Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/idy2plNN2jgSb0Fj4JnYSHckZJc.roa
File: idy2plNN2jgSb0Fj4JnYSHckZJc.roa (raw, json)
Hash identifier: uqF1JRX/sHKblphLKhokdikiDwdeYKEECfM2hqbLZgs=
Subject key identifier: 89:DC:B6:A6:53:4D:DA:38:12:6F:41:63:E0:99:D8:48:77:24:64:97
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 018570150A72D43255D38C37C066F907A8BF
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/idy2plNN2jgSb0Fj4JnYSHckZJc.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 193.38.178.0/24 maxlen: 24
193.38.179.0/24 maxlen: 24
193.38.180.0/24 maxlen: 24
193.38.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0a:72:d4:32:55:d3:8c:37:c0:66:f9:07:a8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89dcb6a6534dda38126f4163e099d84877246497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:bd:de:99:41:c5:72:8e:20:a3:90:63:9e:
be:36:2b:af:e8:29:31:2b:42:07:3a:8e:0b:41:60:
fd:17:9d:db:7d:b4:fb:9d:45:04:d7:b3:88:78:c8:
00:14:67:58:05:c7:0c:5c:ae:b1:9b:5b:02:06:72:
0b:33:4e:85:33:de:83:24:7b:ef:8a:98:1d:5c:e0:
36:00:d3:36:fc:7c:25:db:45:56:c6:5d:9b:db:d2:
09:c8:a6:1e:c2:51:f5:19:f2:7a:80:e6:43:8a:5f:
85:b4:21:c2:75:73:5e:92:31:f3:01:21:7d:65:9c:
4a:12:6e:bd:39:8a:ee:6c:79:d8:96:cf:2f:9b:6f:
0b:5e:2b:7e:61:3a:e0:5c:e5:d3:6b:ae:61:59:d8:
a8:63:33:0d:14:bb:52:7b:6f:78:7b:34:eb:39:68:
ac:c5:b2:85:e2:c4:99:5a:f3:36:e6:38:12:65:55:
3a:b1:8e:ea:4b:72:02:76:7b:a6:4f:ba:a2:e3:2c:
96:53:aa:94:6b:31:09:a4:61:f1:6f:a0:ce:40:51:
43:67:a8:89:d1:77:90:43:bc:6d:92:c8:f5:68:6c:
46:f6:27:1b:b0:9d:b0:4a:5c:03:35:b4:1c:10:22:
b1:df:03:90:28:e4:a2:c1:87:b6:cf:1d:07:e2:bb:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:B6:A6:53:4D:DA:38:12:6F:41:63:E0:99:D8:48:77:24:64:97
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/idy2plNN2jgSb0Fj4JnYSHckZJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.178.0-193.38.181.255
Signature Algorithm: sha256WithRSAEncryption
a7:ac:f2:69:93:07:b6:4f:6a:00:ab:4d:af:c5:8e:2c:c1:a3:
fd:ad:f7:11:8d:6f:12:0f:bd:fb:21:96:42:a0:2d:a4:58:74:
de:e3:5f:ff:32:33:ef:6c:39:e1:a4:41:6b:4f:22:f5:c9:8d:
e3:0d:6c:5a:7c:4d:d0:f3:31:dc:42:6a:2f:33:62:39:27:55:
c5:2b:0f:e5:d9:cc:1e:b3:49:91:83:22:63:6e:0b:6c:df:e6:
49:2d:7c:31:20:93:fd:ca:0c:04:01:e9:9c:a2:62:94:99:dd:
0d:eb:c2:5f:99:2f:0e:8d:02:9d:da:1b:8f:83:ba:2a:0d:e3:
bf:e4:90:be:ce:31:b2:3d:dc:22:9a:0a:92:7c:cb:6c:21:f6:
df:6d:f9:a4:0d:fd:cc:ed:25:95:6c:7d:5e:f0:df:41:63:0a:
22:98:78:9f:93:26:69:0a:7b:8c:31:84:9f:21:78:07:ae:64:
31:23:1f:29:2d:ad:39:1d:ff:53:7e:54:82:e9:f8:30:d3:4c:
b3:4d:96:e1:48:fa:4e:df:11:1c:75:c2:3b:06:28:60:ed:31:
df:70:a6:a6:6e:13:94:08:f6:f9:24:73:8c:b1:42:70:d6:44:
d3:25:ef:c0:be:bf:28:18:74:15:55:63:4e:7f:aa:45:94:fc:
0e:a1:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:41 2024 by rpki-client on console-ams.rpki-client.org