Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/QweVFAjc09WRgk8bnCQhpa0pFrc.roa
File: QweVFAjc09WRgk8bnCQhpa0pFrc.roa (raw, json)
Hash identifier: fT61t5VYs1g0iro4bRoUhRS7tCBx+QLau+JZh/D6C/4=
Subject key identifier: 43:07:95:14:08:DC:D3:D5:91:82:4F:1B:9C:24:21:A5:AD:29:16:B7
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 0186BC552026F9C0DB5FCFAB4445988335E4
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/QweVFAjc09WRgk8bnCQhpa0pFrc.roa
Signing time: Tue 07 Mar 2023 13:49:00 +0000
ROA not before: Tue 07 Mar 2023 13:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.56.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 10:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:55:20:26:f9:c0:db:5f:cf:ab:44:45:98:83:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Mar 7 13:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4307951408dcd3d591824f1b9c2421a5ad2916b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:0f:ef:35:7f:c2:96:61:4a:60:b2:1b:7d:
19:09:7b:b5:83:b6:1c:8f:f3:6b:fd:4b:29:12:0c:
18:d9:aa:ad:a7:d2:f1:23:8f:3c:1a:53:63:56:22:
2c:ef:6f:00:be:25:f3:7c:d0:f0:73:a2:09:e7:59:
0d:40:db:8e:48:db:31:74:67:04:49:6d:f7:5c:17:
fd:20:0c:73:eb:47:c6:05:54:cc:c3:85:3c:1c:01:
02:92:43:aa:e3:5d:6c:28:3c:5e:d0:85:f9:8a:51:
56:09:eb:77:70:b8:a5:f5:b4:81:06:19:d4:58:6d:
e1:5b:48:bc:a1:a0:c6:8f:63:f5:bb:5a:f9:f8:09:
c6:cf:14:d9:22:ab:19:da:22:97:5c:df:4c:67:62:
d3:42:69:3f:38:c0:0c:de:77:de:db:c0:64:40:4b:
04:2f:04:5d:28:a7:44:0c:c7:40:c1:8f:84:b8:01:
c6:48:6e:e9:38:fb:78:64:3d:fe:b3:1d:5a:d1:cd:
42:3b:29:eb:2c:11:06:5b:53:8b:97:be:b2:4a:87:
89:88:77:3a:af:70:22:6c:56:c0:b5:55:d4:46:db:
a8:7b:ad:6c:ab:8a:63:05:ac:e8:61:36:42:90:21:
fd:5c:e9:1d:f3:72:82:2d:ab:73:75:08:6f:8e:6a:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:95:14:08:DC:D3:D5:91:82:4F:1B:9C:24:21:A5:AD:29:16:B7
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/QweVFAjc09WRgk8bnCQhpa0pFrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:99:c2:91:80:d1:d0:c4:e2:7a:92:e4:fe:2b:f6:4b:d8:27:
82:c3:03:6b:c7:2c:0f:47:dd:5b:1f:c1:1d:56:d3:38:2e:3a:
38:76:8e:51:9e:fc:df:69:66:6d:ec:56:e4:6c:88:28:0f:ad:
3b:44:bd:66:6a:97:3d:8b:b1:35:42:0e:47:38:a5:c8:28:2d:
0f:58:52:c5:07:c7:b4:05:82:ba:63:55:7d:87:24:f1:00:d4:
d8:85:04:e5:29:76:13:20:0f:d7:f0:7c:82:5b:a9:a8:82:65:
71:1f:7a:51:5e:2d:d5:6b:e9:69:41:02:48:e4:a0:35:90:40:
02:96:00:a8:0a:cb:a4:af:14:c3:7f:22:15:15:20:12:be:1c:
1a:13:d1:42:19:4d:1f:c6:55:06:e4:e6:8f:f4:40:75:c4:c8:
39:86:5e:38:03:cf:29:ff:ba:aa:a6:c4:a5:14:b5:7e:9c:bf:
a9:14:d7:e3:40:76:01:e3:f8:64:df:24:fe:35:e2:a2:20:bb:
d6:29:66:79:1e:56:39:d0:a1:b2:84:53:fd:0d:3d:2b:c4:6a:
ef:a7:a2:d6:53:6f:7f:92:2b:5a:b3:d2:2b:d0:39:d0:ac:ef:
c6:3f:e3:31:4d:7f:51:5c:05:d4:46:c1:a4:28:45:2e:d2:53:
dc:3b:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:17 2024 by rpki-client on console-ams.rpki-client.org