ea:eb:df:af:b2:1b:d3:fe:09:fd:97:5d:
d0:74:2d:5e:ca:c9:f2:07:dc:f8:bb:33:9d:fc:dd:
45:3f:09:26:1a:f7:41:cd:66:5c:b9:7d:5d:2c:94:
b3:9e:35:64:36:81:09:ee:e3:4c:f6:66:8f:b3:ad:
01:ac:ca:a2:6c:b4:30:1c:30:bf:46:5f:f4:ab:a9:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9D:96:EF:05:DB:AD:DD:88:99:FC:1D:EC:C8:89:67:62:21:3B:6E
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/Rp2W7wXbrd2Imfwd7MiJZ2IhO24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.112.0/20
Signature Algorithm: sha256WithRSAEncryption
86:5b:d5:58:15:ac:35:45:9b:34:74:28:48:a3:55:7f:88:a7:
67:cf:7d:71:b8:db:b5:e4:80:cd:3f:24:6d:9e:97:9d:70:26:
12:34:8c:61:7b:db:25:25:77:5f:a0:5d:2c:84:16:17:de:8e:
6b:44:bd:cd:81:7d:e8:2a:81:47:c0:24:7b:3a:7c:53:a6:6c:
2d:4e:54:d2:e9:3c:41:db:7c:51:a6:65:b9:15:8c:54:ed:9f:
1c:5a:93:59:68:ec:67:a8:c7:10:46:f5:51:b1:53:a8:46:1c:
ab:18:5d:c0:9d:2b:80:05:a8:8e:4a:ca:a3:4b:66:b2:9d:e6:
bd:66:3c:03:76:5e:77:c2:e7:3e:88:e1:00:d7:8f:bb:22:c0:
43:fb:d7:9f:7d:2a:dd:62:d3:2e:f0:03:f2:c9:37:82:c0:0c:
19:02:f6:f3:02:53:65:bf:1c:2c:ab:8b:2d:8e:c8:4c:5e:ea:
2c:24:96:77:2e:b3:5f:c4:1f:14:fd:81:f1:a4:f2:16:de:d3:
47:14:f9:80:d0:76:b0:0f:9b:b8:a5:9a:f3:e0:a9:b0:9e:aa:
d9:69:be:f0:66:1c:78:c1:52:4d:79:2b:cf:e7:2a:82:2b:3c:
8a:b5:43:f6:63:1c:23:60:ae:69:9c:27:0d:37:eb:3d:ee:2d:
c3:2c:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:21 2024 by rpki-client on console-ams.rpki-client.org