Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/M7cL6INvlpOMWnZQLMYL0CN48zk.roa
File: M7cL6INvlpOMWnZQLMYL0CN48zk.roa (raw, json)
Hash identifier: UPsVft/caw9j9v4UoOV7vpkfhIOo7O0WH0UPDzCrIzA=
Subject key identifier: 33:B7:0B:E8:83:6F:96:93:8C:5A:76:50:2C:C6:0B:D0:23:78:F3:39
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01857C286C2E04F7BBC1C95FF4037B9D5C04
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/M7cL6INvlpOMWnZQLMYL0CN48zk.roa
Signing time: Wed 04 Jan 2023 09:41:41 +0000
ROA not before: Wed 04 Jan 2023 09:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13237
IP address blocks: 193.178.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:28:6c:2e:04:f7:bb:c1:c9:5f:f4:03:7b:9d:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jan 4 09:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b70be8836f96938c5a76502cc60bd02378f339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:78:ac:93:d2:96:da:f7:33:4d:93:b0:e6:
7c:fa:e6:42:d1:29:71:59:c3:c1:4f:50:86:07:fa:
8d:e7:2b:09:b8:8f:d0:7f:47:6d:0d:eb:fe:41:6b:
36:75:a6:df:8d:78:0d:6f:5c:78:78:e5:24:94:e3:
32:dd:60:e1:17:bc:5f:79:6f:bb:8e:17:bd:fd:0d:
f5:01:9d:cc:b0:f1:00:05:96:1a:45:2b:1e:1f:8a:
cb:4b:3a:8f:f5:64:cf:c5:e0:66:f7:b7:0e:48:62:
cf:d5:cd:84:6b:9d:a5:d7:28:9f:f2:b4:f7:46:b1:
d3:a1:5a:44:db:1c:85:bd:48:15:8e:f3:91:d1:6e:
2e:15:40:ac:af:bd:34:cb:6d:3a:5d:f6:fb:ff:df:
e3:8e:01:17:47:cf:90:7b:81:d9:17:c5:9f:b6:0e:
a9:1b:69:aa:8c:36:a8:cb:6c:0e:dd:88:84:bf:c8:
ef:de:6b:34:b2:93:6f:4b:61:7c:cb:41:b6:76:92:
5d:3c:85:a9:63:0a:fb:b3:2c:6a:ff:b3:79:43:16:
61:46:9c:2f:0b:29:28:b3:39:37:17:67:1b:64:6e:
43:cc:35:76:19:d6:b2:26:6a:1b:05:47:14:da:50:
aa:33:72:f7:56:eb:7d:3b:21:73:21:a0:10:b1:6c:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:0B:E8:83:6F:96:93:8C:5A:76:50:2C:C6:0B:D0:23:78:F3:39
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/M7cL6INvlpOMWnZQLMYL0CN48zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:45:49:5e:72:f5:89:0c:89:ee:fc:bf:53:83:70:90:0f:d1:
5d:39:a2:ee:fe:94:4d:a6:ac:0e:bb:29:8a:80:3a:33:24:67:
84:40:aa:02:65:b8:13:5f:af:e7:63:0d:04:6b:68:11:ec:d9:
74:04:9b:41:5f:bb:57:e8:df:e8:f8:be:03:c8:3a:98:dd:c0:
ee:fa:d1:19:af:fe:70:87:20:42:c1:43:1b:f3:00:2e:d7:5e:
9c:d3:10:a8:bd:ba:50:56:c2:38:cf:cc:0b:ef:fd:3b:8d:fe:
d8:9d:2d:af:b6:8c:f7:22:63:be:5f:ed:2e:02:b1:8c:b3:50:
a8:76:a2:b2:4f:1e:4c:dd:86:16:19:52:2e:16:8d:ff:50:11:
fd:47:bb:61:a3:05:84:e7:3c:89:ec:8e:09:b7:5c:1c:64:6c:
bf:35:33:59:97:4e:f1:4f:0b:b4:5a:2a:c7:ba:bb:e2:40:f6:
f8:52:5a:df:4e:fc:7a:53:ec:83:9f:25:64:8a:c3:7b:5b:55:
c8:7c:7f:78:f5:e5:8f:75:77:47:72:91:f5:a9:2d:08:c2:fb:
c6:51:84:1a:35:35:f3:4f:49:71:6f:ef:cf:1b:fa:47:9c:b5:
09:8c:ea:2e:51:f6:83:e9:b9:b1:d2:43:f6:5f:bf:4d:2f:06:
9d:6f:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:24 2024 by rpki-client on console-ams.rpki-client.org