Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/e9Ouq7J6HWrLdkm-dzWK-zahnww.roa
File: e9Ouq7J6HWrLdkm-dzWK-zahnww.roa (raw, json)
Hash identifier: 0fotjFYEBbp0dMgLjBQ8TCynaQdJ8IPB4KhHLbQ2IBw=
Subject key identifier: 7B:D3:AE:AB:B2:7A:1D:6A:CB:76:49:BE:77:35:8A:FB:36:A1:9F:0C
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01856D4190F0C4E2100DB36434990735AF30
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/e9Ouq7J6HWrLdkm-dzWK-zahnww.roa
Signing time: Sun 01 Jan 2023 12:14:51 +0000
ROA not before: Sun 01 Jan 2023 12:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44018
IP address blocks: 193.104.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:90:f0:c4:e2:10:0d:b3:64:34:99:07:35:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jan 1 12:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd3aeabb27a1d6acb7649be77358afb36a19f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:7a:b3:ca:23:ad:2d:a7:59:fb:5f:53:b2:
63:9a:b8:d8:21:16:fe:1c:7d:04:ca:82:31:43:e3:
ed:34:24:1d:5e:96:ab:b0:01:23:6c:71:05:c9:e3:
50:2f:11:40:59:3c:4c:aa:2f:3e:fc:4b:c7:fc:7b:
b9:68:00:53:0a:4b:27:d8:17:3e:96:dc:f6:83:ac:
66:bc:4f:c3:91:cc:ae:3e:88:13:d8:81:3c:79:08:
80:ad:eb:60:01:10:5a:0a:a4:47:d5:fd:18:d1:eb:
9d:b3:2e:c6:f0:9f:03:03:98:80:65:0f:32:98:84:
d4:21:35:3b:7f:a8:b3:9e:89:47:40:1e:42:7f:62:
9d:f3:86:33:d7:74:17:42:47:bd:45:87:cb:86:0d:
9c:23:1d:bc:69:9b:fb:ae:cb:2b:f2:6e:e9:27:ef:
14:49:57:47:4c:ba:8a:76:1a:9b:4f:61:74:d2:0f:
6a:f6:7f:f8:87:2a:22:84:c3:2a:5f:71:c3:88:eb:
fc:b7:bb:77:3d:86:26:0d:28:9e:1a:56:cd:b5:64:
33:51:47:a5:fe:75:0b:56:c0:d8:5c:f9:e5:b4:44:
de:ce:73:c4:c6:ee:3c:e9:e1:28:44:d3:c7:9a:5e:
98:83:be:9c:83:db:87:09:a6:31:d2:d8:50:ff:dc:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:AE:AB:B2:7A:1D:6A:CB:76:49:BE:77:35:8A:FB:36:A1:9F:0C
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/e9Ouq7J6HWrLdkm-dzWK-zahnww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.146.0/24
Signature Algorithm: sha256WithRSAEncryption
21:19:5f:1b:8d:c6:00:03:51:01:dd:ba:36:49:98:b1:44:7a:
dd:1e:d9:84:5c:ba:31:72:a6:5e:66:90:bc:68:a0:77:b6:a8:
ed:a7:16:95:84:c9:10:e2:66:67:77:03:3b:07:7e:61:98:5c:
ae:30:d7:03:de:03:57:c1:84:05:cb:ae:87:13:b4:1f:cc:29:
e9:63:07:e7:e6:30:27:ce:af:bf:97:e6:04:55:e8:64:33:d6:
d4:e4:e2:4f:2e:f6:7e:f0:9c:31:9b:dc:f7:2b:5e:3e:e5:1c:
50:da:82:22:1c:cd:6d:09:34:26:20:21:90:7e:20:58:dc:6e:
67:76:7a:75:41:2d:c4:64:17:60:6d:b9:4c:3e:dc:44:2f:59:
14:b5:23:56:a3:26:de:af:75:4d:e5:74:ad:c8:b7:03:8b:90:
6c:e4:1f:57:29:6f:30:e8:99:dc:9f:32:50:7c:99:3d:3e:64:
f3:c5:bc:9f:29:66:d8:0d:71:35:a3:c9:de:a6:3f:86:e8:08:
ed:f4:a0:8b:36:ca:6d:5d:f2:48:a7:b4:cb:cd:69:10:33:f3:
56:f0:42:04:ac:54:a4:f8:41:0e:bc:6b:e1:cd:c2:b1:9b:03:
0a:f7:6b:ed:24:c0:72:64:44:66:9b:7e:d9:b4:67:ee:15:18:
3a:f9:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:03 2024 by rpki-client on console-ams.rpki-client.org