Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TCCmflstRf0MCTqQrSc99-kc3aA.roa
File: TCCmflstRf0MCTqQrSc99-kc3aA.roa (raw, json)
Hash identifier: P9VSGf7xVHmh9Oed97pHrcSX4F781qIp9M+FWeVsDFI=
Subject key identifier: 4C:20:A6:7E:5B:2D:45:FD:0C:09:3A:90:AD:27:3D:F7:E9:1C:DD:A0
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0185726B7109A93D69D47A0A8BC724AA2ED2
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TCCmflstRf0MCTqQrSc99-kc3aA.roa
Signing time: Mon 02 Jan 2023 12:18:41 +0000
ROA not before: Mon 02 Jan 2023 12:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44176
IP address blocks: 193.38.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:6b:71:09:a9:3d:69:d4:7a:0a:8b:c7:24:aa:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 12:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c20a67e5b2d45fd0c093a90ad273df7e91cdda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:87:7a:47:9e:35:c8:03:c1:7d:bd:fa:9f:
9a:f7:ad:41:cc:d0:90:f1:82:c8:b3:20:03:bf:9f:
30:08:80:cb:35:46:72:83:d5:b6:dc:e6:05:11:46:
c5:b1:04:76:a8:e2:0b:7b:7d:57:e3:76:52:8a:14:
d8:ab:4f:e7:db:b0:5c:4d:6a:16:b3:bd:bd:0b:a3:
bd:aa:66:c8:b6:0d:85:dc:02:08:04:52:6e:16:6d:
2e:6a:ad:8b:50:e3:28:9c:f4:3f:79:1c:ed:b3:3c:
00:82:e5:f4:6c:92:f8:a8:6f:f7:ff:52:be:e3:aa:
13:74:54:21:1e:a8:b3:92:14:c5:a1:86:4b:34:22:
17:b8:6e:52:35:4d:44:2f:51:90:b8:93:89:f6:fa:
91:fb:5f:35:7c:30:68:78:81:b0:80:46:b0:a0:31:
57:5d:9f:c7:78:ca:ad:03:0c:d9:d5:00:2c:97:64:
33:28:af:5e:9c:c5:c1:7f:9f:41:5d:6e:26:d3:d3:
1e:9c:bf:5e:bd:1b:e7:f5:88:30:ba:b1:73:52:53:
72:26:6c:81:47:31:39:fa:a0:4f:ef:7a:05:65:08:
b4:1e:e2:18:18:fd:04:cc:2d:fc:37:09:f7:85:fb:
27:48:51:63:f5:f5:c2:e4:28:03:43:b9:39:4d:65:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:20:A6:7E:5B:2D:45:FD:0C:09:3A:90:AD:27:3D:F7:E9:1C:DD:A0
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TCCmflstRf0MCTqQrSc99-kc3aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:11:76:98:34:63:10:19:9f:23:17:9c:e2:35:34:62:0e:e3:
4d:98:d2:2b:40:fe:aa:59:07:8f:16:e1:9c:43:dc:74:72:d1:
35:04:c2:35:a9:db:54:52:63:9c:e5:0e:dc:6f:31:44:c9:ed:
a6:d8:b4:80:31:c5:fc:d3:f1:fc:a6:43:91:ee:09:9f:e9:c6:
92:9a:55:4b:4e:16:57:37:7f:e7:ca:d6:5d:b9:b3:15:4f:a9:
82:7d:58:7f:04:fb:7e:dd:92:01:db:12:a7:32:dc:8f:5b:ba:
41:e5:2a:40:6f:3d:b6:b0:89:ef:c3:53:d6:e4:17:27:22:9e:
80:b1:45:8c:13:f5:d0:b4:46:bf:6e:31:8d:cb:de:06:0f:7d:
ca:4c:08:4d:2a:3d:41:cc:05:ae:36:6c:f7:41:ed:d0:e6:d8:
45:7e:2d:9c:cd:5a:4e:ec:8e:97:c4:38:ce:47:3b:7d:8f:1f:
99:6f:3e:de:83:be:d5:78:cd:13:df:05:31:28:f5:5c:3c:09:
42:1a:83:8a:da:cb:d9:4a:62:96:3e:bc:2f:da:09:89:87:77:
e3:68:b9:94:fd:ef:4f:19:e4:fe:c3:be:a2:68:ac:bc:eb:25:
e9:34:03:75:e5:f0:e0:38:58:b6:74:71:01:c8:e3:1a:5e:04:
c3:e6:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:03 2024 by rpki-client on console-fra.rpki-client.org