Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/tDCE7F8xwXz7Sp2z59wSKRwPMZE.roa
File: tDCE7F8xwXz7Sp2z59wSKRwPMZE.roa (raw, json)
Hash identifier: CetaKoRoyO+cW5BI8fjaVJ6bbE6gGag/Jv4htGOTPEA=
Subject key identifier: B4:30:84:EC:5F:31:C1:7C:FB:4A:9D:B3:E7:DC:12:29:1C:0F:31:91
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 01857042871A5A2D9F9053514718D4E2B1A1
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/tDCE7F8xwXz7Sp2z59wSKRwPMZE.roa
Signing time: Mon 02 Jan 2023 02:14:46 +0000
ROA not before: Mon 02 Jan 2023 02:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202328
IP address blocks: 193.56.220.0/24 maxlen: 24
193.56.220.0/22 maxlen: 22
193.56.223.0/24 maxlen: 24
193.56.222.0/24 maxlen: 24
193.56.221.0/24 maxlen: 24
2a0c:9040::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:87:1a:5a:2d:9f:90:53:51:47:18:d4:e2:b1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jan 2 02:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b43084ec5f31c17cfb4a9db3e7dc12291c0f3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:9c:47:53:75:f0:d8:78:da:da:65:f2:8e:
8e:ec:76:5d:98:1a:de:9c:b5:83:d2:b8:f5:38:29:
46:58:71:7f:82:57:40:f5:06:07:ce:2f:ef:6a:db:
7e:59:2d:30:04:8a:0d:3b:c2:d7:a5:82:cd:c9:73:
b1:81:0e:d5:ab:4f:c7:a1:24:9f:74:a9:bc:58:21:
91:37:15:34:3b:6c:25:04:98:d0:75:f8:47:2a:04:
59:40:13:7a:66:cc:16:a8:bb:de:ab:30:b1:ec:12:
c9:03:4a:8d:09:31:ea:75:a7:fc:67:ed:76:41:fc:
38:55:51:ad:55:1e:a6:18:2e:4c:4f:df:fe:43:28:
39:48:48:43:75:38:8e:8f:5f:44:4e:41:7c:20:35:
76:40:84:a7:72:ca:ac:40:ed:b9:0c:40:d7:01:2a:
9b:86:ce:94:66:02:91:62:6b:3c:db:2c:bf:b0:fe:
94:a0:de:59:4a:9d:0d:a4:07:7b:2b:37:5d:8f:53:
c2:51:a3:a5:ca:d3:05:38:88:b7:01:63:fb:b3:3d:
fc:6d:b6:3d:ed:c1:d5:c6:90:ca:c0:91:85:e7:e5:
2e:bb:73:aa:8b:99:ca:1e:6e:97:34:f0:00:01:cc:
26:57:5d:c8:3c:c1:bf:34:c7:60:38:a8:09:f8:f9:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:84:EC:5F:31:C1:7C:FB:4A:9D:B3:E7:DC:12:29:1C:0F:31:91
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/tDCE7F8xwXz7Sp2z59wSKRwPMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.220.0/22
IPv6:
2a0c:9040::/30
Signature Algorithm: sha256WithRSAEncryption
39:f6:1c:45:e1:f0:26:c1:64:09:d8:93:61:c1:c7:69:a8:fa:
2b:a6:d4:0f:33:06:9e:88:e3:c9:18:ff:0c:5a:56:bc:79:4e:
e5:e0:ca:6c:72:0e:e8:59:58:ad:f4:7e:ad:88:c4:a8:1c:d2:
3d:98:ad:50:65:26:db:e2:46:93:f7:f1:cf:0e:0a:10:d6:49:
3b:75:23:cb:96:f0:57:02:c2:cd:bd:e8:1a:5a:09:53:74:58:
b8:78:d5:37:31:58:8e:88:7e:92:35:42:02:3f:f6:2b:ad:c4:
1d:af:57:ef:4f:ed:41:44:74:fd:0f:3b:2d:f8:8b:18:29:45:
fe:b9:37:dc:85:6b:dd:4e:47:52:5a:87:e6:fc:c8:9b:42:bf:
92:ea:e5:dc:6f:d5:be:f0:1b:ce:23:a4:d0:48:92:b4:95:92:
ca:a4:af:e5:76:dc:73:26:04:81:23:95:3a:1b:2e:bd:47:57:
8f:91:81:92:25:3e:9c:76:f5:1e:35:ec:d6:11:2c:17:12:d0:
8e:ff:e3:02:88:e7:83:6e:42:83:3a:82:a7:5b:bc:92:02:e5:
39:bb:75:79:f2:9d:b5:4f:e4:c6:e7:21:77:70:5e:40:e7:4b:
c1:57:0d:a6:96:0a:2e:fd:07:9b:92:e1:76:da:65:94:af:17:
4f:58:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:20 2024 by rpki-client on console-ams.rpki-client.org