Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bA9jsuAfQeltf1dQFkE45JgIm1k.roa
File: bA9jsuAfQeltf1dQFkE45JgIm1k.roa (raw, json)
Hash identifier: mQp9rAjoEo/tFXUEkgEz3okHuBgVM/YvW4y7P1fRfRc=
Subject key identifier: 6C:0F:63:B2:E0:1F:41:E9:6D:7F:57:50:16:41:38:E4:98:08:9B:59
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF7D71428599C9225E81730FE9FC64
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bA9jsuAfQeltf1dQFkE45JgIm1k.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204569
IP address blocks: 193.59.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7d:71:42:85:99:c9:22:5e:81:73:0f:e9:fc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c0f63b2e01f41e96d7f5750164138e498089b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:0a:79:8c:d3:6a:7d:0f:d7:5f:f0:6e:a7:
91:7c:f0:59:9a:2e:ef:a4:2e:21:5e:8f:37:8d:a1:
d7:62:fc:a6:36:f8:55:9f:ca:39:8e:f7:eb:eb:cf:
91:2b:57:82:c9:79:a7:f5:e5:7f:72:b7:c7:a2:ea:
fc:89:52:aa:09:be:a0:bb:72:7f:77:87:1d:4f:d0:
a6:49:9b:46:18:c9:d8:7b:04:d0:0b:05:2b:a6:11:
a4:c3:bd:55:5d:19:36:3b:58:af:95:62:79:f3:93:
25:1c:9e:04:78:97:d2:5b:82:ff:77:3f:a9:24:c2:
bf:70:cc:0e:da:34:db:3d:75:b7:cf:ab:6d:ff:02:
1c:e9:c2:6f:2e:15:74:06:90:8b:fc:ef:50:f8:5c:
6c:83:31:5e:42:7c:54:10:cb:1b:9d:99:ee:e1:a2:
da:d7:ec:86:c3:8e:69:40:2c:7e:91:50:0f:f6:3c:
ff:43:8a:88:88:62:2b:8a:e8:c7:58:6a:da:16:be:
16:bb:5a:7b:92:39:e2:40:33:6e:7d:24:e4:0f:8e:
04:bb:d7:90:cf:a9:e5:8f:b5:79:63:ff:6b:e7:7a:
4c:bd:a1:15:e5:4a:85:e5:8c:f2:81:a6:30:e1:59:
9a:63:cc:e9:d9:03:fa:24:7b:38:e4:b5:ba:79:f5:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:63:B2:E0:1F:41:E9:6D:7F:57:50:16:41:38:E4:98:08:9B:59
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bA9jsuAfQeltf1dQFkE45JgIm1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ff:f2:3f:84:e1:68:d1:f2:40:b7:7e:ea:2a:04:22:3e:a4:
31:9b:01:b6:be:71:a7:d1:14:18:7b:32:8a:4f:2e:6a:56:0f:
f5:c8:18:90:3b:b3:1b:87:53:89:26:f5:c6:e8:fb:db:47:d3:
7a:a2:e4:2b:8c:57:ba:6d:bc:55:80:ad:13:9e:8c:f3:85:87:
2c:8d:da:1a:e1:e8:a7:b5:8b:c5:84:56:ba:19:98:eb:2a:68:
9c:d9:c3:e5:bb:2d:39:11:29:94:e7:86:b3:00:3a:7c:a8:25:
d1:8f:80:ac:47:51:17:42:e6:ca:22:fa:09:23:ca:c5:91:3f:
54:97:12:e9:f8:1a:07:b4:86:16:3f:69:60:7e:30:b8:5e:5e:
13:56:5b:55:fd:c1:d5:51:83:e7:8f:01:c8:e9:69:14:bd:e7:
c6:cd:43:8d:07:ab:b3:33:26:af:9f:f6:86:69:6c:13:08:fb:
3c:a3:b6:f8:fc:2a:96:72:c0:c4:3f:93:4a:b5:3f:1a:de:e1:
7e:91:6a:d1:a7:0f:83:38:bf:6c:45:09:51:43:c2:e0:a5:13:
f2:a7:a0:25:0c:34:0a:a9:de:28:23:60:22:34:7e:c9:df:47:
5e:69:fe:7e:5c:95:e4:c0:86:73:fc:1e:25:ab:23:47:dc:1d:
41:9c:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org