Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa
File: 0Ey6NEhScqZOnks8ou7AGwlSmk4.roa (raw, json)
Hash identifier: ffD2kUXVLw7IGBkCCFuPD75GJirtolS5sqVwc9asVy4=
Subject key identifier: D0:4C:BA:34:48:52:72:A6:4E:9E:4B:3C:A2:EE:C0:1B:09:52:9A:4E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739009B88A6B65B6BC638D6BCC63C697
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa
Signing time: Mon 02 Jan 2023 17:38:17 +0000
ROA not before: Mon 02 Jan 2023 17:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210718
IP address blocks: 193.31.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 23:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:09:b8:8a:6b:65:b6:bc:63:8d:6b:cc:63:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04cba34485272a64e9e4b3ca2eec01b09529a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:2c:fe:32:67:35:1c:32:18:d4:e6:af:19:
e8:ef:3d:df:ae:99:a8:7c:eb:0e:05:0a:5a:63:bc:
d9:20:81:27:2d:f7:ff:94:4d:4c:cd:e9:ae:8b:de:
0a:8a:83:4f:ba:b4:58:59:b6:b0:eb:d2:14:d2:00:
3e:82:70:06:d3:a5:b3:6f:9f:d1:1a:58:78:34:b6:
5b:77:e0:03:16:e6:e9:77:3e:c5:75:f5:88:ee:26:
58:d6:4c:0b:55:ee:b9:c8:90:83:93:f6:c8:f9:ac:
db:2e:38:94:fe:25:63:74:3e:d0:9a:6a:d8:8f:a4:
23:89:30:ca:c7:e0:c7:47:8a:9d:c2:42:15:ce:96:
6c:b5:89:af:c0:95:f3:39:34:39:51:cb:75:75:a7:
90:b4:0a:4b:cb:5e:22:ec:e2:cd:c4:50:cd:25:c7:
53:67:d7:b9:fb:d6:f8:c9:fa:a5:e2:36:73:b7:8b:
af:4e:bd:d1:2c:b8:ee:57:c7:56:32:ec:38:52:40:
29:44:31:e5:5d:1d:d4:6b:db:e2:0e:ec:ae:24:45:
bb:b2:7d:3d:b4:a9:c1:cd:0b:6b:21:15:82:70:b8:
c1:87:03:d5:ba:f0:be:4f:00:b2:ca:49:18:a2:53:
53:3d:6a:2f:34:cf:01:56:8d:6f:c9:9d:03:17:2e:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4C:BA:34:48:52:72:A6:4E:9E:4B:3C:A2:EE:C0:1B:09:52:9A:4E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:66:23:93:18:63:e9:7c:d6:d3:46:8b:1d:d6:b0:d5:9c:
91:9a:b5:ef:d4:69:46:db:22:3e:bd:62:0f:34:b2:4e:43:6f:
49:99:22:57:8d:f2:98:cb:1e:d7:7b:70:90:bd:52:3b:84:76:
99:99:27:53:4b:61:c6:c2:bb:cd:46:86:d7:7f:61:01:03:e6:
db:e6:eb:1f:a5:d4:bf:23:83:0a:f3:28:4e:dc:0d:0b:09:49:
c3:a6:b6:ba:0b:a8:24:18:e5:be:cc:62:28:c6:62:b7:f2:c9:
63:cd:7a:b8:a3:cf:69:2b:a7:3b:a5:c7:a4:63:b7:ef:fc:41:
e0:07:25:11:a6:8a:38:8f:e2:1a:42:e6:96:55:41:76:68:2e:
b2:13:65:74:a5:67:6e:63:ae:a4:dd:19:c4:f0:fd:ea:7a:fe:
d2:7a:2e:f6:4c:8b:ff:8d:07:eb:3b:5d:97:15:53:d1:6a:50:
aa:53:aa:5f:af:a3:df:f4:79:d0:24:0e:74:bd:da:d5:0a:a9:
b1:f0:90:bd:45:d1:01:0f:39:58:dc:f4:b6:b0:14:8a:97:d9:
54:6e:41:64:d6:2b:43:27:68:42:a4:f2:f3:cc:01:2d:84:09:
45:56:5b:df:5f:9d:3b:39:44:59:81:0e:4e:73:95:97:a8:f3:
13:7f:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org