Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/y20rKQXfHSUdYi64W4oAB2sV86Q.roa
File: y20rKQXfHSUdYi64W4oAB2sV86Q.roa (raw, json)
Hash identifier: 9+it+YfYk4ulJcLO5W9nqQkKJNK3UwXRKjYkBel+bLo=
Subject key identifier: CB:6D:2B:29:05:DF:1D:25:1D:62:2E:B8:5B:8A:00:07:6B:15:F3:A4
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01856F549A4DF2617DA0E8F9FFF9CE7768B7
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/y20rKQXfHSUdYi64W4oAB2sV86Q.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203231
IP address blocks: 193.218.161.0/24 maxlen: 24
193.218.160.0/24 maxlen: 24
193.218.160.0/20 maxlen: 20
2a0a:5180::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9a:4d:f2:61:7d:a0:e8:f9:ff:f9:ce:77:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6d2b2905df1d251d622eb85b8a00076b15f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:6b:04:90:d0:db:9c:6e:ce:d9:e6:43:c1:
9a:7b:40:d1:5d:76:36:b2:2a:61:38:bf:77:96:98:
2e:b7:21:36:2d:94:7f:0b:9b:b8:82:af:4b:ca:fd:
d9:3a:58:bb:ee:f7:6f:0a:29:b3:5a:a0:81:be:79:
4e:26:fd:6a:4a:99:8f:43:43:63:7f:ed:9c:83:3a:
50:c4:86:c6:32:87:b5:4e:8a:6b:59:e2:86:96:87:
48:c3:7f:23:80:20:7e:a7:ba:71:80:97:8d:c4:a3:
f6:47:f3:76:7f:5d:0d:46:da:68:5d:f6:62:8a:b2:
e1:1b:ed:d0:2e:5c:a8:53:17:25:5a:4b:43:c4:3a:
3b:01:de:ff:73:cc:fa:62:b0:ab:19:d1:12:5e:5a:
22:d5:83:d0:be:80:70:ce:b3:84:5a:2e:f6:19:89:
04:b7:96:aa:5e:c8:59:c6:4e:f4:20:79:4d:45:bb:
f8:0f:0a:4d:a0:af:c8:56:7b:13:42:d4:3e:f0:9f:
9f:9e:f8:e0:6a:83:95:7b:a0:bc:47:21:ad:66:f4:
90:0f:c9:24:88:d3:52:e7:3c:21:05:73:7f:34:11:
a0:1d:d5:5e:88:d2:b9:68:bc:7e:e2:ab:a6:60:96:
e6:82:e4:3f:d8:9d:b7:4d:bf:66:77:e7:b7:60:03:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:2B:29:05:DF:1D:25:1D:62:2E:B8:5B:8A:00:07:6B:15:F3:A4
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/y20rKQXfHSUdYi64W4oAB2sV86Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.160.0/20
IPv6:
2a0a:5180::/29
Signature Algorithm: sha256WithRSAEncryption
81:83:33:0d:f6:24:a2:9e:5a:cf:4c:fc:be:47:e3:75:5b:46:
97:30:03:bb:07:8f:ac:8d:4a:ed:f2:4c:9e:79:91:1e:81:0c:
cc:75:09:0a:a2:7a:20:ec:3d:a8:64:17:bb:ed:5e:53:b2:ec:
b1:9f:43:87:13:e4:34:97:51:c9:d8:e1:e2:dd:48:a5:af:0a:
04:c1:fb:3b:10:c7:8f:58:99:37:fa:4f:dd:a9:57:90:91:25:
63:ab:54:00:9b:f7:f7:73:89:dd:4e:d8:ab:48:92:b7:30:82:
b4:88:b9:ac:7b:f6:c2:9b:51:44:65:e2:e0:70:29:56:fd:32:
0d:67:5b:57:e7:7b:33:4a:30:7a:f7:92:7c:e1:12:5f:e9:91:
65:46:8c:f0:94:c2:cc:80:9d:fa:72:09:cd:f6:03:cf:93:c6:
f2:89:da:86:5e:de:ae:82:73:ba:62:88:47:21:d8:a2:d7:6a:
55:80:4e:f7:51:16:35:7e:89:f8:6e:3a:c1:b9:e2:39:cf:24:
4e:86:55:2a:25:1f:62:46:5f:67:7b:1b:13:5b:1a:9f:c9:ba:
94:30:af:e7:d2:3d:1e:ef:7f:8c:6d:f2:aa:91:d7:e9:54:71:
ed:b6:d1:ed:51:6b:36:e1:54:0c:0b:7d:b9:ee:c4:77:a5:e0:
7f:e7:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org