Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/fQwb9euOvnJzxXnVSwb5RdpVEiQ.roa
File: fQwb9euOvnJzxXnVSwb5RdpVEiQ.roa (raw, json)
Hash identifier: 535xczdzcWQHS0ivwLi79xtF9Cc0neDfjGJweHfRQB8=
Subject key identifier: 7D:0C:1B:F5:EB:8E:BE:72:73:C5:79:D5:4B:06:F9:45:DA:55:12:24
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 01892612EB39C2B143D14E103B13B3011DF9
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/fQwb9euOvnJzxXnVSwb5RdpVEiQ.roa
Signing time: Wed 05 Jul 2023 12:42:01 +0000
ROA not before: Wed 05 Jul 2023 12:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 193.176.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Nov 2023 15:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:12:eb:39:c2:b1:43:d1:4e:10:3b:13:b3:01:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Jul 5 12:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d0c1bf5eb8ebe7273c579d54b06f945da551224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:8e:d4:f0:67:dc:b7:d7:05:d4:48:b0:14:
fd:97:c0:bc:2e:94:58:6e:54:25:38:f2:2b:da:df:
f6:68:02:8d:9b:c1:47:ff:25:c0:77:54:bd:4c:42:
16:48:af:40:85:45:08:63:1c:91:53:9a:c3:f1:f3:
15:31:fc:06:bf:0d:0a:17:2b:26:64:61:d0:83:44:
35:eb:89:18:c1:05:c7:f6:eb:8e:ed:cc:e2:ca:4f:
5e:f2:95:1b:f8:db:02:89:bf:33:54:7f:ea:92:70:
18:e0:90:bd:64:d9:e3:a4:66:4b:a3:b7:20:e5:ab:
df:33:03:16:2f:26:01:89:d6:e7:c5:4d:b8:8d:0f:
28:75:38:3f:d1:7e:77:7a:2e:f6:81:a2:f5:60:15:
da:d1:24:5e:72:4a:11:a9:26:39:e5:21:36:95:8c:
1d:f8:65:72:98:7e:8f:7b:0a:ad:9a:e2:98:b4:40:
42:88:70:6d:8e:ff:aa:c3:f4:a8:e8:6a:2f:de:3f:
a9:01:18:c7:c4:e8:d0:c6:3f:e5:85:87:86:b7:c9:
78:e1:12:dc:ab:41:e8:92:80:6a:bc:44:ca:bd:97:
9f:6c:c5:b6:0b:9b:98:a4:0e:dd:f8:73:a9:d6:cc:
3c:8d:c0:92:40:d7:c3:90:d5:8b:0d:1e:ce:4c:a2:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:1B:F5:EB:8E:BE:72:73:C5:79:D5:4B:06:F9:45:DA:55:12:24
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/fQwb9euOvnJzxXnVSwb5RdpVEiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.97.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:78:21:a1:6b:9d:bc:b0:35:b3:b9:8f:ae:c7:1e:85:05:
f0:dd:76:06:3d:a2:a8:ab:d2:3f:cf:6f:42:02:ff:9e:27:a9:
4a:18:12:60:70:9c:f2:3f:1f:e6:99:a9:06:16:cf:7f:ec:91:
ab:49:56:80:f5:7b:5e:ef:38:c3:32:2a:19:19:54:76:1f:dc:
5b:dd:c0:35:62:7c:43:bb:db:00:b7:fd:8e:81:23:cc:3e:1f:
51:5f:5f:e5:dc:17:09:6c:af:ea:f7:5c:f7:51:1c:a2:d1:e7:
64:97:c0:6a:9a:20:60:02:21:09:e0:59:34:a5:37:50:56:ce:
19:c6:4c:f8:d0:78:3f:5c:db:4f:b0:84:04:db:bd:c4:da:84:
a9:76:f1:b5:36:50:ec:22:7f:4c:6c:bf:f3:c0:c1:06:6e:d3:
68:e3:3c:c9:3b:7b:b1:01:83:7f:74:89:16:33:cb:00:e1:50:
e7:ee:fa:8a:ba:ad:6b:ea:7c:2c:5f:c2:58:3a:3e:e2:ea:36:
6d:b9:14:26:7c:0b:7e:c7:bf:bb:b6:1a:54:63:c0:8f:40:b4:
eb:47:4e:43:74:91:25:a5:a2:2f:c0:7c:13:45:db:d7:40:76:
45:f6:e0:37:b6:1b:81:3f:01:8c:3a:8b:9a:b9:74:97:d5:ab:
cf:9d:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:40 2024 by rpki-client on console-ams.rpki-client.org