Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/xEBaOlnMgEkJpR3H6Dh9-SkjpHQ.roa
File: xEBaOlnMgEkJpR3H6Dh9-SkjpHQ.roa (raw, json)
Hash identifier: s2pcbGhBR9m+0A0wLSpLhk/lA/5XdAIdkSJzAl/g+tE=
Subject key identifier: C4:40:5A:3A:59:CC:80:49:09:A5:1D:C7:E8:38:7D:F9:29:23:A4:74
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 01856D2F238B87C74D51B1F4616309DF3E03
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/xEBaOlnMgEkJpR3H6Dh9-SkjpHQ.roa
Signing time: Sun 01 Jan 2023 11:54:43 +0000
ROA not before: Sun 01 Jan 2023 11:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25164
IP address blocks: 193.192.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:23:8b:87:c7:4d:51:b1:f4:61:63:09:df:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 11:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4405a3a59cc804909a51dc7e8387df92923a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:32:bf:6e:61:a5:a4:e7:ab:70:58:89:be:
92:c3:fc:fc:7a:3c:8b:72:17:e0:40:83:8f:be:87:
72:5f:fa:18:b9:ec:a6:ad:f1:6c:3f:01:ba:8e:a0:
5e:c0:9b:5c:e2:9e:3d:37:57:af:a6:21:a4:de:94:
c8:a6:14:30:e5:5c:95:ad:ab:dc:3b:70:9f:97:ee:
43:23:50:30:7f:d2:70:f9:ff:21:ff:be:c4:5e:9c:
17:f3:a4:0f:67:51:62:aa:be:1e:a6:aa:7d:37:ab:
09:fc:8a:de:4e:cd:ab:03:a4:df:28:f5:f4:8d:78:
38:d3:bb:a5:5a:09:d7:02:7d:e2:61:1c:af:32:df:
3f:4e:5d:5e:aa:c5:86:b1:d8:85:16:a0:15:47:10:
75:2a:9e:b2:bb:17:82:29:62:95:6d:f0:dc:3f:5d:
1f:74:9a:4c:c4:35:6c:60:58:71:14:f1:56:86:18:
68:29:7e:74:f7:2a:d9:9c:f0:00:a1:56:bf:e3:a6:
f0:cf:03:29:13:17:86:60:02:f8:ff:63:31:06:28:
7f:9c:0e:4d:c4:d8:d0:c2:91:9b:44:25:d5:fa:bf:
58:3a:77:5c:c6:b7:d2:48:4d:e7:9e:25:15:f6:3b:
07:27:69:f9:11:20:08:5e:48:ae:c0:b3:89:d1:35:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:5A:3A:59:CC:80:49:09:A5:1D:C7:E8:38:7D:F9:29:23:A4:74
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/xEBaOlnMgEkJpR3H6Dh9-SkjpHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.232.0/23
Signature Algorithm: sha256WithRSAEncryption
27:0c:7e:21:0c:4f:bc:96:9b:b4:f8:37:78:9f:ce:fd:08:5a:
ef:f8:7c:33:13:3a:98:25:a1:6e:86:6a:d2:d7:f2:0a:e0:6c:
f6:93:19:9c:f3:bd:09:7e:36:4b:43:57:8d:5f:ee:8e:e4:83:
63:23:b2:2a:45:f8:30:94:e3:c7:20:ee:82:f7:48:13:06:85:
2f:4f:f9:fb:57:86:f1:b9:e1:6c:6c:80:f0:ab:75:64:d7:3c:
94:7e:3a:6f:ba:7a:88:99:68:03:39:12:f1:72:74:b5:ef:fb:
7a:25:8d:28:39:03:2a:8e:c6:c7:a7:91:82:c0:05:11:9c:99:
61:63:7c:9a:ce:f2:75:6e:58:f5:45:c5:19:a1:40:5e:b8:64:
f6:cf:15:bc:d8:b1:84:4b:87:6a:59:95:f5:de:e3:3a:5c:6d:
53:24:91:fc:af:09:0a:39:45:30:e8:cd:cd:94:69:73:79:53:
c3:a1:1d:83:44:fb:1a:d9:67:89:db:29:ac:3d:10:4f:fa:76:
4b:01:52:cb:49:4d:99:05:a9:d9:69:97:12:b4:89:03:ae:d2:
e5:d8:23:e0:6f:57:f8:38:7a:fb:09:f4:5c:71:25:4b:56:23:
81:ae:5f:2e:be:a9:9f:80:1b:03:2c:24:88:0d:a7:68:37:8d:
ac:cf:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org