Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ALQ26DIQ2xdoI29ys6ZhtyMjjQk.roa
File: ALQ26DIQ2xdoI29ys6ZhtyMjjQk.roa (raw, json)
Hash identifier: vB9iwh48aLCDES/j0VUOFSzlYTZpM6iOZ9sSUpS6SOs=
Subject key identifier: 00:B4:36:E8:32:10:DB:17:68:23:6F:72:B3:A6:61:B7:23:23:8D:09
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01860C53EEC4DF11D39A9E109E3ABEC3F0CA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ALQ26DIQ2xdoI29ys6ZhtyMjjQk.roa
Signing time: Wed 01 Feb 2023 09:34:32 +0000
ROA not before: Wed 01 Feb 2023 09:34:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 193.30.241.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:53:ee:c4:df:11:d3:9a:9e:10:9e:3a:be:c3:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 1 09:34:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b436e83210db1768236f72b3a661b723238d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:5f:10:e3:ee:2a:6f:0c:5f:f8:1e:a6:7b:
c6:c6:c6:68:f9:c7:94:be:f9:16:d3:6f:cd:36:4b:
8f:a9:0a:19:80:b4:44:83:f1:4b:f9:1b:fb:c8:a2:
54:cc:5c:51:06:75:ea:db:4a:c3:17:24:f3:2d:8f:
81:40:ed:64:4d:21:6f:19:ce:85:64:c2:48:e6:70:
1f:2a:e0:5b:f0:5f:66:b3:53:78:71:25:bd:f4:30:
a6:55:62:3a:d7:91:a3:c3:6b:8c:c3:a5:f1:b9:87:
d6:64:87:fa:44:e1:71:da:c9:de:87:ed:a8:d3:52:
40:73:0e:68:71:69:11:f7:20:05:72:4f:b0:9d:59:
10:79:ae:bc:ac:c2:bb:a3:75:f4:54:c2:45:99:b4:
a7:7e:bd:64:eb:2a:d0:ba:5a:b6:71:94:49:91:6f:
b5:c0:f4:3a:7c:1e:7c:19:79:89:e5:5b:ff:c0:37:
19:05:12:b5:bf:d5:c6:67:69:db:a8:09:8f:64:a1:
ec:0b:b2:50:a5:a0:4e:24:12:31:d5:e8:9b:e4:5f:
07:af:4a:09:13:e0:a1:d8:63:dd:7b:f0:0d:19:0a:
62:22:51:d8:59:7b:2f:fc:09:e2:55:44:1a:5a:d7:
70:ab:ba:69:f3:0c:80:d5:20:9b:ef:07:12:22:7d:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B4:36:E8:32:10:DB:17:68:23:6F:72:B3:A6:61:B7:23:23:8D:09
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ALQ26DIQ2xdoI29ys6ZhtyMjjQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.241.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8b:6f:45:69:dc:07:bd:1f:bc:5d:a2:c1:5e:50:51:ff:e3:
58:bd:d6:c3:b0:d0:32:66:fd:51:72:ad:87:f6:20:32:46:02:
2a:70:5c:a1:02:f9:39:43:fb:87:6b:00:09:7e:3c:86:f6:24:
6d:ff:2e:1b:e2:e9:72:d5:f9:53:78:6c:1e:7e:cd:0f:51:3e:
d2:a5:42:e8:49:6c:55:69:45:20:be:cd:fb:71:e6:bd:44:ba:
36:48:ac:0a:f1:60:3d:3c:71:24:8d:4e:04:3e:4d:a3:bb:84:
3e:7a:0b:54:3c:f7:dd:48:96:fd:2c:5a:11:01:5d:cc:0d:8f:
0b:b4:0c:73:e7:8f:b5:c3:6f:8e:cb:f4:68:bc:d1:97:2d:f0:
63:0b:34:13:80:e0:cb:6c:35:b3:4b:3c:99:ac:62:d0:17:4c:
ec:92:9f:a0:49:5c:ab:3a:61:4e:19:0d:7b:66:5c:ef:dd:8f:
f0:24:08:55:7b:9b:9e:35:39:e3:13:22:01:7d:f2:41:69:27:
aa:95:0c:be:0c:54:0e:02:32:bd:f9:e6:e4:1e:f1:a5:6d:6a:
ba:9f:93:59:ce:83:c8:32:21:b1:94:81:91:1d:ed:fe:c0:cf:
04:f2:2d:a5:56:2c:5f:65:b2:e5:a6:9d:1e:31:d8:36:02:78:
2a:b9:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 10:21:38 2023 by rpki-client on console-ams.rpki-client.org