Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/qCa7vm6Mpq5nffyyL7k5hE3WBL4.roa
File: qCa7vm6Mpq5nffyyL7k5hE3WBL4.roa (raw, json)
Hash identifier: Mdyrcj2gCDNMfhRYvUXwMk3cxcXppZs4V71+x+vIp8I=
Subject key identifier: A8:26:BB:BE:6E:8C:A6:AE:67:7D:FC:B2:2F:B9:39:84:4D:D6:04:BE
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01856DCAF4A5CAED3A0FBE8E39E444242FD4
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/qCa7vm6Mpq5nffyyL7k5hE3WBL4.roa
Signing time: Sun 01 Jan 2023 14:44:55 +0000
ROA not before: Sun 01 Jan 2023 14:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56729
IP address blocks: 93.189.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f4:a5:ca:ed:3a:0f:be:8e:39:e4:44:24:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jan 1 14:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a826bbbe6e8ca6ae677dfcb22fb939844dd604be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:50:68:ee:88:d0:f0:85:f2:36:14:36:f0:
e8:4c:ce:74:3b:2b:57:6c:f4:50:87:b3:67:63:4f:
66:5d:d5:3a:36:68:24:5f:57:2e:22:2e:2e:9a:7d:
7d:d0:ff:7a:c7:3b:68:3c:84:12:6e:5f:19:71:37:
a0:b5:7d:ae:b5:76:be:ec:d1:9b:b8:53:d5:1c:c4:
d8:f3:48:65:af:09:28:7c:71:b7:a2:a7:fa:ea:b3:
5b:b4:09:63:f1:d6:54:68:86:f2:6c:8e:67:e7:93:
52:57:20:cc:51:ad:8f:bb:c4:85:28:10:67:fe:64:
1c:66:f3:cf:f9:74:b6:e3:8b:27:5d:a2:79:99:f4:
df:0a:11:a7:2f:03:9f:f6:4c:ac:d5:12:74:f3:7e:
91:00:a3:d4:b5:70:ae:09:da:94:b1:a9:9e:d5:a5:
07:9e:3b:32:9a:24:6e:ad:50:42:f3:8b:e7:8f:d0:
b9:e2:35:7a:01:d7:0e:35:8c:98:d0:07:89:01:43:
56:f2:1e:49:70:c5:49:b8:b0:5f:98:1b:d6:42:6d:
7b:a7:6c:9b:f3:8b:84:b6:1c:7f:51:89:23:41:8a:
82:5f:98:56:78:93:05:48:72:49:a9:3c:48:0c:84:
f2:c1:18:a2:4b:b7:30:bf:f9:c6:82:e8:fc:d6:d7:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:BB:BE:6E:8C:A6:AE:67:7D:FC:B2:2F:B9:39:84:4D:D6:04:BE
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/qCa7vm6Mpq5nffyyL7k5hE3WBL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:27:2d:74:23:af:5e:d5:0d:d3:2b:ce:13:f0:95:ec:ae:12:
d8:fc:63:7c:86:ff:9d:c3:c9:79:f9:0b:35:40:9f:54:68:c7:
64:ed:aa:48:7a:9d:91:38:73:a0:dd:d3:75:a9:2d:32:5a:9a:
ad:c7:c7:cd:b4:19:19:83:1c:07:a6:54:a7:fc:3f:37:c7:0c:
8c:86:4d:df:84:2e:1e:6a:60:cc:25:1d:8e:b2:a5:05:86:a7:
a2:0b:cb:54:a7:5a:64:7a:aa:80:7d:7c:73:34:ae:89:03:dd:
8f:43:f9:a5:e4:3e:da:ed:9a:14:c1:85:57:8a:30:1e:d7:dd:
44:cc:1d:5c:84:71:e7:86:a4:92:b4:fc:ec:aa:27:3b:1d:95:
c4:b5:f8:0d:35:fe:32:7a:25:b1:4e:2f:03:8c:c2:b0:2b:bc:
e2:98:e0:5b:d4:e3:db:19:bc:c1:81:28:9e:5d:5a:2e:4f:08:
44:d9:52:64:a6:d0:24:a6:dd:ee:45:0b:a0:d6:0c:0e:4a:3c:
e2:18:8c:9a:8c:1c:85:52:00:b5:40:71:b1:cb:3f:eb:97:d2:
35:19:d7:a6:47:a9:32:60:58:92:a1:4d:53:c7:6e:4b:e9:b8:
ec:78:92:6a:b4:0e:df:c2:ea:80:6a:d7:0d:98:56:27:49:e6:
c3:10:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org