Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/PCUlc2E0d2iNRZ8r4cyn7y0_du8.roa
File: PCUlc2E0d2iNRZ8r4cyn7y0_du8.roa (raw, json)
Hash identifier: 3oDvKfOgf8Z+KCz21wAp0CIqpe1Rr3KCwnlruWhH9iM=
Subject key identifier: 3C:25:25:73:61:34:77:68:8D:45:9F:2B:E1:CC:A7:EF:2D:3F:76:EF
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018570DE4FE34FBD082D0A187A126198F803
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/PCUlc2E0d2iNRZ8r4cyn7y0_du8.roa
Signing time: Mon 02 Jan 2023 05:04:55 +0000
ROA not before: Mon 02 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 193.30.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4f:e3:4f:bd:08:2d:0a:18:7a:12:61:98:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 2 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c252573613477688d459f2be1cca7ef2d3f76ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:3e:c3:aa:96:a9:03:2e:32:eb:86:f7:eb:
22:01:68:93:13:0c:7d:0e:ac:d5:f8:26:29:7b:02:
8f:0b:21:36:a0:7a:bd:05:65:66:0d:a6:1d:02:8b:
2d:0d:18:33:e4:69:d1:63:e8:53:fe:e5:b9:1b:13:
41:3c:d3:f5:d7:ba:00:45:be:51:d0:f5:42:25:d1:
98:06:11:70:a1:38:e1:16:cb:d6:a7:5d:ba:06:27:
cc:8c:09:cd:b8:f3:01:f4:29:17:b3:59:40:1d:21:
48:ec:a0:9e:a6:7c:9f:c9:0f:73:4c:7b:0f:b5:b8:
05:c0:cc:cd:02:08:fc:49:be:c2:43:a8:94:0d:ad:
5f:ad:10:0f:aa:71:75:90:37:9d:31:ca:10:00:33:
ac:7b:77:e7:8c:c1:78:35:06:ed:04:90:33:f2:47:
4f:a6:e0:4a:cb:58:d7:9f:67:00:07:03:d0:7b:8e:
57:68:71:68:cb:6a:be:f3:d2:a6:6d:b0:fd:cb:1e:
6a:22:94:21:d4:77:72:b2:03:94:6a:61:35:b0:67:
a0:05:c6:1c:76:ae:64:51:b7:41:1d:30:fd:17:c5:
e9:18:f4:00:28:3b:3a:69:e7:6e:51:a6:e8:58:51:
2c:80:77:1f:f9:97:98:53:30:fd:62:eb:42:ec:53:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:25:73:61:34:77:68:8D:45:9F:2B:E1:CC:A7:EF:2D:3F:76:EF
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/PCUlc2E0d2iNRZ8r4cyn7y0_du8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:84:2e:af:1f:ac:49:ab:30:b0:19:16:98:de:78:fd:d9:15:
b2:3e:45:ce:00:02:5a:dc:cf:18:07:f1:4d:3c:2e:20:32:a2:
a3:62:11:0c:4b:c1:75:03:59:13:e2:e7:09:41:f8:dd:aa:b2:
71:16:24:d0:fb:f3:ba:59:94:16:46:f6:21:04:fb:d6:a3:20:
2c:10:dc:7a:95:ec:05:02:a3:d0:1d:1d:a1:8b:b6:df:71:41:
14:fa:a0:72:6b:03:6a:69:59:a1:a2:26:13:98:9b:05:c3:f5:
b9:b9:a4:ef:41:36:5a:9a:69:44:88:c6:7b:d3:7c:09:25:99:
1b:f2:bb:22:a8:87:b0:8d:b4:11:10:0d:56:a7:0b:50:62:7a:
13:85:98:2b:59:fb:c9:df:2c:25:b1:93:7c:46:14:84:62:32:
8d:1a:f2:76:09:df:76:0e:19:ac:d1:e4:e8:88:2c:f8:4c:c9:
f1:d2:06:ea:e7:1a:3e:b2:ab:08:c1:ce:09:46:ca:ee:6c:15:
0b:f2:9c:8b:fe:e2:a7:37:04:4a:ea:17:19:5b:22:4f:71:e4:
db:bf:85:5a:e0:d7:55:77:aa:80:ce:23:5f:49:0b:1c:10:10:
a0:dc:dd:a4:30:07:3f:b0:7b:d0:3f:22:81:3a:21:82:0b:95:
0c:14:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:23 2024 by rpki-client on console-ams.rpki-client.org