Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/du_pnQkIlG1HuSar5GYxuDUO04g.roa
File: du_pnQkIlG1HuSar5GYxuDUO04g.roa (raw, json)
Hash identifier: JpMziTWTPZFpL6XdPy9qsoxV4Pa5iuAY5pFrd9Ub9jI=
Subject key identifier: 76:EF:E9:9D:09:08:94:6D:47:B9:26:AB:E4:66:31:B8:35:0E:D3:88
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 01856F9DEBD046C3987B2396DD7670E734B9
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/du_pnQkIlG1HuSar5GYxuDUO04g.roa
Signing time: Sun 01 Jan 2023 23:14:58 +0000
ROA not before: Sun 01 Jan 2023 23:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211702
IP address blocks: 193.163.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:eb:d0:46:c3:98:7b:23:96:dd:76:70:e7:34:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Jan 1 23:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76efe99d0908946d47b926abe46631b8350ed388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:b7:9e:ef:2f:82:b6:ac:d5:e5:cd:b3:10:
5e:32:82:02:eb:53:10:47:71:1b:4b:12:ae:ac:54:
2c:46:27:04:a1:45:ed:c5:1f:84:f0:e5:a5:f5:ae:
de:da:28:16:6e:70:6e:e5:f1:26:b3:ed:1f:0a:d6:
7a:bf:5a:a6:86:71:56:cc:ef:f9:58:4d:67:0a:11:
f5:77:f7:df:10:b3:80:09:24:6d:43:ca:cb:54:e4:
79:87:1d:5c:96:65:eb:98:7e:1b:8f:47:34:71:21:
be:66:3e:5b:27:47:14:ba:71:eb:57:5f:88:38:b8:
97:63:6c:7a:33:10:2f:ee:09:23:40:a0:38:ac:b6:
b4:89:8a:3f:05:b0:53:83:01:f1:d8:32:6a:21:f3:
d9:97:29:d6:6d:3a:de:ca:75:5b:70:87:50:b5:06:
97:f6:ad:23:8f:cb:de:44:70:40:e4:e7:49:fc:f0:
d7:79:ec:74:31:f5:a5:92:a7:e9:60:a3:51:ae:3f:
7e:46:31:b6:0e:ce:e9:41:0d:29:ae:7b:46:59:46:
0c:2c:0f:9d:4c:df:3c:9d:48:32:bc:57:61:fc:87:
55:ad:fd:93:51:60:5f:bf:2b:84:38:f3:0b:b2:ba:
2b:90:3e:51:50:0c:64:6e:b1:ef:f4:16:f7:9c:c0:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:E9:9D:09:08:94:6D:47:B9:26:AB:E4:66:31:B8:35:0E:D3:88
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/du_pnQkIlG1HuSar5GYxuDUO04g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:87:fa:ff:dd:04:8b:94:0d:9e:b6:34:05:c0:f6:33:de:d3:
8e:e7:61:43:0b:a5:44:ac:f8:34:1d:28:3c:6a:04:66:49:3e:
5c:b0:4f:75:46:45:3a:47:d2:3f:aa:42:41:d3:1d:2f:0a:6c:
ef:e9:41:dc:b5:20:ec:e1:95:9b:85:d6:9a:dd:29:fe:a7:ad:
de:3c:05:e7:8c:a6:fc:72:9d:e8:a4:80:0a:84:f8:61:77:ac:
38:b5:d4:5b:22:aa:ab:ed:ba:e4:1e:00:96:26:2d:7e:eb:90:
4c:48:69:87:34:c7:53:4f:16:f6:46:3a:34:b5:e9:24:01:d1:
f1:44:69:23:00:1a:41:4d:0c:fc:28:72:43:22:50:ef:81:25:
bd:59:e3:66:6f:4c:47:f5:e5:90:36:42:ed:c9:d0:e3:45:d3:
d2:53:90:bc:99:ff:09:30:8b:42:95:1a:4f:59:27:41:4c:70:
fa:92:6e:b6:66:4f:26:33:a2:e0:0b:27:9d:4b:bb:f9:77:f2:
56:04:fb:54:d2:84:a0:17:fc:f5:af:d8:75:2b:6c:6a:1c:0d:
3c:50:ad:bd:11:f0:3a:7b:b5:77:15:bd:0c:94:96:a4:73:20:
56:8b:fc:5d:c5:10:41:57:71:7d:b1:b5:64:ce:f7:99:34:ca:
1a:81:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org