Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/2--xTPGj9T6VF5108sLA5ZiMNtE.roa
File: 2--xTPGj9T6VF5108sLA5ZiMNtE.roa (raw, json)
Hash identifier: NYWPsDEEDRJ+MNOQbR5nbadDzXmhfia6/LonqitHnS4=
Subject key identifier: DB:EF:B1:4C:F1:A3:F5:3E:95:17:9D:74:F2:C2:C0:E5:98:8C:36:D1
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 018571557280B8C6A1404C9DF2398AB5FCA4
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/2--xTPGj9T6VF5108sLA5ZiMNtE.roa
Signing time: Mon 02 Jan 2023 07:15:03 +0000
ROA not before: Mon 02 Jan 2023 07:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21396
IP address blocks: 193.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:72:80:b8:c6:a1:40:4c:9d:f2:39:8a:b5:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jan 2 07:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbefb14cf1a3f53e95179d74f2c2c0e5988c36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:20:9b:06:b7:10:2b:ec:4f:13:4b:fe:f8:
b0:b8:07:21:05:54:52:39:3c:a6:24:45:b6:af:39:
69:b0:e9:eb:e3:f9:a7:b1:eb:7c:d7:7c:8b:95:69:
6d:f5:7c:93:01:45:dc:96:45:6d:14:4e:aa:7b:b9:
f0:8e:64:4b:b2:9e:4d:27:8d:1b:0d:00:35:0d:66:
db:e2:cf:a4:a2:87:44:04:12:9b:d7:1b:26:b7:b4:
1f:09:26:b9:4e:4f:06:ad:46:26:81:53:b9:73:9f:
78:63:74:21:83:1d:13:e2:98:e3:c2:88:4a:86:47:
d3:f6:e4:c6:1e:0c:1f:6b:1a:38:33:5d:fc:da:09:
78:12:80:a2:ce:79:1e:5c:df:20:d5:a1:73:26:36:
d1:58:23:a8:e6:2f:ac:9b:0b:24:4b:f0:5e:d9:1e:
c8:96:6a:2e:ad:33:8e:12:a2:e5:f9:1a:46:06:dd:
cb:7f:82:4f:5c:e8:e9:7c:d1:e3:07:f4:75:98:f4:
c3:1d:b1:f2:15:c2:5b:67:da:90:f4:4a:d8:f0:6e:
10:cf:89:79:12:9e:32:f1:b6:e6:46:2a:a1:b0:59:
f9:19:d7:69:58:9d:2f:a6:06:ec:a6:2e:87:8a:02:
2c:62:25:29:24:35:d2:90:4c:d1:61:6f:2f:56:2b:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:B1:4C:F1:A3:F5:3E:95:17:9D:74:F2:C2:C0:E5:98:8C:36:D1
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/2--xTPGj9T6VF5108sLA5ZiMNtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ff:32:54:89:a1:55:25:98:e5:dd:38:df:83:6c:24:42:d5:
f1:1e:14:6a:03:d1:96:fa:9f:09:05:6a:cc:54:e2:e0:16:ec:
69:43:72:f6:0a:a4:3c:e4:ef:46:f8:fb:c2:52:2e:45:31:4f:
b9:0f:4e:74:89:41:7d:5b:a5:fd:ce:13:36:b1:05:25:dd:f2:
8b:e5:75:bb:e7:e9:cc:77:09:96:0a:6d:b2:ea:7f:3e:27:8c:
0e:5a:bd:0b:78:2a:23:1a:9c:1d:40:49:40:a5:f5:d7:1c:69:
ab:b4:5f:ea:0b:a9:c4:d2:4c:8c:47:9d:62:8b:2b:c6:b8:41:
9a:9b:ff:f3:52:cb:04:26:e2:c7:f7:33:47:a2:31:49:0e:2c:
59:bd:ad:7d:fc:5c:65:1f:cd:21:58:f4:7c:c5:e0:c0:7f:95:
12:43:18:05:7d:20:c6:02:90:19:d5:f8:33:e5:87:84:cf:2a:
9f:fd:32:23:50:fb:09:bb:41:65:51:cf:b7:3a:8f:f5:8a:90:
2c:97:43:10:6c:1d:c8:93:c2:ca:74:b7:df:38:c3:cc:d0:b3:
fc:90:c8:43:c3:0f:88:35:78:d3:38:73:df:4c:dc:b9:82:d5:
20:69:9f:47:b7:0b:1a:69:0b:11:8e:a4:05:91:cf:0f:a8:a3:
ed:f8:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:56 2024 by rpki-client on console-ams.rpki-client.org