Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/5jtPP6i6w0LAQ4t-QGD-eKxCDr4.roa
File: 5jtPP6i6w0LAQ4t-QGD-eKxCDr4.roa (raw, json)
Hash identifier: iePasdXcm4O+b0bbCL5jsNeFf4T4Og72JcVOZOT+8ac=
Subject key identifier: E6:3B:4F:3F:A8:BA:C3:42:C0:43:8B:7E:40:60:FE:78:AC:42:0E:BE
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 01856BC0F3F7F917538D85AD6F0A2515C153
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/5jtPP6i6w0LAQ4t-QGD-eKxCDr4.roa
Signing time: Sun 01 Jan 2023 05:14:45 +0000
ROA not before: Sun 01 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209386
IP address blocks: 193.29.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f3:f7:f9:17:53:8d:85:ad:6f:0a:25:15:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jan 1 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63b4f3fa8bac342c0438b7e4060fe78ac420ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:58:7b:6e:57:fd:a4:ef:7d:87:5b:a6:12:
e5:1e:d2:48:a0:8a:3b:74:36:dd:87:9d:f0:5e:e8:
42:a4:56:a6:53:57:d3:aa:73:b7:fa:bd:7f:18:29:
92:13:80:51:f7:ca:cd:ab:6c:dd:fa:94:dc:41:90:
b9:ad:2e:16:0c:4e:c8:f8:30:ea:d7:b7:15:d5:6d:
ca:22:a0:a3:aa:65:da:e6:cd:08:d2:87:ca:08:c9:
af:7f:26:a4:57:50:d5:ce:e7:41:09:6f:4c:39:7d:
04:dd:54:fb:45:fe:44:9a:b4:03:10:b6:e3:ec:74:
b4:37:b4:80:e3:0a:43:c4:27:a0:6e:ba:14:d4:a7:
49:06:47:cd:ba:09:aa:0f:3b:e2:17:b4:8d:50:25:
6f:56:8e:0d:1f:44:d1:5c:be:44:5a:b5:7c:b4:d8:
53:36:8e:5a:59:cc:1b:c1:70:51:7c:56:96:30:41:
c5:86:48:2c:a5:67:0f:99:82:2d:72:c4:56:39:85:
85:8e:cc:e0:9f:02:cd:ed:14:8f:70:7a:4a:c5:e2:
cb:58:24:3f:4e:be:a1:53:e0:ce:16:64:35:d9:7a:
ea:a2:e9:e3:53:c0:8b:d6:ba:34:44:4a:ba:7f:46:
81:17:99:ef:5d:27:83:88:eb:d0:d8:d2:e4:22:9d:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:4F:3F:A8:BA:C3:42:C0:43:8B:7E:40:60:FE:78:AC:42:0E:BE
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/5jtPP6i6w0LAQ4t-QGD-eKxCDr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.44.0/22
Signature Algorithm: sha256WithRSAEncryption
55:cb:44:5a:80:9f:21:47:78:d2:dd:8d:8d:e0:43:77:94:44:
da:53:65:a7:22:53:8c:d4:04:19:50:70:d8:59:fb:4d:fc:66:
23:c7:9b:fd:73:e2:82:13:8e:df:70:59:0b:b7:f0:53:df:da:
85:a0:3b:5a:e9:1c:8e:48:cd:e1:17:f8:cf:dc:37:7f:5e:05:
46:ac:57:8a:3f:1c:f1:67:13:0a:e5:78:4f:15:d6:e0:b3:de:
81:31:29:23:bb:a3:b7:65:ec:05:ff:49:0e:b0:33:40:f4:df:
35:f4:66:ba:f1:0e:87:c1:a0:38:ec:18:54:e7:8b:61:26:8b:
1f:68:93:f2:92:0e:15:4a:a8:e5:bd:16:84:12:86:45:6c:ea:
db:13:5b:a9:fe:43:c4:f2:68:7e:66:02:44:4b:96:39:78:02:
b7:36:d4:61:f7:66:1c:48:21:c8:08:c8:2c:5f:f3:08:e9:dd:
8b:73:af:34:7f:7d:35:94:47:36:8f:35:6e:e6:34:49:b4:c4:
e5:3b:26:ea:39:15:c8:ab:60:68:b8:76:ec:72:61:7a:19:02:
6d:98:68:5b:1b:4c:7c:ed:51:73:f3:08:69:97:89:b4:25:15:
8b:1a:c0:d8:ae:9f:c2:48:b1:74:e9:78:bb:8c:af:38:d8:66:
69:81:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:11 2024 by rpki-client on console-ams.rpki-client.org