Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XC3opszpI9Uk5uupkkxGZ1r_W1E.roa
File: XC3opszpI9Uk5uupkkxGZ1r_W1E.roa (raw, json)
Hash identifier: TMCkxprI9atJ0Dzp8YkbYOD3bgK7KinvwViEOr05ASI=
Subject key identifier: 5C:2D:E8:A6:CC:E9:23:D5:24:E6:EB:A9:92:4C:46:67:5A:FF:5B:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AA71698D7A86ABE3ABB7823EE26D371D1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XC3opszpI9Uk5uupkkxGZ1r_W1E.roa
Signing time: Mon 18 Sep 2023 06:59:50 +0000
ROA not before: Mon 18 Sep 2023 06:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:16:98:d7:a8:6a:be:3a:bb:78:23:ee:26:d3:71:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 06:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c2de8a6cce923d524e6eba9924c46675aff5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:07:2a:53:d0:16:9a:27:57:5c:a1:7d:a0:
82:c6:9d:f1:e4:db:e0:a0:2c:39:45:aa:dd:40:24:
c2:ec:91:9e:14:f8:ba:8e:6a:79:b4:19:15:0d:d1:
d6:2e:04:70:e1:c1:d3:f3:5d:68:25:00:3f:46:1c:
63:34:94:5b:7c:26:cc:15:2b:52:c3:ff:40:36:f6:
c2:d9:be:d0:b7:68:e1:77:03:1e:a8:8d:51:c5:72:
eb:94:f4:f9:3f:d8:5b:4e:f6:88:ee:32:57:ae:ac:
5a:98:7e:18:5c:95:80:54:05:d8:f9:0a:bc:00:be:
cc:4d:97:f6:bd:49:ed:1e:c8:d5:50:8d:7e:28:de:
f1:a7:89:68:98:d9:59:b9:12:53:d7:b5:60:c6:02:
75:75:e3:63:93:18:04:52:86:bc:78:19:b6:c7:48:
82:18:96:b0:79:8e:73:89:51:99:c8:bf:f2:c4:d3:
ea:99:76:d2:ec:38:5b:02:1b:c4:49:bc:8f:3d:11:
02:f0:bc:63:22:f2:e0:f7:f7:81:d2:ef:8c:35:3a:
fa:bc:b1:82:d1:46:d1:03:61:bd:dd:18:bd:a6:ca:
e6:3e:37:42:a5:d5:ea:90:0f:b7:77:b5:f0:76:1a:
f4:2a:13:f6:0f:1b:bc:a5:a5:52:db:c2:38:aa:0a:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:E8:A6:CC:E9:23:D5:24:E6:EB:A9:92:4C:46:67:5A:FF:5B:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XC3opszpI9Uk5uupkkxGZ1r_W1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:07:e2:c0:14:55:1a:b1:9e:4b:94:84:bf:15:77:2a:69:c7:
df:ec:aa:d5:d1:2e:b3:dd:b2:04:b3:d9:9f:dc:54:b3:26:3d:
8d:58:e3:b8:5b:68:a4:14:f5:3c:06:e4:55:af:65:d4:d1:fe:
94:be:0b:98:e6:12:4a:0e:96:d9:15:cc:de:ce:ba:25:59:67:
fb:99:be:b7:bd:a8:6d:a8:5e:41:5f:9e:75:5a:25:11:89:1a:
b5:d5:5c:86:90:3b:6e:29:98:41:1a:3e:3c:a5:34:3c:8c:24:
8e:f5:8d:a1:34:ac:bb:7a:37:8c:e5:65:db:f5:b8:d6:bc:d2:
48:e7:fa:b8:38:82:c7:50:8e:f9:19:6c:02:f2:e2:b2:44:ef:
bb:b2:f5:b6:cf:d7:4f:78:c8:9e:d6:87:c5:20:a5:f5:fe:6d:
45:45:a7:49:36:c0:97:52:19:5b:99:30:9d:1b:d1:4c:14:88:
f8:24:c9:50:cd:a6:24:35:0b:98:c5:2c:29:30:ea:5f:39:77:
bb:b1:73:bc:bd:cb:6a:db:bf:30:fa:ed:68:48:46:cc:5b:f6:
3c:8a:32:34:a9:e4:82:fb:0d:26:61:dd:de:3e:b1:9b:3b:5c:
92:19:f5:09:8a:26:51:69:47:c2:62:85:4e:2d:7a:35:1d:3e:
93:b6:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org