Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/CLTtEdRmZ7VKsoE8VHR6nsN_TaQ.roa
File: CLTtEdRmZ7VKsoE8VHR6nsN_TaQ.roa (raw, json)
Hash identifier: YDeuI7iJYcb2lpX5yxvB9Ce9ZUDwy/GUJnR/h4bzU0M=
Subject key identifier: 08:B4:ED:11:D4:66:67:B5:4A:B2:81:3C:54:74:7A:9E:C3:7F:4D:A4
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0186B83BED584EAAF1FAE5A343ABD2AE6A17
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/CLTtEdRmZ7VKsoE8VHR6nsN_TaQ.roa
Signing time: Mon 06 Mar 2023 18:43:00 +0000
ROA not before: Mon 06 Mar 2023 18:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 193.31.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:3b:ed:58:4e:aa:f1:fa:e5:a3:43:ab:d2:ae:6a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Mar 6 18:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08b4ed11d46667b54ab2813c54747a9ec37f4da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:ca:3d:8c:8e:06:18:79:e1:4a:04:a8:7f:
24:5d:18:32:c3:84:16:a1:1a:06:ed:ec:84:41:5a:
39:00:92:87:9c:46:9e:e2:93:ab:5d:ed:73:8f:f2:
f3:00:90:81:fa:d3:b9:54:79:ab:5b:17:ea:8f:f7:
dc:1a:e8:98:65:6b:c3:8b:42:47:a9:28:71:07:10:
30:91:07:76:5e:59:2b:e2:d5:e4:0a:b9:d0:db:72:
b4:62:0c:ae:cd:2a:dd:f8:9c:8a:90:52:a4:52:2c:
a4:3c:a7:91:fd:d1:e6:bc:35:3a:a9:38:1e:89:e3:
a2:d3:a1:09:1c:7f:3f:98:0f:26:0f:d4:fc:64:fe:
9f:3c:0d:72:de:6f:96:f7:70:72:1c:25:18:88:4e:
6a:7e:f4:e6:a6:cc:b6:8a:26:51:95:a4:0d:a4:c8:
8e:f3:4d:2c:da:65:63:df:51:7a:f8:8e:3d:ac:ac:
4f:31:81:98:9f:c9:85:24:b3:fe:24:7c:87:35:d1:
e8:bc:5c:32:67:32:52:c2:a5:43:a7:c5:58:37:d8:
01:28:fa:ac:b9:90:0a:85:99:81:51:5a:c8:53:da:
66:ad:2c:08:5a:40:03:77:bc:d7:03:ba:bf:ae:80:
e0:94:c0:83:f5:03:29:57:18:fa:24:0a:7d:83:26:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:ED:11:D4:66:67:B5:4A:B2:81:3C:54:74:7A:9E:C3:7F:4D:A4
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/CLTtEdRmZ7VKsoE8VHR6nsN_TaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.74.0/24
Signature Algorithm: sha256WithRSAEncryption
48:54:fd:c9:90:4d:26:79:02:f6:ea:b7:51:c8:c9:85:d2:b2:
91:dd:ed:00:52:39:40:7a:04:db:8b:87:be:3d:61:ac:99:5a:
03:cc:e3:c9:95:09:87:35:8f:4a:1a:f1:27:6c:60:5c:6c:73:
7d:3f:4c:18:59:e4:1c:b2:d2:3f:65:1d:5d:9d:79:b3:6c:74:
fd:73:fe:e8:d9:c5:2e:ba:1e:3a:44:d2:13:29:48:ab:36:01:
f5:c4:10:aa:a0:ac:01:c6:7a:65:44:28:dd:80:bc:29:4e:70:
74:5d:c9:33:88:73:00:48:4e:97:8c:ad:ff:a2:46:e6:b2:3f:
7e:8c:ef:57:ca:8d:05:59:1e:1d:58:3b:7f:3a:79:c4:83:be:
db:4c:da:ba:72:1c:30:3a:cb:51:e5:99:25:d1:2d:13:d7:a4:
62:bc:61:07:7e:0a:d6:0a:3e:b2:1c:6e:c8:23:12:6c:57:c2:
b2:2c:0d:19:08:60:a9:86:f8:c4:0f:ad:18:7c:a9:b6:a1:b9:
94:9f:b6:ea:0a:12:73:e6:1c:47:be:f1:ba:19:10:77:03:71:
78:71:a2:b8:6a:62:23:06:13:15:81:49:a6:d9:34:05:89:93:
b7:e9:6a:98:98:45:f6:2e:54:eb:d6:36:20:4f:89:ee:fa:53:
42:2c:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org