Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/wEYw167tSzh9opcAJBuUEsVQUT0.roa
File: wEYw167tSzh9opcAJBuUEsVQUT0.roa (raw, json)
Hash identifier: GTj/kj3WFwZp65QS6vlfT+HbTFG0cWH5P31Gn/t8fVs=
Subject key identifier: C0:46:30:D7:AE:ED:4B:38:7D:A2:97:00:24:1B:94:12:C5:50:51:3D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF72AC6E4AFBD9A9E7DB0955733CF5
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/wEYw167tSzh9opcAJBuUEsVQUT0.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198777
IP address blocks: 193.59.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:72:ac:6e:4a:fb:d9:a9:e7:db:09:55:73:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c04630d7aeed4b387da29700241b9412c550513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:be:d9:85:f7:6d:6e:a8:84:b9:9b:45:66:
e1:27:57:9a:9b:8b:65:45:98:72:fb:42:39:c4:40:
5d:82:80:d5:c7:9a:05:35:6b:92:b3:b6:f9:29:43:
49:50:96:7a:cc:40:cd:41:d0:42:3d:4b:2d:b7:4f:
65:63:79:55:fb:f4:b9:96:14:15:0d:87:eb:b9:4e:
c0:cb:e3:6a:c4:dc:24:e4:47:cd:f2:ce:a2:47:86:
86:52:ed:64:b6:e5:68:ed:ec:eb:8c:a9:cb:55:a9:
ea:a5:da:a6:3c:17:e4:3f:d9:30:00:70:35:33:0e:
fe:39:59:28:87:32:3d:f7:88:9b:4d:e7:3c:83:1b:
d6:4a:39:80:b2:2b:e3:56:bb:99:39:6d:f3:16:6e:
6f:39:f8:ae:a0:2d:a9:90:89:a5:bd:0a:50:8e:23:
f7:8f:ad:70:94:44:e0:e1:ff:26:ea:58:31:ed:70:
44:e4:79:f3:40:1c:a4:67:77:7c:32:66:12:45:f1:
cc:67:1b:16:8e:19:00:bf:c2:99:fe:16:c0:10:9e:
47:b1:c7:6e:e0:92:dd:cd:37:a2:8f:52:74:1d:13:
4e:c3:8b:8b:6f:f4:67:ba:96:86:f3:ed:31:75:d5:
21:c6:8d:8c:33:5c:d9:67:a7:60:3e:02:0b:fe:41:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:30:D7:AE:ED:4B:38:7D:A2:97:00:24:1B:94:12:C5:50:51:3D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/wEYw167tSzh9opcAJBuUEsVQUT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.88.0/23
Signature Algorithm: sha256WithRSAEncryption
15:41:60:2a:66:37:a3:e4:40:32:11:d2:47:25:41:1f:1d:55:
ee:73:15:da:ff:9b:1e:a8:e8:58:a4:a3:4a:e6:2f:e1:c3:1b:
1b:2c:74:b7:43:06:a0:7a:0c:84:e9:95:35:29:97:3d:d4:3f:
95:71:a8:70:23:c4:06:21:0b:20:6e:2e:27:cb:81:15:99:aa:
a2:f4:89:72:3b:b4:68:d5:81:2e:5a:88:bd:60:be:15:48:19:
14:cd:54:0d:f9:69:47:9d:27:86:4f:b4:c5:8d:35:0e:97:f9:
6b:f5:6e:2e:b4:4d:e1:27:86:9a:5d:00:14:e6:81:51:25:4c:
ce:b9:12:59:78:7a:7c:bc:ac:ab:be:d5:6d:a9:a5:fb:52:a9:
18:63:53:42:25:88:d2:fd:e7:e5:f8:47:4c:0c:25:16:83:cc:
fe:6e:b3:18:d8:44:d9:aa:55:e3:ab:e5:75:36:da:d4:0c:d6:
70:a6:03:3a:48:08:2d:c8:a9:f3:58:ca:1d:2d:32:91:b5:78:
29:5c:95:41:e2:44:67:c6:1f:d9:1a:19:48:c9:e9:1c:6e:00:
05:15:85:ee:22:04:bb:71:26:67:98:a3:4a:55:a1:65:9a:2a:
5a:6c:b5:90:4e:3f:d2:7a:dc:f9:47:d7:16:9a:6b:c8:b0:e9:
83:1b:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org