Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/Ph1IkXr2cONbfKmtkVUdw8TrsvM.roa
File: Ph1IkXr2cONbfKmtkVUdw8TrsvM.roa (raw, json)
Hash identifier: /5dz60oWIGg8W74rcNeVjVTM6TQK3TMJWol/TuXZH7s=
Subject key identifier: 3E:1D:48:91:7A:F6:70:E3:5B:7C:A9:AD:91:55:1D:C3:C4:EB:B2:F3
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01856B8A1C483243588379A1DBC0A049E33A
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/Ph1IkXr2cONbfKmtkVUdw8TrsvM.roa
Signing time: Sun 01 Jan 2023 04:14:51 +0000
ROA not before: Sun 01 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 193.110.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1c:48:32:43:58:83:79:a1:db:c0:a0:49:e3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jan 1 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1d48917af670e35b7ca9ad91551dc3c4ebb2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:fe:26:21:33:25:47:30:35:fe:62:b9:72:
30:68:af:d5:6b:8a:45:45:76:f8:c1:06:ee:e2:a2:
4c:81:df:4d:97:5e:d5:e5:d1:44:21:d3:8b:8a:98:
d8:b6:c6:74:02:4e:cf:d2:96:70:14:89:5b:a5:21:
6d:1b:e9:df:90:07:0c:d2:24:b5:06:ce:b7:73:21:
c6:22:de:1e:c8:a3:87:85:6b:c9:2e:d4:b7:14:85:
61:3d:7a:ce:97:54:92:b5:71:73:24:25:72:2d:23:
6a:08:5d:a6:0e:58:83:38:b0:66:aa:5c:02:3f:eb:
ed:1c:45:58:5b:6b:2d:42:fb:22:a7:fc:73:86:6d:
5c:c3:8e:55:46:b3:e0:4e:28:52:63:1e:56:8c:92:
34:1c:67:3a:80:5b:cf:8c:0c:d0:ad:24:fa:5a:c9:
96:07:b5:23:0f:95:78:1d:f6:30:3c:60:a5:45:f7:
e6:e7:58:55:1d:72:c3:d3:b6:0d:6a:8b:c8:ce:af:
c3:88:58:36:f8:94:cc:56:e7:4b:93:ab:74:08:f6:
e3:d9:90:a1:8f:1c:a6:69:1d:9a:c4:fb:43:0a:83:
fd:3c:1e:e7:82:97:b5:8b:26:dc:38:65:5c:77:01:
64:be:b6:36:ac:7b:14:06:8f:d6:18:38:a5:95:29:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:48:91:7A:F6:70:E3:5B:7C:A9:AD:91:55:1D:C3:C4:EB:B2:F3
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/Ph1IkXr2cONbfKmtkVUdw8TrsvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:94:35:60:43:81:57:0f:4d:37:ad:73:dc:5f:d1:7d:82:38:
2d:78:8c:ce:be:2c:30:3e:61:16:7a:ec:40:f8:59:33:c0:96:
43:72:5f:1e:0d:1f:14:94:06:c0:ad:5d:bb:8b:9c:a2:3f:9a:
14:12:96:96:93:1e:13:54:cb:ae:27:a1:d0:1f:db:c7:bd:66:
00:18:8d:db:78:02:4e:8f:a0:03:97:75:08:98:37:00:32:4c:
6b:df:f2:90:c7:14:e9:26:74:7b:a8:0f:9a:59:14:ea:07:b1:
73:d6:f6:c0:2e:a3:cf:9f:af:2b:48:c0:cf:53:fb:70:17:df:
c1:bf:7d:05:ee:e8:7c:15:8d:10:73:a4:e9:cc:ef:ca:38:4d:
3c:5a:b8:d3:09:e2:79:1a:70:93:06:9d:f4:36:9c:76:96:35:
60:28:7f:2e:90:6e:c0:7a:55:e4:16:b1:dd:38:c4:23:73:08:
ab:35:9a:02:cc:ab:de:1e:60:88:4d:66:b1:8e:65:7a:d1:3e:
42:06:2e:c8:0d:91:66:9f:8d:48:49:9c:8a:f9:82:93:38:9d:
8e:5a:67:4e:9e:ac:b2:5a:30:ce:0c:d5:f8:61:5c:1d:6c:41:
23:33:6a:c2:47:48:2d:86:1c:ee:54:bd:a7:98:50:a0:8c:d4:
61:11:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org