Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/AMXNzQ3W1bGxBWSlwjNvvsRJ_Bs.roa
File: AMXNzQ3W1bGxBWSlwjNvvsRJ_Bs.roa (raw, json)
Hash identifier: eWhFu0CbzxhGtN2QudL+C0hYBa9L1LYIuyQ/HkqhFJA=
Subject key identifier: 00:C5:CD:CD:0D:D6:D5:B1:B1:05:64:A5:C2:33:6F:BE:C4:49:FC:1B
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 01856C4134BBC881E1F8A5FBEDD423C98E86
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/AMXNzQ3W1bGxBWSlwjNvvsRJ_Bs.roa
Signing time: Sun 01 Jan 2023 07:34:50 +0000
ROA not before: Sun 01 Jan 2023 07:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49260
IP address blocks: 188.93.192.0/22 maxlen: 22
188.93.192.0/21 maxlen: 21
188.93.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:34:bb:c8:81:e1:f8:a5:fb:ed:d4:23:c9:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 07:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00c5cdcd0dd6d5b1b10564a5c2336fbec449fc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:66:64:02:cb:d9:6f:9b:e8:b5:7e:fd:44:
18:34:ab:5b:ca:05:da:32:fd:d6:eb:eb:4e:f9:ef:
fc:78:f1:bb:26:46:ff:27:8e:ee:74:72:1d:e5:42:
2f:79:20:b2:8c:5e:33:f5:29:8e:ec:6a:0b:7f:27:
e5:3f:0f:70:b5:e9:a4:cf:92:61:ac:ff:dc:5b:d3:
64:a6:31:65:84:5a:ee:1a:b2:de:f7:f8:b8:53:c6:
c6:e4:b6:b9:39:26:df:c0:50:71:42:de:b2:eb:7d:
40:91:de:91:97:02:18:db:4f:0f:7a:e1:27:0e:ff:
f5:1f:63:d4:75:77:9f:43:c4:50:9a:56:1c:85:ba:
5b:f7:44:53:2d:0a:06:14:fa:98:8c:ea:dc:91:54:
c9:74:e3:b6:98:42:f2:76:51:85:fe:1d:3a:aa:72:
7b:04:d6:c5:b0:4c:80:0f:24:39:6f:3f:60:7a:d8:
aa:c5:a4:17:be:8e:c6:ad:9d:14:42:44:c7:df:60:
c2:ce:3f:04:8a:1d:55:00:13:3e:85:f0:75:6d:fd:
4f:09:99:22:99:ef:8c:0e:18:e1:6f:18:22:84:34:
53:14:55:2b:2d:5a:d0:3a:b0:3f:46:12:41:a6:a8:
68:bc:94:02:90:b6:25:43:39:bf:b2:e4:5e:c0:7a:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:CD:CD:0D:D6:D5:B1:B1:05:64:A5:C2:33:6F:BE:C4:49:FC:1B
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/AMXNzQ3W1bGxBWSlwjNvvsRJ_Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.192.0/21
Signature Algorithm: sha256WithRSAEncryption
56:dd:fc:67:f3:27:43:f5:24:7f:ac:95:32:de:02:4a:c0:be:
0c:26:1a:8e:9d:01:67:92:7a:54:7c:d3:67:d6:8a:56:e2:6c:
7c:17:9a:12:76:87:ac:07:f7:cb:54:73:12:4c:ef:42:c0:8f:
08:07:fc:96:f4:37:03:3e:83:40:9b:33:68:4d:a3:e7:23:ae:
08:23:cf:58:ff:a0:54:41:7c:c9:8f:71:f4:99:6e:aa:69:ed:
d9:00:fc:e5:00:38:2a:cd:ea:a1:5d:98:de:cd:98:9a:98:d8:
97:97:bb:34:cc:c7:cc:c9:dd:97:43:6f:bb:d4:c3:77:fa:47:
cd:a1:69:4a:ad:08:9e:2c:8e:40:1a:2a:d9:92:94:a2:58:97:
34:45:80:8a:78:85:81:a5:47:3d:52:53:20:d1:72:7f:54:28:
ec:40:48:48:06:bf:f2:f7:86:20:59:c3:ba:13:83:a8:c2:84:
0e:60:ba:b9:f8:db:b2:b6:be:7d:e4:ea:93:8e:2f:67:02:28:
e7:07:79:95:2a:c5:3f:f6:e1:3d:dd:af:45:ad:81:32:72:b1:
a5:c7:17:43:1c:30:09:8d:42:ee:4f:94:6c:9e:6e:6e:28:e4:
dc:13:10:69:78:06:c3:f4:6c:01:db:5e:87:1a:e6:02:e5:66:
48:64:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org