Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Mav1lSyhb-Gq-V2ecALKEFtxIA.roa
File: 7Mav1lSyhb-Gq-V2ecALKEFtxIA.roa (raw, json)
Hash identifier: ah3e3LYRB5HbUbR9rPKmqx9VzbI3Td5ywSNlLY9/HH4=
Subject key identifier: EC:C6:AF:D6:54:B2:85:BF:86:AB:E5:76:79:C0:0B:28:41:6D:C4:80
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B61207DA794D76FA8A8CA4C587584
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Mav1lSyhb-Gq-V2ecALKEFtxIA.roa
Signing time: Sun 01 Jan 2023 20:34:54 +0000
ROA not before: Sun 01 Jan 2023 20:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41826
IP address blocks: 193.34.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:61:20:7d:a7:94:d7:6f:a8:a8:ca:4c:58:75:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc6afd654b285bf86abe57679c00b28416dc480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:53:91:44:7b:20:d6:cd:82:22:86:eb:30:
e8:eb:19:12:9e:79:40:c9:c3:b1:3f:8c:2c:f6:22:
89:e7:2d:29:56:fb:ba:9c:db:67:f8:52:1d:e3:40:
a3:4e:8b:02:9c:cc:4b:70:8a:74:1f:a1:c1:86:48:
68:6b:64:67:4e:01:8c:a4:02:80:26:4c:e3:63:ae:
3a:40:10:e6:6a:3a:8f:c3:a1:ac:8c:64:c0:ac:1f:
0c:08:39:30:8b:4d:08:92:c0:d3:27:bf:6e:20:95:
62:15:cb:2c:7b:b4:5d:0f:54:4d:1f:3c:d2:e6:fe:
7d:1f:74:7a:0a:c1:3d:b1:4f:d2:83:71:8c:73:64:
f8:69:bf:f2:71:c7:48:9f:68:bf:49:c1:06:33:fd:
45:73:76:da:42:5e:f2:ff:10:9c:67:68:1a:f1:0f:
eb:c4:3f:5f:2f:7c:2a:2d:bc:18:fd:8d:66:3c:e2:
12:bb:36:bd:2c:ff:fe:ac:76:09:7c:07:62:d6:2e:
50:89:e8:19:69:0c:34:da:11:27:7d:55:70:a3:f7:
f3:9b:e6:29:27:86:29:ea:f8:2a:b4:b3:43:8e:be:
1f:34:00:51:27:d8:d9:33:fe:f5:1e:c4:a9:e8:b2:
52:f6:42:50:49:34:dd:26:73:fe:a5:86:34:97:b5:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:AF:D6:54:B2:85:BF:86:AB:E5:76:79:C0:0B:28:41:6D:C4:80
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Mav1lSyhb-Gq-V2ecALKEFtxIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.164.0/23
Signature Algorithm: sha256WithRSAEncryption
13:fc:52:69:16:e6:97:48:e0:cd:69:96:d6:7f:ad:5a:64:7e:
23:05:51:74:ef:c8:57:4b:d4:98:ae:85:13:f8:fc:ba:69:ae:
1a:09:ca:42:ed:2e:34:06:0e:b6:c8:8f:c9:a4:84:9c:6e:0f:
60:b5:4e:ca:60:73:62:de:00:1d:03:d2:4c:80:a7:e9:02:df:
a1:42:ce:a7:ad:64:7b:f9:92:95:bb:73:e5:49:f7:8a:d2:53:
9f:ac:b9:89:bc:c6:ab:ab:23:d4:b5:5c:6d:03:5f:cf:0f:2c:
94:eb:c4:6c:24:0e:ec:4e:e7:6b:70:2f:c4:45:f4:c3:b8:01:
9f:06:d8:51:fb:e0:41:c9:17:64:c9:1e:c9:a0:22:97:e7:5e:
66:5a:c5:6c:0c:67:10:af:74:12:b7:4c:0c:e7:56:78:72:25:
e2:91:61:f6:39:b8:58:2b:44:c0:7a:ad:cc:97:8a:f1:8a:6a:
a2:dc:71:41:b2:d1:f9:01:71:39:cb:93:b1:e0:76:1c:ae:97:
41:e0:84:f3:15:95:e2:df:d0:be:67:8a:4e:19:7e:21:7d:15:
1c:cd:11:69:9b:29:cb:d1:23:bb:71:ea:0f:bc:c4:6a:e6:45:
98:76:18:19:71:0c:25:50:e8:d3:e4:87:51:0e:91:a4:7f:63:
30:19:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org