Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/pL1Z4MMQWPI1bvIXL2XkOlT5qBY.roa
File: pL1Z4MMQWPI1bvIXL2XkOlT5qBY.roa (raw, json)
Hash identifier: eCvOyKw+9uZhSWTZ/SxoQvSUpEIxg/PTIziBUE6iUpI=
Subject key identifier: A4:BD:59:E0:C3:10:58:F2:35:6E:F2:17:2F:65:E4:3A:54:F9:A8:16
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 018570B05891C38608D18C8758C9FC721D64
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/pL1Z4MMQWPI1bvIXL2XkOlT5qBY.roa
Signing time: Mon 02 Jan 2023 04:14:43 +0000
ROA not before: Mon 02 Jan 2023 04:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44939
IP address blocks: 193.142.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:58:91:c3:86:08:d1:8c:87:58:c9:fc:72:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jan 2 04:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4bd59e0c31058f2356ef2172f65e43a54f9a816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:85:96:ee:9e:cb:bf:53:ef:52:5a:c8:2e:
f7:f3:8e:b5:22:6c:cd:6d:20:7e:ba:42:e4:3c:fd:
23:b8:04:b9:72:6c:e7:15:fb:6f:97:03:23:68:8c:
47:5c:1e:55:d1:f2:47:f0:e7:19:ad:9c:b3:76:32:
83:04:23:01:ac:1b:2c:12:29:58:04:f1:5c:5e:d7:
c9:17:6b:82:2b:25:da:00:58:fc:67:10:3c:31:37:
53:5c:d9:09:43:2a:5f:c9:0b:8a:88:3e:92:de:57:
64:c0:23:41:8b:1c:1a:3d:36:c4:1a:ad:ec:f5:39:
6a:4d:4f:da:13:c2:4c:d1:17:49:99:db:57:e7:6f:
94:39:b8:5e:ec:8a:36:1f:55:71:f0:05:2b:48:6e:
e1:79:d9:11:54:6f:35:a0:b3:a2:41:4c:c7:5e:92:
95:bb:f5:83:a3:3f:ca:04:6b:14:f2:fd:8d:ec:ce:
29:29:c4:17:3c:77:34:8a:2b:1e:95:89:e8:7c:48:
56:13:b8:fa:9d:14:27:b9:c5:a0:ea:2b:88:d0:06:
34:04:da:74:d6:d6:26:31:93:5a:ef:87:99:0c:7e:
c3:19:ab:d0:5b:8e:f9:07:7d:14:fc:fd:8e:36:63:
e1:d2:48:3b:a8:eb:f3:7f:21:3e:4c:49:63:fa:a7:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:59:E0:C3:10:58:F2:35:6E:F2:17:2F:65:E4:3A:54:F9:A8:16
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/pL1Z4MMQWPI1bvIXL2XkOlT5qBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ce:38:be:e9:75:e3:3d:9e:94:5d:f1:9a:7a:d3:27:33:d1:
0e:42:d0:bd:4b:07:4d:3e:2c:12:b0:a3:b4:9c:5e:5e:f2:b7:
18:cf:2c:da:00:43:f8:e5:9d:e6:e1:71:c3:0f:97:d5:5f:ca:
70:4b:1f:ff:c4:d0:3a:a3:e2:e6:43:e0:6d:65:be:68:21:b1:
71:33:48:c3:46:9a:6d:18:db:93:fd:f2:e5:1d:25:2c:4e:bf:
e7:3c:e5:d3:e1:bf:d6:8c:13:15:f2:9b:76:f2:08:c3:e0:b4:
21:da:53:bf:fd:1c:d4:92:23:29:39:a4:a8:e5:a9:77:0a:b6:
ac:d1:04:47:79:0a:90:a2:a3:33:3b:a7:23:2b:f4:45:bd:8a:
6b:0d:c8:5c:93:8b:9d:a4:43:bc:a1:42:0e:f6:2e:b2:5d:2f:
89:00:57:0d:c1:de:1d:6c:f8:18:12:a1:da:c0:04:87:d5:70:
a0:79:25:6e:6c:bf:93:10:61:c5:2f:ba:ad:2f:9a:50:eb:03:
2a:09:72:eb:c3:57:c7:69:9b:2f:2f:7d:c6:62:b2:8e:86:d3:
0a:02:ad:5a:95:ef:8a:83:25:8e:06:b4:89:6d:2f:8b:a6:44:
31:79:91:b3:50:4e:2b:32:b6:63:f6:74:53:a3:f1:66:69:84:
2a:33:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org