Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/v9423xgo9e_-9QU2ZXcFlpCZnkE.roa
File: v9423xgo9e_-9QU2ZXcFlpCZnkE.roa (raw, json)
Hash identifier: SZFUFXLDvHi7XrJXTtvmpByCofLT0snvSotSPdBgOwg=
Subject key identifier: BF:DE:36:DF:18:28:F5:EF:FE:F5:05:36:65:77:05:96:90:99:9E:41
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 018570398D4098C92E1AF98A88CB1A0F0E0A
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/v9423xgo9e_-9QU2ZXcFlpCZnkE.roa
Signing time: Mon 02 Jan 2023 02:04:57 +0000
ROA not before: Mon 02 Jan 2023 02:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:8d:40:98:c9:2e:1a:f9:8a:88:cb:1a:0f:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Jan 2 02:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfde36df1828f5effef505366577059690999e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:24:40:ba:d0:cf:fa:de:e4:0f:77:c6:29:
4e:e5:c0:1e:6d:c3:2a:82:d7:44:8b:9c:58:01:90:
f1:fe:60:08:24:0c:d8:7f:80:ae:6d:06:58:0a:f4:
60:08:8b:00:66:dd:c9:63:1a:c1:8c:c9:fb:78:79:
cd:b9:d7:50:4d:e2:9a:aa:25:57:4e:43:2a:8c:ac:
78:af:0f:91:e8:89:87:b6:4c:5f:42:ec:80:70:0a:
c4:47:a0:0c:9b:cd:e3:44:e5:92:82:7d:c2:50:67:
34:0e:fb:7e:37:37:88:23:41:6f:c3:a0:e7:38:d3:
33:aa:4d:fa:35:78:f6:44:37:ec:a3:fe:fd:10:6d:
5a:69:c7:9e:a4:03:9e:9c:07:b2:a2:dc:d7:99:1c:
bf:41:c6:2b:aa:43:80:d1:f1:0d:b5:66:12:91:b1:
c2:b4:c2:ec:0a:5a:0d:c7:bd:25:c2:d5:84:dc:b3:
ef:4c:fb:3d:8f:3e:15:05:8a:1a:0f:ed:96:3b:50:
24:64:a9:8d:ce:26:02:3b:47:bc:db:5f:83:08:cd:
ee:02:74:01:65:2f:a1:e2:3c:b5:7e:65:45:25:99:
26:7d:e6:fc:c6:dd:31:8b:8a:c8:98:81:2c:3b:e9:
1a:6a:12:0a:48:e7:5d:52:a0:af:07:d5:67:bb:32:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:36:DF:18:28:F5:EF:FE:F5:05:36:65:77:05:96:90:99:9E:41
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/v9423xgo9e_-9QU2ZXcFlpCZnkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:9b:75:e3:7f:bb:fd:cb:e6:0d:8e:10:a9:45:46:db:57:e5:
69:3e:09:06:97:66:c4:6f:7e:d6:94:f9:07:e2:b0:b0:e2:26:
4a:6e:52:f5:f7:57:57:b5:d9:10:26:a6:e4:50:c6:59:bf:9c:
33:2c:45:02:8d:0f:4e:df:ec:be:5a:cd:05:2a:19:9e:bc:1a:
bb:c1:b3:64:4b:3b:d8:ab:07:a2:6c:ec:fc:f0:57:84:6a:7c:
e2:cc:8a:f0:72:82:a6:c3:3f:c5:8f:eb:c0:72:78:65:a1:71:
28:3d:49:0e:19:77:55:3a:fa:52:7a:19:7d:fe:ac:fc:65:36:
10:9c:f1:78:bb:4b:58:47:cc:0a:a0:05:c0:59:a2:ee:76:76:
82:28:39:c9:53:ad:a7:48:c6:14:1e:bc:d2:60:24:57:b5:c7:
1b:68:5c:c8:a0:5f:2b:81:27:7f:ff:03:3e:4f:51:88:71:a6:
a0:52:15:05:ba:d3:e2:34:f9:31:75:8a:30:ff:c6:28:1d:5e:
2b:21:b2:82:a0:73:8b:44:87:12:9a:64:2f:d5:19:8f:59:e9:
d2:78:81:41:ba:57:9c:d3:2b:9e:66:3a:79:fa:78:fa:d8:68:
a0:14:c9:1d:f3:95:bc:bf:58:18:72:0c:4a:7a:b6:49:a8:3b:
5e:5b:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:05 2024 by rpki-client on console-fra.rpki-client.org