Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/Cmx_BGynKjApxvG_hJYHHKaOXJc.roa
File: Cmx_BGynKjApxvG_hJYHHKaOXJc.roa (raw, json)
Hash identifier: 3wtY4D8Y6TNm5qcQB4PWwiB39Vden7sESWq2us8hqiE=
Subject key identifier: 0A:6C:7F:04:6C:A7:2A:30:29:C6:F1:BF:84:96:07:1C:A6:8E:5C:97
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 018572312892C0631B211B36C81F96AF8E7B
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/Cmx_BGynKjApxvG_hJYHHKaOXJc.roa
Signing time: Mon 02 Jan 2023 11:15:02 +0000
ROA not before: Mon 02 Jan 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209311
IP address blocks: 193.111.211.0/24 maxlen: 24
2a0a:8ac0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:28:92:c0:63:1b:21:1b:36:c8:1f:96:af:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jan 2 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a6c7f046ca72a3029c6f1bf8496071ca68e5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:13:29:75:00:f5:be:1f:50:5d:5f:89:7c:
75:05:49:24:fc:99:67:d1:26:4b:0c:75:1c:d7:2e:
f6:b7:95:d6:40:32:2c:f5:36:c0:b9:e1:20:5c:7c:
fc:a7:3f:17:fa:6b:35:3c:4e:2c:21:d4:ce:d3:eb:
22:d2:b3:35:68:ef:72:f4:eb:ee:88:ed:11:b7:98:
94:b2:35:ae:1e:ff:c8:7a:7d:c6:03:2a:95:3e:c9:
e5:a0:ff:94:38:0b:58:df:a3:3a:43:76:f1:65:6e:
33:11:7b:bf:ab:1f:ce:4d:27:92:a4:60:76:29:80:
aa:b4:42:ad:24:0b:93:09:61:26:1b:b0:5c:ce:00:
28:02:45:64:74:1c:6c:a2:a6:03:eb:b8:7f:b4:c4:
2f:70:a2:ec:c3:21:22:aa:de:c0:fc:e4:ee:ff:5d:
8b:72:fc:a6:6d:62:99:29:a9:17:f4:25:ef:87:d1:
ae:14:05:16:96:0d:d5:fb:50:72:42:18:c6:99:c6:
5c:ff:bf:96:be:7d:39:18:63:ea:e0:7e:96:3e:64:
bb:5b:98:09:36:04:77:2f:91:9b:96:23:b0:36:a5:
0b:99:48:b0:44:9b:22:00:27:44:59:16:a1:51:e4:
25:26:a3:71:c7:c1:ee:6c:61:da:cb:31:51:d8:ce:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:7F:04:6C:A7:2A:30:29:C6:F1:BF:84:96:07:1C:A6:8E:5C:97
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/Cmx_BGynKjApxvG_hJYHHKaOXJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.211.0/24
IPv6:
2a0a:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:d2:d9:f3:7f:01:2d:60:bd:30:dd:02:e0:37:9c:38:18:dd:
fe:df:4d:06:0f:23:f5:58:28:41:a3:40:7d:07:2b:b8:c4:e4:
ae:f8:a6:55:c8:bf:b1:c3:61:9e:52:97:eb:31:ff:e2:63:bd:
42:3d:92:b2:50:89:72:3c:4e:57:5f:6b:26:17:8e:4b:1b:d8:
20:47:17:7e:10:04:14:49:16:25:48:8b:40:ed:c2:d6:7e:2e:
52:c8:12:67:3e:a0:42:ee:9d:a4:45:27:81:37:2f:bd:32:2d:
a1:cd:5c:47:68:b8:4a:b9:bd:a9:a0:0d:25:97:34:99:21:17:
38:99:ac:4e:24:33:8c:0b:6c:7d:b0:bb:22:33:e2:b2:8d:7f:
a1:2c:32:ea:8e:dd:22:34:13:9b:af:d9:79:c3:d8:d5:bd:8c:
83:9c:10:af:2c:fe:28:e6:8d:42:46:0a:49:79:27:6a:ed:98:
a7:81:1c:03:96:7a:56:fa:f8:ee:93:e1:ab:26:7d:c6:aa:d0:
14:e3:70:3a:dc:56:68:bf:ed:6c:90:43:f2:98:e7:a6:42:a4:
38:b4:a0:7f:5e:28:a3:0c:39:a4:04:71:81:40:5a:23:34:8c:
f3:49:c0:a6:14:cb:ed:0b:26:49:e8:21:5d:d7:74:7f:dd:d9:
10:4d:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:21 2024 by rpki-client on console-fra.rpki-client.org