Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/oZk5kwA8HY6xdHq9-jCwBG--ttU.roa
File: oZk5kwA8HY6xdHq9-jCwBG--ttU.roa (raw, json)
Hash identifier: 9wtzFZlNVeFrqicCRjK8MaB0VAVF7lM+9emtomnstDE=
Subject key identifier: A1:99:39:93:00:3C:1D:8E:B1:74:7A:BD:FA:30:B0:04:6F:BE:B6:D5
Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial: 0185707047968A2198E3A6097390C682F12A
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/oZk5kwA8HY6xdHq9-jCwBG--ttU.roa
Signing time: Mon 02 Jan 2023 03:04:44 +0000
ROA not before: Mon 02 Jan 2023 03:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.22.64.0/20 maxlen: 20
193.22.71.0/24 maxlen: 24
193.22.74.0/23 maxlen: 23
193.22.76.0/24 maxlen: 24
193.22.72.0/23 maxlen: 23
193.22.78.0/24 maxlen: 24
193.22.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:47:96:8a:21:98:e3:a6:09:73:90:c6:82:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Validity
Not Before: Jan 2 03:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1993993003c1d8eb1747abdfa30b0046fbeb6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:7e:e8:7e:d0:65:8b:19:81:f6:c6:1a:7e:
bd:23:50:13:a2:5a:0e:b3:f3:52:1f:f6:e8:f6:82:
6b:e7:6a:e6:e3:79:36:f9:bd:d8:bc:f6:f7:9f:17:
16:01:67:86:35:0a:9e:67:02:6e:19:b3:6e:1c:d8:
3d:60:b7:a7:08:b7:1b:f2:39:1a:1b:af:42:90:64:
eb:5d:aa:3f:29:fd:e3:7d:7b:85:c0:d9:49:cf:0e:
96:9f:56:d8:f7:a3:2c:d2:10:81:f6:59:d8:b1:5a:
25:1d:cb:9b:40:63:51:2a:58:44:64:15:0e:61:2c:
16:14:a0:0e:50:25:9a:cb:cc:22:1c:f1:c0:81:96:
6e:a0:93:35:17:2d:48:ab:9a:89:d0:01:25:fa:d4:
f1:f9:c0:cb:69:2a:b7:49:5f:f1:a1:fc:6e:66:c0:
94:b4:69:87:a4:31:fc:79:b1:6c:9d:16:49:60:ce:
65:1f:5e:5e:91:3d:88:4b:ee:52:78:5b:a4:64:62:
c1:cc:82:53:fa:6f:1f:12:08:69:24:26:82:03:78:
4a:59:b3:ac:72:fc:ce:85:c0:13:76:7a:33:28:49:
0e:a7:e6:eb:56:a7:f5:9c:b4:c0:9c:2f:c8:72:10:
d6:3a:33:47:48:97:4a:41:2c:33:af:f0:cd:72:5f:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:39:93:00:3C:1D:8E:B1:74:7A:BD:FA:30:B0:04:6F:BE:B6:D5
X509v3 Authority Key Identifier:
keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/oZk5kwA8HY6xdHq9-jCwBG--ttU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:a1:9f:08:39:6e:f1:ed:e5:d7:44:7b:b8:73:be:76:19:f2:
30:bb:fb:d9:d1:7c:72:72:58:44:1c:e2:9b:5b:25:a4:dc:04:
c3:3f:0a:26:6c:f3:06:1a:f6:1d:c4:d3:b6:ab:e9:8d:98:d3:
46:55:79:c6:06:57:1e:5e:a0:d3:f1:48:e4:c5:a8:10:df:23:
25:33:d4:3d:77:4a:a4:4e:e3:64:af:78:84:c7:0e:ee:42:99:
3e:bf:13:d9:f6:0b:37:17:af:cf:9c:6e:89:21:e6:05:f5:59:
78:53:88:15:4b:21:a9:81:c3:1c:b3:3a:fd:d6:52:ea:8b:58:
09:ca:30:5d:78:e4:2f:98:04:3f:35:1b:27:fb:a9:23:ad:12:
2e:ae:85:13:15:e1:3e:f1:94:0e:03:79:b8:62:61:e4:ff:c8:
37:5c:dc:fc:b9:01:9c:15:27:bb:a9:24:ab:ff:eb:b2:d4:78:
f5:a2:1c:15:2f:85:8f:03:1a:21:9e:42:21:08:37:da:c9:87:
fd:dd:51:dd:14:b5:b9:a1:61:69:e8:67:53:29:35:c2:9f:47:
28:c7:88:31:f0:d2:de:fa:bb:ff:f1:6b:ef:17:9a:d0:2e:c9:
81:8a:4e:b7:6c:26:fc:3c:7b:55:d5:30:f8:cf:4c:29:a2:10:
b2:5d:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org