Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/eku7FtpVtnBRQjtL9SjKsHsK77g.roa
File: eku7FtpVtnBRQjtL9SjKsHsK77g.roa (raw, json)
Hash identifier: Q5u1sZWrOmEngMXS7zVbj70WErtR/Pudu6GgkJOZPGQ=
Subject key identifier: 7A:4B:BB:16:DA:55:B6:70:51:42:3B:4B:F5:28:CA:B0:7B:0A:EF:B8
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 01856F8B8862B5212278E73A000EFE005351
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/eku7FtpVtnBRQjtL9SjKsHsK77g.roa
Signing time: Sun 01 Jan 2023 22:54:53 +0000
ROA not before: Sun 01 Jan 2023 22:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31305
IP address blocks: 193.151.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:88:62:b5:21:22:78:e7:3a:00:0e:fe:00:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Jan 1 22:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a4bbb16da55b67051423b4bf528cab07b0aefb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:65:e7:f7:99:18:1e:9f:55:10:a0:73:7c:
34:ac:27:42:18:e7:ad:59:4d:eb:fa:da:8b:91:f0:
a8:3a:eb:18:59:c1:c0:f1:05:1a:77:a1:35:b1:55:
99:91:be:4a:f8:3d:7a:d1:2f:e2:29:4d:e0:a3:c7:
f9:7d:8e:08:1c:59:2a:a0:d0:5d:39:a8:9a:c4:d5:
64:88:89:86:58:1e:b7:42:38:2a:16:d6:25:3b:6b:
39:4c:6f:70:57:1c:88:0f:44:e4:07:ac:2e:25:eb:
36:4c:8a:88:a5:aa:d6:33:29:60:24:12:6a:85:d9:
06:4b:46:c5:a2:d3:dd:3a:6b:60:58:bf:4e:7e:7a:
e4:7e:7d:ae:30:32:18:d6:ba:43:6f:ec:e3:17:36:
ce:23:dc:9b:9c:e2:96:9c:3f:91:2c:14:7c:bd:63:
02:6d:fd:84:37:55:38:a7:fe:4e:7c:f0:8a:a0:86:
5f:5b:51:8b:55:72:9d:81:e9:f1:3f:58:f5:7f:68:
30:bb:a9:81:45:55:5f:3d:ee:f1:04:d6:28:0b:dd:
29:5d:a4:72:fe:90:cb:69:94:49:09:c5:7e:80:41:
b1:4e:5f:c0:98:23:be:e3:0e:02:92:20:c2:f3:3c:
16:1a:25:0d:c6:03:f0:a1:1d:f7:c1:4d:ec:2f:4d:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:BB:16:DA:55:B6:70:51:42:3B:4B:F5:28:CA:B0:7B:0A:EF:B8
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/eku7FtpVtnBRQjtL9SjKsHsK77g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7b:72:b1:57:72:ab:59:ec:92:4c:d2:37:f4:ab:e0:c2:20:
2d:97:26:d9:b8:2d:69:ce:69:d7:14:c7:d3:18:38:77:c2:e1:
db:8c:09:01:ad:a1:45:7a:df:cf:6e:77:91:f7:5c:10:39:e5:
ff:dd:ec:8b:ab:62:e7:58:8b:84:4a:f1:aa:91:a1:e2:ba:a4:
9c:d5:4c:bd:b4:d6:77:e2:d8:d8:cd:d6:41:8a:d5:23:20:47:
77:63:75:85:28:f1:14:c8:e5:ed:da:88:03:ad:ca:85:e3:95:
ad:0c:54:66:4b:f4:59:f5:4b:ca:66:5e:2c:3c:a5:d8:59:f2:
24:1a:1d:ca:64:59:99:98:46:ff:80:7b:dc:f7:32:70:b8:b5:
e1:94:df:1e:21:e4:d6:d7:45:a3:56:e3:27:ec:52:5e:55:af:
af:56:32:16:15:05:aa:dd:b0:3c:95:e8:c1:de:c3:35:08:5e:
31:04:6c:6e:c5:4d:f0:70:c3:60:d0:71:90:29:1f:60:94:ed:
ef:1b:99:58:fa:06:86:85:39:e0:5b:41:a2:cf:01:ca:35:9b:
8a:33:1f:e0:da:96:a9:c1:eb:d8:58:77:49:fa:40:c1:48:bf:
2d:05:8b:0b:7d:ff:ce:c4:f8:d1:6a:89:a7:99:8b:aa:b9:65:
14:c1:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:19 2024 by rpki-client on console-ams.rpki-client.org