Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KniEkZJiVYrYb5OzQwPHPIGN-Qw.roa
File: KniEkZJiVYrYb5OzQwPHPIGN-Qw.roa (raw, json)
Hash identifier: iLn3s/RfzdZIYASdjbps28abwduTDwLEuiiMMLOoFj8=
Subject key identifier: 2A:78:84:91:92:62:55:8A:D8:6F:93:B3:43:03:C7:3C:81:8D:F9:0C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188E1607CC55F31AB3523DE6537EB647313
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KniEkZJiVYrYb5OzQwPHPIGN-Qw.roa
Signing time: Thu 22 Jun 2023 04:32:56 +0000
ROA not before: Thu 22 Jun 2023 04:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:60:7c:c5:5f:31:ab:35:23:de:65:37:eb:64:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 22 04:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a7884919262558ad86f93b34303c73c818df90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:7b:6c:f8:4d:85:4d:67:1c:d8:f4:2e:29:
7c:6f:45:c9:29:92:26:97:32:23:bd:0f:ea:ec:2a:
32:af:42:65:13:2c:f5:a8:cf:e1:31:13:d7:f6:fb:
1f:da:35:06:df:28:89:d1:53:26:a6:fe:29:1f:ce:
4e:6b:15:8a:c1:87:07:18:20:0f:48:e9:4e:cc:ad:
97:24:66:46:fe:39:c0:bc:ee:d8:37:02:cf:ae:7b:
65:12:77:48:15:4d:ad:54:7c:fa:fb:fc:46:75:14:
69:aa:de:38:24:35:c2:09:eb:5b:0c:fe:92:ed:66:
61:71:2d:b2:e3:49:27:c8:23:6f:e9:69:1f:04:38:
54:9e:ec:e4:d9:cf:47:97:34:d1:e9:fd:22:eb:ac:
5c:ef:ce:7f:1d:a8:d1:81:c2:37:26:2b:54:7f:9d:
1f:63:7b:d9:68:67:3f:f9:5c:76:90:f0:c2:1d:3e:
ae:ff:4b:98:99:08:d8:c9:ed:81:5a:67:b9:9a:67:
89:52:6c:8c:2a:8f:c8:36:ed:ca:81:c6:b7:23:f6:
23:52:5f:34:9c:5a:57:e0:3c:07:97:7c:bb:eb:fb:
5b:1b:a2:6a:4a:89:aa:b5:f6:20:eb:0f:2e:2a:5a:
13:24:74:74:a2:2c:28:18:4b:90:33:53:23:e3:ff:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:84:91:92:62:55:8A:D8:6F:93:B3:43:03:C7:3C:81:8D:F9:0C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/KniEkZJiVYrYb5OzQwPHPIGN-Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6f:24:d1:74:93:12:46:fa:b9:47:33:9a:a3:ef:aa:3c:97:
02:78:14:05:ea:dc:0c:f7:dd:8c:07:3d:38:80:f8:66:d7:fd:
f0:d1:4c:b3:ee:7f:7f:0c:d2:ac:51:3b:a4:81:a6:4c:2a:f7:
c4:44:f8:31:f1:76:ba:cc:5f:89:68:64:6c:24:67:97:0f:bf:
0a:b2:23:be:b7:03:f0:71:cb:21:33:d0:42:66:0a:c2:f8:82:
31:34:3c:b8:1a:6e:e5:aa:d2:9f:a8:86:22:81:8c:4c:a0:7c:
00:e2:b1:b3:7a:09:8a:6a:c7:65:8b:cc:e5:48:3c:f9:f6:75:
a6:ff:45:d4:32:61:43:7f:67:13:c6:e4:ad:8c:7c:c4:36:d2:
ac:24:30:04:7c:7e:c7:bf:6c:af:98:2e:2e:ab:7a:07:65:9b:
28:12:46:80:de:02:96:63:fc:e9:14:07:64:69:df:7a:f7:e7:
5d:9b:b5:90:62:27:19:db:f1:35:43:ce:6b:a1:0e:46:bb:65:
a3:b1:6f:00:78:db:71:fe:8a:60:ce:fa:ff:7d:af:c1:f6:ec:
a5:1d:c0:7e:5b:5b:32:b8:b1:0e:4a:60:75:2c:67:32:57:cd:
77:38:e9:ea:de:a2:b6:96:68:c9:5b:b9:5a:3f:64:09:87:0d:
c9:f3:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org