Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w3jEvAozdhVh-VNvX1MpRgvEZak.roa
File: w3jEvAozdhVh-VNvX1MpRgvEZak.roa (raw, json)
Hash identifier: CrUCqnKwgdnFRoHN3oir+QOAZaOFavZg7w4V2KiGLSw=
Subject key identifier: C3:78:C4:BC:0A:33:76:15:61:F9:53:6F:5F:53:29:46:0B:C4:65:A9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E7394EEADFA2EBEFAF0650B7F5F6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w3jEvAozdhVh-VNvX1MpRgvEZak.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8930
IP address blocks: 194.102.176.0/24 maxlen: 24
193.230.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e7:39:4e:ea:df:a2:eb:ef:af:06:50:b7:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c378c4bc0a33761561f9536f5f5329460bc465a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:f2:17:8f:03:8e:0b:51:d8:65:e7:77:91:
8d:7d:b7:7f:47:9f:fe:1d:49:37:93:8b:2d:8c:0c:
ec:b7:32:31:93:20:f6:26:48:94:de:33:57:20:d3:
13:7f:11:d2:1e:26:68:f5:da:49:b2:7d:03:30:72:
0f:dd:d4:66:e6:2a:da:7d:be:12:d5:95:1a:ba:7f:
ce:ff:04:2a:d9:ea:55:91:5c:42:78:2b:36:ca:51:
a5:4f:12:ae:0f:63:da:e8:00:98:35:81:bf:de:a4:
3f:b3:fb:ff:41:52:45:23:b2:74:58:c5:b6:5e:a2:
0a:d4:82:e9:e2:f1:52:53:6d:5c:e1:fb:a6:94:52:
29:36:51:13:ab:56:fe:61:49:5e:f7:26:f8:5e:b8:
9c:69:6d:6c:e5:0f:a2:5d:72:26:24:5c:00:5f:2b:
84:49:40:cb:03:21:b8:2c:fe:07:92:72:8b:a1:8a:
30:12:44:62:e1:01:ef:de:08:a1:48:ef:5d:9a:a2:
c1:e3:db:78:5d:cd:e2:52:f1:7b:0d:82:e6:08:ae:
96:ec:e8:f3:eb:7a:7c:45:c2:7d:da:64:a7:d8:d9:
93:f7:b0:7d:b8:de:48:86:8f:93:21:59:aa:36:7e:
90:e4:f9:52:ec:d2:65:aa:ce:0c:a4:cc:71:23:30:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:C4:BC:0A:33:76:15:61:F9:53:6F:5F:53:29:46:0B:C4:65:A9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w3jEvAozdhVh-VNvX1MpRgvEZak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.230.0/24
194.102.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7b:ed:0d:5e:cb:3a:d2:50:ed:07:f1:ee:da:74:06:9b:83:
83:10:29:58:87:3a:4a:cf:70:65:5c:17:8d:92:88:82:5d:d7:
21:73:e4:e3:39:ab:11:87:7f:63:54:1b:79:f1:5f:fe:5d:fb:
89:19:59:dd:ea:6d:89:ed:ee:3b:5e:21:fe:bf:e8:bb:a7:ce:
26:28:b8:48:80:bb:ed:69:4c:39:24:3f:e1:92:62:cc:6b:db:
4d:25:c2:de:53:48:a8:3a:80:88:62:ab:fa:1d:7f:f2:7f:e6:
60:45:52:f1:2b:d8:b9:ea:2a:77:4f:23:e0:01:c0:1a:aa:08:
62:1a:33:4c:ef:95:1b:ea:50:61:da:c0:dd:25:d7:e3:6a:a0:
89:ba:f4:a9:9a:9b:67:01:4c:f1:82:77:e5:e0:db:75:03:5e:
ad:98:31:03:b5:30:46:43:71:2a:73:cc:40:9a:53:36:18:8c:
01:32:a5:12:78:c3:00:0a:98:d3:63:82:09:7c:3c:e8:f6:b4:
38:43:7d:bb:fb:bd:0d:d3:99:10:7d:b1:13:be:bc:66:af:12:
92:de:69:01:6e:a7:61:8c:42:0a:00:19:24:da:5f:3f:e1:05:
92:a1:ef:38:1a:f0:04:67:0e:c1:68:76:de:10:ea:c1:1d:ae:
b5:72:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org