Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/7TkoBZPRzeWMfX0LXYCwtQ1vCvo.roa
File: 7TkoBZPRzeWMfX0LXYCwtQ1vCvo.roa (raw, json)
Hash identifier: YtT8/9bjyviM41nvfsjslx76ectX45Zb6ZGWBvxYTDg=
Subject key identifier: ED:39:28:05:93:D1:CD:E5:8C:7D:7D:0B:5D:80:B0:B5:0D:6F:0A:FA
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 01856F3925BFB26B61383FC7A26AE2E8715B
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/7TkoBZPRzeWMfX0LXYCwtQ1vCvo.roa
Signing time: Sun 01 Jan 2023 21:24:54 +0000
ROA not before: Sun 01 Jan 2023 21:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.177.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:25:bf:b2:6b:61:38:3f:c7:a2:6a:e2:e8:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jan 1 21:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed39280593d1cde58c7d7d0b5d80b0b50d6f0afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:94:1c:e0:69:32:f6:df:1b:c2:eb:bc:f5:
dd:f5:50:7d:09:99:ac:31:44:32:6f:5f:0c:13:62:
df:de:34:30:12:ea:d1:8a:c8:66:89:d8:cf:f5:2e:
4b:f5:06:8b:6a:ed:39:68:ed:cd:cf:07:0d:1e:7a:
cd:f1:ca:42:95:10:de:eb:ae:e2:38:f1:28:75:33:
4d:2b:83:cd:c0:8c:10:8f:28:74:36:9d:5b:c5:bc:
0b:67:88:ce:df:b0:d7:8a:e1:29:be:97:ee:4a:cd:
d3:6a:91:b3:f1:84:34:c5:d2:03:ac:31:d0:ee:48:
cf:3f:a6:16:22:d1:f5:cf:d7:57:10:07:cc:0e:f3:
78:ae:f9:98:4f:59:48:3b:a5:d3:7a:0a:b8:1c:12:
a5:5b:dc:2b:46:00:65:89:6d:f0:f0:01:3d:09:fa:
85:f2:6d:67:7e:19:b2:d8:4e:f9:73:ac:a2:94:9f:
d4:cb:ac:3c:ce:90:0c:d8:b7:09:a9:26:69:2f:04:
98:8e:9d:cc:e6:1a:37:29:21:d5:d2:71:81:f7:6d:
10:de:0c:78:35:b7:47:0f:84:d5:d9:5a:d2:ce:c2:
37:e1:42:5e:0e:ff:0b:69:c5:67:d7:d2:59:be:ed:
63:02:e1:be:a6:df:c1:17:e0:c3:de:74:b2:ec:00:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:28:05:93:D1:CD:E5:8C:7D:7D:0B:5D:80:B0:B5:0D:6F:0A:FA
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/7TkoBZPRzeWMfX0LXYCwtQ1vCvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.180.0/23
Signature Algorithm: sha256WithRSAEncryption
03:6b:aa:2b:7e:fc:22:7a:55:17:f4:37:05:fc:f4:2c:e8:de:
ce:00:07:01:79:62:d4:81:16:f6:49:c0:35:0b:1e:b6:01:07:
44:37:4f:2d:b8:db:c2:47:86:f5:c1:54:3d:4b:98:ca:f3:c8:
67:bb:f4:8b:ce:35:a0:7e:62:cd:ba:53:d6:aa:60:ec:84:ba:
94:31:7c:3e:20:72:3c:0e:7c:f0:35:f2:85:20:39:66:5d:88:
bf:82:08:59:26:75:3d:94:1e:b2:1f:b8:fc:55:d2:4c:95:65:
0a:ba:17:49:5c:61:ca:e0:ad:1a:6b:58:b8:d2:44:0c:58:6b:
f1:9f:fd:99:88:56:9f:30:26:42:2b:e4:be:1b:8f:19:3f:76:
82:53:c9:b9:25:64:75:87:33:ce:b7:bd:ec:81:c8:de:12:0a:
dc:98:65:17:9b:d2:ae:a1:09:61:3f:01:6e:89:ab:1c:da:8e:
e8:31:2c:ac:1c:d0:d1:73:36:56:e0:0d:da:5c:04:3e:03:bd:
f5:31:a6:5a:9b:99:8f:46:dc:f2:83:db:f1:78:a8:4c:77:9d:
e7:8b:4a:34:f4:79:94:af:7f:ca:9c:1a:7d:0c:d7:ab:a8:c8:
8d:68:4e:04:eb:42:7c:7e:a6:46:c8:cc:0a:e8:91:98:4d:5c:
ae:36:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:34 2024 by rpki-client on console-ams.rpki-client.org