Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8z4cio-IL_GfStirh4jPKphek0.roa
File: q8z4cio-IL_GfStirh4jPKphek0.roa (raw, json)
Hash identifier: 0+4Y+riyhrWnEv38v1aB4HOPJuCXT7/TL28P/CO/L6I=
Subject key identifier: AB:CC:F8:72:2A:3E:20:BF:C6:7D:2B:62:AE:1E:23:3C:AA:61:7A:4D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0189976CF534791CDD5C242AB3D5D665C4FF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8z4cio-IL_GfStirh4jPKphek0.roa
Signing time: Thu 27 Jul 2023 12:57:27 +0000
ROA not before: Thu 27 Jul 2023 12:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399448
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:6c:f5:34:79:1c:dd:5c:24:2a:b3:d5:d6:65:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 27 12:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abccf8722a3e20bfc67d2b62ae1e233caa617a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:0f:31:7c:bb:a0:61:7e:a2:9d:19:bd:14:
bf:67:e1:55:f8:de:2c:75:b3:2f:5d:87:0e:49:48:
a2:d6:09:7b:a7:20:ec:ff:5a:65:03:e1:a3:38:37:
a5:5c:66:bf:7f:56:72:af:a8:9f:8a:15:88:90:76:
aa:e7:60:1a:dc:7a:18:b7:b4:d7:33:79:a5:54:f9:
48:3d:cf:9e:b6:73:e0:76:0b:75:59:7d:16:36:a4:
ab:4c:4e:b3:ba:ab:ca:5f:47:35:57:c4:81:bf:93:
32:b2:21:55:ee:45:04:ee:96:ed:6a:a5:8e:88:e1:
58:f9:8e:3b:12:11:d6:79:94:53:c0:de:96:9f:43:
0d:a8:8c:81:71:70:2e:1b:d1:dc:0e:9d:5a:17:3d:
6f:bf:84:b3:47:b3:1d:a6:b8:0d:44:a1:ef:7b:66:
31:9a:b0:25:01:e3:92:8d:1b:69:62:aa:b0:e1:07:
bc:37:f5:f8:e8:c9:6a:17:cc:28:d8:f8:f9:aa:8d:
b2:d1:46:0f:04:73:99:04:24:a2:71:91:a0:e2:7e:
4e:b1:ae:bf:33:d7:d5:77:9d:44:62:ce:99:48:02:
58:5f:0c:c8:8f:cd:cb:9d:f8:35:ac:26:eb:5f:8b:
ce:5c:8b:8b:61:52:a0:e5:83:67:2a:29:23:e4:a5:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:F8:72:2A:3E:20:BF:C6:7D:2B:62:AE:1E:23:3C:AA:61:7A:4D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8z4cio-IL_GfStirh4jPKphek0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5d:0c:2d:2d:e4:1f:df:f6:95:00:59:a9:b9:94:d4:ee:36:
73:42:31:bb:c3:17:87:c7:de:5d:ee:b5:0c:77:5b:24:dc:6d:
0c:af:fd:eb:df:be:c8:cd:5c:54:77:72:18:1c:e2:51:d6:10:
bf:77:86:f3:ed:7e:7a:0b:89:72:9e:f7:92:4c:0e:d9:5c:ba:
7d:2a:8b:68:c1:46:46:d4:d2:c1:76:9a:2a:5f:b4:2f:87:4d:
e2:d5:7d:1b:75:66:a0:0a:8a:3f:29:dd:02:99:91:3b:19:dc:
69:39:9e:3e:49:54:61:38:e7:85:4b:ad:4c:3d:02:cb:a2:56:
a7:82:65:f7:b5:2e:c4:70:dd:d7:46:80:9b:03:eb:57:a3:53:
1a:59:92:d8:35:49:2f:c1:72:86:ad:11:17:29:2c:d6:67:62:
40:cc:f5:69:6f:76:e6:ba:4c:10:f3:23:eb:19:27:ed:d1:5e:
86:8f:0c:cc:2f:ca:db:dd:ca:d3:17:3c:68:8a:4b:c3:9f:e0:
b3:4d:d5:db:8b:c2:07:76:af:c7:ee:30:77:0b:b2:94:51:a1:
e4:10:98:68:3f:51:5d:91:a1:d9:5e:12:c1:0c:b9:a1:37:75:
59:eb:e8:7c:84:ad:67:e2:b6:22:ca:27:77:e8:b2:50:94:82:
e0:25:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org