Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/rDwOK7bd-UETbtpwevbWa0bWGuo.roa
File: rDwOK7bd-UETbtpwevbWa0bWGuo.roa (raw, json)
Hash identifier: xp6GEuOmUNGw1G/nRBIyhsw+2WVDxBO7hThHnWvKCtM=
Subject key identifier: AC:3C:0E:2B:B6:DD:F9:41:13:6E:DA:70:7A:F6:D6:6B:46:D6:1A:EA
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 018AFC39C0DB1C25CF2317ED4CEB4D0436C8
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/rDwOK7bd-UETbtpwevbWa0bWGuo.roa
Signing time: Wed 04 Oct 2023 19:45:57 +0000
ROA not before: Wed 04 Oct 2023 19:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 19:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:39:c0:db:1c:25:cf:23:17:ed:4c:eb:4d:04:36:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Oct 4 19:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac3c0e2bb6ddf941136eda707af6d66b46d61aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:c2:c6:79:28:c8:ae:2a:d4:3c:a8:bd:88:
6d:5d:66:e1:52:3c:b5:b2:05:53:cc:39:e8:60:1d:
b8:05:b3:32:5d:fa:1b:31:5b:52:c5:4e:a0:6b:a4:
7f:af:5c:41:80:b5:91:4e:73:42:86:d2:7b:6a:76:
b6:03:24:e2:fa:a0:a6:a1:0e:ad:9c:7f:5b:59:1b:
d5:42:10:05:81:f6:fb:ac:1c:0b:0c:12:31:88:ed:
6f:96:3a:ce:02:4c:aa:c6:98:48:8a:d9:71:61:57:
49:72:89:9b:37:fc:b3:a0:ba:06:00:5b:cc:9d:b5:
a9:f5:d1:c2:fa:ea:b9:a1:10:a7:98:cb:db:91:d3:
78:58:20:68:8f:e1:2a:96:da:24:22:d8:fe:9c:5b:
f5:d0:0a:c3:42:be:b2:d0:c0:33:7c:63:b4:4e:51:
b2:d6:0b:7b:73:96:14:ab:2e:47:bc:df:7b:96:b6:
46:8b:9b:5b:42:ec:20:87:15:cc:f3:4e:06:32:fb:
a3:f6:1d:b4:55:4c:39:1f:b1:19:d0:68:e3:81:1f:
9c:2a:e1:fa:c8:e2:58:f3:c3:4a:b6:fc:7a:3f:43:
16:81:a2:52:f3:d6:2e:5b:1b:c2:f8:85:3b:36:6e:
e6:07:01:4c:59:49:2a:14:e0:3d:e0:31:58:31:82:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:0E:2B:B6:DD:F9:41:13:6E:DA:70:7A:F6:D6:6B:46:D6:1A:EA
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/rDwOK7bd-UETbtpwevbWa0bWGuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:de:eb:60:c5:83:ab:59:5d:c0:e7:3e:ca:97:f4:ee:35:
a4:c0:b9:4b:7a:8c:82:2d:73:d9:aa:c5:84:64:41:c0:fd:b2:
27:08:41:66:2f:28:50:39:fc:61:71:f5:0a:8b:dc:e5:95:23:
8e:f5:3d:3b:a8:0e:b2:9f:67:e6:68:83:2e:ae:56:2d:45:02:
7d:a7:f0:47:4a:08:ec:9e:84:ae:00:06:7b:a3:ae:15:63:b4:
01:8c:7a:18:5c:e5:ec:a4:46:8f:57:7f:46:5a:05:c3:27:25:
f6:1e:d9:94:0a:79:49:91:d4:c7:36:b7:8f:51:70:4c:e7:35:
9a:6c:f4:3b:dc:7c:6d:c3:b9:92:4b:2e:04:1e:23:ba:18:fe:
8e:45:8d:5e:5b:35:95:22:63:82:46:9e:af:fa:45:60:7f:32:
62:22:25:96:a2:f8:68:34:3c:95:4b:fd:0b:54:54:8d:1e:ec:
e0:1b:62:07:d7:d7:98:3f:a8:7f:c3:7d:af:13:15:5a:26:d9:
4f:ac:b6:4b:d2:ec:c8:b4:70:56:76:9c:81:be:b1:6d:e7:96:
f8:96:c3:b9:f5:38:1a:a9:8d:e6:29:47:78:6d:08:06:13:29:
88:0a:4f:df:5a:54:ba:4c:02:e2:69:af:d5:8c:11:f9:8b:2a:
34:c4:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:13 2024 by rpki-client on console-fra.rpki-client.org