Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/3apPj1QX9pTuY9ZUGnQKJ1KJlkw.roa
File: 3apPj1QX9pTuY9ZUGnQKJ1KJlkw.roa (raw, json)
Hash identifier: dhsFRUC/lZrn2HhjwhRN4VwKpZKqwEY0K1+2Lb5ClX8=
Subject key identifier: DD:AA:4F:8F:54:17:F6:94:EE:63:D6:54:1A:74:0A:27:52:89:96:4C
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01856DE65DC289D8EA87DBF6E19E9FFAFB3F
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/3apPj1QX9pTuY9ZUGnQKJ1KJlkw.roa
Signing time: Sun 01 Jan 2023 15:14:51 +0000
ROA not before: Sun 01 Jan 2023 15:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8937
IP address blocks: 193.24.16.0/24 maxlen: 24
193.24.17.0/24 maxlen: 24
193.24.16.0/21 maxlen: 21
193.24.18.0/24 maxlen: 24
193.24.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:5d:c2:89:d8:ea:87:db:f6:e1:9e:9f:fa:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jan 1 15:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddaa4f8f5417f694ee63d6541a740a275289964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:d8:a8:40:c8:28:1b:a5:95:43:bf:8d:6b:
40:2a:be:1d:8c:54:c4:e3:65:17:d3:d4:ef:92:65:
a8:48:73:f1:2c:c9:64:18:74:f1:35:e2:5e:62:a2:
f6:09:27:8a:3f:69:85:0e:7b:4e:a8:de:2e:2a:38:
ec:c3:6c:7a:d9:60:1d:bd:e3:ef:4d:88:6d:71:76:
8f:80:da:0d:6e:ee:11:b3:4d:c6:4a:22:87:d5:ad:
96:15:7a:e5:06:4a:4a:bb:84:1e:24:df:94:00:54:
71:ee:60:f4:5a:01:fc:69:72:07:82:75:85:a4:b4:
08:08:84:35:cb:3f:4d:72:81:ab:9e:64:2e:fe:4b:
c7:29:bd:56:31:51:04:01:ed:b5:e3:1a:8b:e6:09:
95:e2:1e:72:eb:2d:da:10:e2:89:fa:16:eb:c0:62:
ad:d7:84:4a:a1:40:da:42:7b:a3:5a:0a:bf:2a:76:
8b:90:44:c9:b3:bb:cf:7a:02:c9:de:fb:a7:1e:02:
7b:fc:78:7f:44:cc:dd:a9:f8:c0:7d:99:53:28:bc:
98:a3:27:c4:28:02:fe:0e:b2:71:4d:62:42:7b:8c:
b0:b2:f0:37:09:83:2f:dd:4f:4d:d0:63:2f:f7:47:
f1:43:47:fe:ff:e7:f6:ad:b1:7f:61:ef:59:a7:98:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:4F:8F:54:17:F6:94:EE:63:D6:54:1A:74:0A:27:52:89:96:4C
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/3apPj1QX9pTuY9ZUGnQKJ1KJlkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.16.0/21
Signature Algorithm: sha256WithRSAEncryption
30:7a:58:c0:b5:15:bb:b5:60:f0:37:e9:48:59:c9:22:1b:02:
04:4d:e0:1b:91:b7:dd:8f:91:10:52:6b:34:8d:19:ee:0f:20:
ab:ed:e5:42:a5:d0:5c:45:75:66:1f:b2:d7:3e:27:de:71:a3:
ea:36:31:99:65:62:c0:ed:15:9a:2b:66:5b:ce:25:cc:f6:99:
5d:be:21:a1:2e:e5:4c:1c:ec:90:94:7a:54:7c:ac:3b:85:ba:
05:2b:1a:73:e7:df:74:c0:a3:4e:8c:99:ed:c0:f3:10:3b:8f:
49:ee:39:5b:e2:9b:75:4e:6d:6a:0e:e7:15:2e:67:c9:cb:88:
fa:e4:d6:64:52:e7:3e:80:4d:c6:7c:0f:7a:75:b1:6d:fe:30:
53:1a:15:ce:7b:7e:01:00:27:ab:bd:78:41:03:56:af:14:3b:
85:5d:d0:17:40:b4:70:b2:cc:15:07:77:5d:c6:a0:46:4e:b5:
03:59:a0:53:a5:d2:ef:3a:f2:74:16:18:aa:55:00:3c:fa:d5:
6b:1a:d5:5c:fa:05:6d:4c:18:21:73:b4:f5:12:7a:b7:26:ee:
18:40:f4:0c:dc:a9:ef:ee:eb:ad:ba:bc:a1:01:36:36:c0:8d:
9b:03:02:62:94:bb:79:6b:d6:c8:aa:01:3a:0f:5a:8e:f3:35:
87:e7:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:30 2024 by rpki-client on console-ams.rpki-client.org