Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TxfOA8GackdB8P7Dd4nmOxE9CpA.roa
File: TxfOA8GackdB8P7Dd4nmOxE9CpA.roa (raw, json)
Hash identifier: 9hjzwUAkGS9UjA/dLp1wEqH90/JOd+fufhA90TGb8Es=
Subject key identifier: 4F:17:CE:03:C1:9A:72:47:41:F0:FE:C3:77:89:E6:3B:11:3D:0A:90
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0185706769A1FE8200D4087EDBDED0622B9D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TxfOA8GackdB8P7Dd4nmOxE9CpA.roa
Signing time: Mon 02 Jan 2023 02:55:03 +0000
ROA not before: Mon 02 Jan 2023 02:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201935
IP address blocks: 193.57.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:69:a1:fe:82:00:d4:08:7e:db:de:d0:62:2b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f17ce03c19a724741f0fec37789e63b113d0a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:f0:37:0d:a6:15:b0:d3:40:8a:b9:98:b3:
1b:8c:3d:7d:2b:6e:fb:0e:64:86:0f:8f:ef:5b:79:
8f:65:fe:cb:2b:8a:7f:e5:20:c5:6b:89:68:69:1a:
07:3f:dc:69:be:c3:05:44:82:62:45:e5:bf:21:d3:
58:e7:99:20:e1:e3:f8:63:01:6d:47:d9:a6:fc:b1:
00:ef:6b:f3:e9:ae:47:d9:6c:b3:4f:cf:e3:0f:d8:
52:84:ad:2b:a0:4e:fb:72:b3:13:ad:53:a5:a4:e4:
1e:86:06:8c:98:c6:3a:5a:79:14:ab:9c:81:2e:bc:
60:dd:53:b1:8f:c1:c1:41:d4:d8:78:8d:40:55:2c:
f8:fa:cb:a0:c7:cd:c6:c8:34:97:13:57:04:4f:7a:
dc:7f:0c:c7:d6:29:50:68:e5:ba:dd:a5:ab:18:82:
02:92:f4:be:50:80:3e:7e:ab:b7:43:8c:e7:d4:47:
d4:1e:a7:8a:7f:7a:ba:3c:5d:6c:c6:56:5d:14:5f:
53:1b:b2:fd:e2:ad:5a:cf:a8:0d:93:0d:64:1a:00:
c2:86:9e:3e:b7:32:0d:49:05:b4:c0:2e:4e:28:31:
7c:2c:f8:93:49:41:ae:4d:6b:bc:ae:a8:1f:f2:58:
7f:b4:55:b8:59:45:cd:4b:08:7e:2f:98:7f:d5:19:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:CE:03:C1:9A:72:47:41:F0:FE:C3:77:89:E6:3B:11:3D:0A:90
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TxfOA8GackdB8P7Dd4nmOxE9CpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:df:4d:f3:e1:89:66:2b:c2:99:62:2f:fb:7a:ac:26:6e:06:
c1:75:c6:d7:b1:7b:92:02:2a:06:ce:6c:49:6f:dd:8b:65:2e:
e2:80:0a:84:9c:e8:18:2f:7b:97:0c:56:8b:1b:48:75:28:c3:
76:d9:06:88:e6:49:0c:16:28:ba:1b:c8:1a:93:58:1a:a6:e4:
9f:23:1e:ae:76:1c:e8:8b:59:03:f5:83:ae:67:f5:3f:71:2f:
b5:e8:d4:bf:ab:d0:3e:09:8e:bc:a3:39:62:c4:71:b4:34:b4:
90:da:4f:41:50:9a:63:8f:a9:76:62:62:a9:66:d9:b0:1b:96:
a5:1d:0e:6c:02:83:5e:be:f8:08:ec:58:8d:db:08:2c:fa:29:
68:7b:12:cd:ac:92:14:05:d6:48:5f:bd:23:23:7e:1c:28:bf:
44:2b:d0:47:00:f1:47:68:a4:a0:c3:32:6b:89:7c:35:01:07:
7f:de:43:95:53:cc:28:0a:28:1f:b9:cf:c2:87:0d:db:e4:fc:
38:54:df:c3:8f:4a:f2:9a:9b:28:7c:ed:45:5e:0b:bd:79:26:
40:32:47:aa:3d:d8:f5:40:59:73:70:93:cc:e5:a6:3d:fd:b4:
96:b5:6c:46:75:c8:07:af:c9:08:29:9a:1c:6e:c4:5a:4c:ef:
ca:54:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org