Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/rljVktsO0hCfuDPOtVgSdzaZ5Zc.roa
File: rljVktsO0hCfuDPOtVgSdzaZ5Zc.roa (raw, json)
Hash identifier: 2zu/Ygd1A/XE/RBEMncn0U+O2gCWHuZPEJ9A/ZSLcME=
Subject key identifier: AE:58:D5:92:DB:0E:D2:10:9F:B8:33:CE:B5:58:12:77:36:99:E5:97
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 018CC794F42F626A61D011A3EA40729E45BA
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/rljVktsO0hCfuDPOtVgSdzaZ5Zc.roa
Signing time: Tue 02 Jan 2024 00:31:16 +0000
ROA not before: Tue 02 Jan 2024 00:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.104.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f4:2f:62:6a:61:d0:11:a3:ea:40:72:9e:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jan 2 00:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae58d592db0ed2109fb833ceb55812773699e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:42:ac:b5:44:e6:75:8c:de:50:88:ff:db:
5d:ac:3b:c8:3b:3f:44:1e:73:04:e0:48:c2:fe:b6:
6b:b8:85:95:71:9c:60:0e:9b:8a:9a:2a:0b:6e:a0:
ac:bc:dd:c5:c6:59:89:0c:21:c3:3c:06:f2:99:36:
c9:dc:c1:c0:99:e8:b3:20:7e:92:82:42:40:49:d1:
30:3b:92:25:78:42:70:01:9c:35:44:4c:65:c8:74:
75:82:00:70:40:2b:9e:e4:bd:57:a1:41:97:c6:e1:
b7:8f:a6:48:98:ff:65:72:a2:40:1d:6c:73:33:78:
12:41:3f:51:80:ef:4d:1d:15:e7:f9:a2:bc:6a:9f:
6e:ad:65:92:4a:6c:97:58:6d:e2:d1:71:37:b5:5f:
a6:8e:a4:07:39:41:e9:2b:8e:88:6a:cc:3e:98:37:
bc:ac:80:fb:e3:20:5c:50:0d:dc:ba:34:c1:23:1e:
74:e1:58:a0:7d:63:7e:d3:10:93:a1:84:96:f6:9d:
88:86:65:a3:55:d4:b3:11:08:94:bd:27:9f:48:8c:
2c:a4:7e:4e:c8:e6:f6:fa:45:47:aa:49:32:73:89:
a0:8b:98:92:43:7b:b0:22:b4:7f:32:da:7b:f5:63:
91:f1:b5:75:40:c3:7c:dc:c9:39:4a:e5:d6:c9:d7:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:D5:92:DB:0E:D2:10:9F:B8:33:CE:B5:58:12:77:36:99:E5:97
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/rljVktsO0hCfuDPOtVgSdzaZ5Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.167.0/24
Signature Algorithm: sha256WithRSAEncryption
77:03:64:5d:d5:b5:54:af:51:75:21:39:1b:d7:49:3f:d6:59:
70:4c:73:f9:27:5b:9c:3a:23:e0:65:83:58:66:e4:20:02:7d:
a3:17:68:00:04:04:a2:99:51:f5:39:fc:9e:05:bd:11:5c:25:
3d:dd:90:2e:ab:06:55:b2:f3:b4:34:f6:e8:62:9c:b4:43:df:
32:d6:b0:3a:2e:26:2c:9b:36:dd:10:15:29:95:5f:e4:79:5e:
ba:65:cd:c3:07:06:99:04:df:e6:ee:b0:02:cf:2f:35:4e:03:
67:d3:70:1a:f0:9c:cc:55:32:e5:11:3f:49:0e:51:eb:ac:27:
a0:2b:2c:5c:38:fc:99:96:b0:66:a0:c9:90:86:14:0f:70:a7:
48:14:87:27:a1:0e:58:19:76:27:98:5d:62:26:4c:9f:53:72:
a3:4a:13:b9:62:a3:8a:ec:81:39:92:2a:5a:bb:0d:45:ec:cb:
0f:fd:16:f2:07:13:da:0b:30:1b:41:1c:7e:c4:27:f0:6c:ff:
fe:ed:e1:4c:0f:1f:51:16:8c:01:08:9f:bc:30:1f:03:eb:a1:
ad:b8:0b:84:76:a1:44:1b:87:13:9b:d1:55:7a:3f:6b:29:cf:
19:29:65:0d:a4:02:b2:51:49:3f:17:4e:09:4d:ba:07:f5:aa:
1a:f4:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:02 2024 by rpki-client on console-fra.rpki-client.org