Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/7LRpKEXiBNkuvge9E7eInpiWBsI.roa
File: 7LRpKEXiBNkuvge9E7eInpiWBsI.roa (raw, json)
Hash identifier: ih89TLAw7FJc4d6OcouP4bWCU89dAJ4UJ3V2ALII7DI=
Subject key identifier: EC:B4:69:28:45:E2:04:D9:2E:BE:07:BD:13:B7:88:9E:98:96:06:C2
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 018573280BA26E82E59481F55C375874B508
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/7LRpKEXiBNkuvge9E7eInpiWBsI.roa
Signing time: Mon 02 Jan 2023 15:44:42 +0000
ROA not before: Mon 02 Jan 2023 15:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8387
IP address blocks: 193.150.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 07:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:0b:a2:6e:82:e5:94:81:f5:5c:37:58:74:b5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jan 2 15:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecb4692845e204d92ebe07bd13b7889e989606c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:57:0d:d0:d1:29:df:88:f8:25:5f:fa:76:
99:7e:b1:1b:64:02:86:3b:b3:df:cf:d1:f5:84:1c:
f0:a4:61:0e:1a:ee:b6:f0:f2:29:d8:21:f7:a0:7e:
f8:af:0a:a9:71:96:42:02:8e:aa:a3:35:51:3b:98:
75:c4:00:3c:3c:29:80:8c:4d:ff:49:8e:71:b0:de:
d3:f8:d2:f3:a6:4b:06:b7:4b:79:ca:8c:f4:a2:90:
02:1f:68:1d:c5:eb:4e:00:31:ee:ec:e0:e5:c8:75:
76:c1:b9:8f:cf:9e:66:ec:5f:07:a7:ab:a7:de:5a:
39:dc:fa:56:03:4a:a5:93:c7:93:af:1e:a8:f5:22:
13:8e:f9:f4:4b:7b:32:44:10:1d:d2:57:71:c3:71:
ef:dc:12:ea:c5:6e:dc:fb:3b:c1:a3:33:09:70:4e:
c1:6a:89:d9:e2:54:f7:cd:4e:66:25:90:9d:99:58:
d6:c1:d7:54:d2:c8:d8:0a:5c:b4:c5:3f:f9:3e:c6:
0e:d7:1b:2c:ce:78:fb:b4:bc:c8:de:08:8b:65:a5:
70:65:e3:c2:2e:f9:69:99:8f:a6:cf:f8:e7:b0:8c:
50:43:07:b3:3a:9f:a7:3c:59:58:b8:e9:cb:b7:b4:
9c:02:71:7b:1b:44:13:44:e4:22:bf:4d:11:8b:d6:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:69:28:45:E2:04:D9:2E:BE:07:BD:13:B7:88:9E:98:96:06:C2
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/7LRpKEXiBNkuvge9E7eInpiWBsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.64.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e1:06:86:25:b4:68:87:9c:52:c4:9d:cf:1d:45:3a:42:7f:
b3:58:15:6a:5c:a7:48:8b:1e:72:86:bd:7d:3d:da:dd:0d:12:
f4:14:be:3b:c1:ac:c1:87:f0:8a:fb:09:42:74:72:7d:8a:17:
4a:12:9f:bd:56:19:be:51:bc:ed:b6:3c:be:ef:f0:c0:24:03:
fe:62:62:64:a2:6b:61:03:3e:25:eb:ce:d0:ed:15:1d:f2:22:
77:17:d9:5f:16:c0:b3:e3:39:79:c8:cd:95:4f:8c:8b:4a:6b:
20:12:5a:a5:81:8d:74:75:ec:ac:4f:32:88:fe:00:4f:2b:14:
05:83:f6:27:4a:ff:c8:1d:fb:48:5b:0c:53:ba:a8:de:b8:f9:
89:1a:90:ba:64:31:00:a9:e3:90:8a:19:bf:1b:3e:f4:35:24:
64:6e:29:e4:37:d0:d6:8d:99:1d:68:dd:9d:82:4d:6a:01:a2:
3f:3f:15:94:ef:93:8b:54:d3:66:91:94:d8:1f:30:f7:64:a6:
79:71:a3:be:fd:1d:cf:af:1d:59:59:50:b9:d4:74:97:9d:b4:
6a:44:24:ab:4f:1b:c5:7f:d5:4c:ff:c6:99:f6:9d:36:bd:83:
eb:ac:66:50:8b:e9:4f:82:d0:05:30:18:b0:0f:2c:6f:fb:f1:
50:32:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:08 2024 by rpki-client on console-ams.rpki-client.org