Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/1w1m8NoLslNXjEff2xZ95Hytajw.roa
File: 1w1m8NoLslNXjEff2xZ95Hytajw.roa (raw, json)
Hash identifier: KW/DkBGD40CkalIb862Kc389Qj6Y2O9nfqtgvMsvPeg=
Subject key identifier: D7:0D:66:F0:DA:0B:B2:53:57:8C:47:DF:DB:16:7D:E4:7C:AD:6A:3C
Certificate issuer: /CN=930496c1acba7789fdc0e06cf213eec01ed06098
Certificate serial: 018964C05C8A5FA81098C31A165C1EB686D2
Authority key identifier: 93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/1w1m8NoLslNXjEff2xZ95Hytajw.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.17.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5c:8a:5f:a8:10:98:c3:1a:16:5c:1e:b6:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930496c1acba7789fdc0e06cf213eec01ed06098
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70d66f0da0bb253578c47dfdb167de47cad6a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:15:b9:ac:e9:bb:60:73:e5:72:fe:f0:0a:
0f:7b:b2:4a:44:13:f3:43:de:89:47:cd:ee:d3:e3:
0b:4e:6c:51:36:3f:79:51:6e:0e:e5:6f:4e:5a:59:
67:01:e6:ba:e2:4d:38:58:36:f4:03:92:ba:55:7f:
a2:f2:d0:ed:da:35:f0:f3:0a:d9:fb:ca:6a:02:d5:
4f:e8:42:f8:ff:ef:e7:a3:4b:e7:ca:71:ec:ba:6b:
54:49:0b:40:79:05:4a:87:3a:c4:98:7f:23:73:6a:
ac:9d:9c:42:40:e3:bf:0d:b6:cf:7e:3c:d7:ea:45:
64:22:f3:d7:46:cb:43:5b:fb:68:a5:7d:70:00:e8:
d5:d4:f1:8d:6c:83:5b:2e:5d:90:8e:29:3d:f1:0e:
af:13:cb:b1:cc:96:93:1c:18:91:f6:6c:48:c9:52:
ec:1f:75:75:ca:a5:58:d4:cf:58:92:69:3d:a1:b9:
0f:76:fd:2c:1e:ef:1b:f7:eb:2d:58:a6:e1:bf:c7:
3c:45:ef:aa:79:75:f5:c6:12:34:32:9b:1d:26:d3:
3e:cb:2d:80:b5:b5:da:97:ff:25:f9:ca:2c:e1:b5:
04:9f:a0:cf:8f:dd:4c:68:54:a3:80:3a:2e:15:fe:
34:09:9e:bd:a2:a9:d2:c7:41:04:71:b2:39:5c:2d:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:66:F0:DA:0B:B2:53:57:8C:47:DF:DB:16:7D:E4:7C:AD:6A:3C
X509v3 Authority Key Identifier:
keyid:93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/1w1m8NoLslNXjEff2xZ95Hytajw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2c:7d:b1:8f:73:c4:52:d4:20:6b:88:6c:bf:5c:56:2a:b1:
85:2c:53:fa:4e:da:d2:67:25:54:43:68:5c:a4:f1:01:23:5c:
e6:a2:c3:3a:bc:93:1e:95:41:82:fe:3e:15:2a:45:68:c8:1e:
16:d3:bd:aa:48:f1:f5:85:51:48:6b:fb:00:4a:74:46:20:6a:
ff:48:9d:9d:ca:67:24:c8:4f:3a:e1:aa:39:f0:df:23:a4:7e:
4e:e2:b5:f8:57:12:88:7a:62:7b:f0:a6:48:16:b9:e0:27:f7:
d0:93:da:c3:a4:8f:fc:c0:a4:2d:90:5f:12:d2:03:20:dc:ec:
d6:b8:52:82:3f:08:a5:c3:76:91:63:18:4b:bc:e8:38:a1:85:
6a:34:cb:c0:c3:50:21:fe:f0:fb:e7:a1:ea:27:06:b9:ed:e1:
1f:7b:54:5b:d4:d2:72:3c:c4:94:0a:7f:58:2c:8c:10:e1:44:
45:22:6b:c9:46:07:d5:ed:54:d0:8c:65:cb:49:7d:48:de:b4:
9c:0d:c0:d1:09:40:1d:f5:85:bd:a7:eb:53:6a:65:a3:63:7a:
a7:ff:82:ea:a4:90:78:15:e1:ee:5f:43:a8:e9:c3:cb:12:d7:
9f:3d:c5:c7:50:11:85:cf:c1:0c:72:4e:13:c4:ad:31:47:d3:
d0:18:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org