Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/rJ4hPJe1pR2RS58C-RvpPEeDhwA.roa
File: rJ4hPJe1pR2RS58C-RvpPEeDhwA.roa (raw, json)
Hash identifier: s2qGa2kgsNGN+qmJaatbgQRHx3w53YYD61G4roKMJkM=
Subject key identifier: AC:9E:21:3C:97:B5:A5:1D:91:4B:9F:02:F9:1B:E9:3C:47:83:87:00
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 018803E43C51C108DFE29A751B26168452A9
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/rJ4hPJe1pR2RS58C-RvpPEeDhwA.roa
Signing time: Wed 10 May 2023 04:21:09 +0000
ROA not before: Wed 10 May 2023 04:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 193.105.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:e4:3c:51:c1:08:df:e2:9a:75:1b:26:16:84:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: May 10 04:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9e213c97b5a51d914b9f02f91be93c47838700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:1f:c4:7b:0c:82:a3:6a:0f:c9:d9:0a:30:
aa:9a:6f:52:ac:c3:dc:f2:f1:03:b8:77:cd:7b:5b:
32:16:1d:a5:92:37:55:c7:d8:72:d7:4b:ca:f4:6d:
e5:09:40:fb:86:db:56:a4:f1:a2:10:c9:d8:ce:96:
6c:13:d6:02:0b:90:7f:5f:d9:43:aa:da:10:3c:5f:
71:93:6e:49:bb:bd:57:9e:8c:ad:77:8f:1f:ee:eb:
f0:99:25:dd:52:88:1e:94:28:3e:2f:c0:b2:3e:5a:
3c:b1:2c:60:ab:1c:a8:bb:79:08:34:bf:3a:83:51:
95:26:ce:17:f0:82:36:be:7a:25:c9:7e:4a:46:5b:
16:d2:be:b4:dd:71:af:e9:5e:58:18:54:e8:8b:b0:
91:4d:c3:4f:39:a6:34:ff:cd:3b:8a:56:cf:08:72:
ec:1b:32:8f:f2:c1:ed:fd:e8:ac:02:82:85:0a:66:
75:66:15:3f:72:10:f1:ba:60:45:8a:b8:2a:cd:ea:
60:aa:d1:69:b0:61:12:44:e5:52:90:2d:d1:8f:10:
1e:6c:cb:e4:28:a4:d8:05:8e:b2:e2:35:e8:94:ef:
a3:3f:cf:1d:38:a8:37:56:a0:f0:ed:f8:a4:0a:79:
85:47:91:ca:9b:04:d5:84:0b:2f:0b:14:31:2e:3d:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:21:3C:97:B5:A5:1D:91:4B:9F:02:F9:1B:E9:3C:47:83:87:00
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/rJ4hPJe1pR2RS58C-RvpPEeDhwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.71.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b3:1f:cd:99:15:d6:3c:ab:4d:5f:80:fb:98:c7:1b:2b:cd:
1f:7b:db:cd:de:bf:bf:f0:69:8e:08:ab:21:bb:a9:e1:f2:0f:
8d:45:91:f9:de:e0:20:5c:8b:67:25:e4:f3:28:19:51:bd:d7:
94:a8:b0:b0:fc:ce:7b:34:9d:51:45:fe:b4:13:ff:8b:13:7d:
85:f5:2c:6c:eb:4b:59:61:9d:e4:5e:11:00:74:29:c7:a1:e1:
78:4e:24:1f:c2:90:85:40:97:f5:d2:37:44:99:8a:a8:e1:07:
45:d2:89:88:5f:de:26:1e:fd:df:4e:3a:96:a1:db:28:38:ef:
3c:c3:c6:60:8b:76:76:a7:bc:13:61:db:fc:1d:2c:e1:0c:31:
30:e0:05:19:6c:db:37:db:da:9f:9c:d5:df:d2:78:d8:c7:52:
b3:4e:77:c4:d4:72:4d:6c:3b:e9:fa:0e:46:a4:2e:7b:8e:5c:
2e:fc:97:67:4a:81:16:47:8c:a8:d7:58:99:43:cd:a0:34:11:
e6:bb:c9:8c:8a:22:b9:67:32:9e:d0:ca:6d:85:43:14:02:03:
7d:29:d2:10:9c:f7:83:80:26:f3:2e:20:6c:15:7c:95:e7:a1:
5f:06:e2:c9:1a:c1:34:e2:36:0d:03:16:71:85:d1:d6:54:04:
ae:1e:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:41 2024 by rpki-client on console-ams.rpki-client.org