Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/XI0Zr3S09Qx7TVRA7p_GmB_gO2c.roa
File: XI0Zr3S09Qx7TVRA7p_GmB_gO2c.roa (raw, json)
Hash identifier: RKfsg9lQdeazoDtEt18/CWqhBNIyLmtnl5y+6MV4H4E=
Subject key identifier: 5C:8D:19:AF:74:B4:F5:0C:7B:4D:54:40:EE:9F:C6:98:1F:E0:3B:67
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01856E4B02D75A598428E5AA2C92F217F95A
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/XI0Zr3S09Qx7TVRA7p_GmB_gO2c.roa
Signing time: Sun 01 Jan 2023 17:04:47 +0000
ROA not before: Sun 01 Jan 2023 17:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15879
IP address blocks: 193.105.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:02:d7:5a:59:84:28:e5:aa:2c:92:f2:17:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jan 1 17:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8d19af74b4f50c7b4d5440ee9fc6981fe03b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:35:63:ab:ff:b8:56:3d:71:42:cb:3c:20:
8c:0a:4b:dd:1d:f5:1a:04:3c:76:ee:6b:ba:ed:71:
2c:f5:bd:eb:97:ac:2b:7a:32:11:fa:d6:3c:97:6d:
f7:e2:4b:16:c9:92:09:60:11:06:34:86:4b:61:f7:
03:26:63:f2:66:66:99:60:73:88:55:73:20:3f:23:
82:f5:84:cb:cf:79:49:61:8d:ed:50:84:d4:c4:e7:
49:14:9d:97:ec:b7:3d:be:2d:30:40:b0:59:df:bf:
ae:60:1b:29:4c:76:1e:e4:a0:08:14:75:bc:26:b5:
5d:76:b2:52:22:61:94:73:7a:66:d8:3e:71:20:01:
69:c2:eb:02:b6:48:a4:fd:9f:f9:11:41:16:c9:3f:
fa:7f:45:4f:fb:ae:f8:37:ec:76:aa:cf:43:3d:eb:
3e:49:e4:59:a5:7f:dd:a6:f6:a6:50:85:99:4b:9a:
f3:9a:43:52:dd:77:b9:a1:66:83:fa:74:57:53:27:
9a:d0:0f:85:56:7c:8a:58:37:74:91:35:00:d1:35:
dd:f3:d0:91:c0:da:4e:0d:93:09:87:14:c5:39:98:
57:ec:44:46:05:95:9a:6d:12:f3:43:5f:b2:76:1a:
44:3d:68:6e:21:b3:f0:b5:bf:22:66:78:64:f3:b4:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:19:AF:74:B4:F5:0C:7B:4D:54:40:EE:9F:C6:98:1F:E0:3B:67
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/XI0Zr3S09Qx7TVRA7p_GmB_gO2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:be:a8:da:8d:4d:42:1f:ba:e8:2d:a1:8b:0b:7f:8d:fd:18:
96:fa:34:0d:cb:6e:b9:fe:23:f5:c9:22:d0:25:bb:ba:18:1b:
0c:2e:4d:d1:81:ff:77:14:19:61:70:52:08:a4:61:21:d6:f0:
c6:52:af:6d:91:9d:ec:05:8b:63:4c:02:b4:88:92:15:2a:5a:
bf:2d:6b:d9:b5:29:fa:f3:51:bd:80:a8:a0:69:78:1f:d5:8a:
4d:17:c6:46:94:9d:eb:19:31:e1:f3:be:1e:0a:88:f8:20:4a:
f0:51:08:cb:6f:e2:ab:30:9d:da:a6:8a:07:4c:13:96:1f:36:
26:ce:92:c0:e5:33:ff:79:a1:23:ba:43:73:65:8b:c7:ae:55:
8a:a4:41:55:4d:ec:43:da:a4:47:31:21:d1:b9:e2:0d:96:0c:
36:4a:92:ee:1c:ee:93:e1:64:db:c0:8b:fb:b6:6f:46:6e:80:
83:8f:af:40:fe:fc:8b:a8:e9:d1:16:82:df:d1:b8:aa:23:39:
60:00:a2:1b:b6:6c:b3:a4:e9:45:63:39:d4:7a:2e:79:b1:9e:
05:2b:6a:ff:1e:87:3e:c9:fe:82:aa:b9:1a:1a:9f:e0:37:de:
fd:af:9a:60:1b:a9:e2:f7:78:54:da:3c:e4:0f:a4:2e:da:9e:
0d:0b:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:28 2024 by rpki-client on console-ams.rpki-client.org