Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/1-KHF8Xint2m75R9Po8A85MS-tYo.roa
File: 1-KHF8Xint2m75R9Po8A85MS-tYo.roa (raw, json)
Hash identifier: W61Vtl/TXiuYVMqjbm2dL1ueFFvUBMQCvxGHbWN9pkE=
Subject key identifier: F8:A1:C5:F1:78:A7:B7:69:BB:E5:1F:4F:A3:C0:3C:E4:C4:BE:B5:8A
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0185701EE2DB8F366CC5D6FF145378BD9E87
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/1-KHF8Xint2m75R9Po8A85MS-tYo.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.24.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e2:db:8f:36:6c:c5:d6:ff:14:53:78:bd:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a1c5f178a7b769bbe51f4fa3c03ce4c4beb58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:50:86:d1:03:41:52:b3:31:55:94:05:9b:
a2:cc:a4:6e:71:5b:af:3c:82:4d:17:9e:3b:2a:e1:
f8:1e:c2:e4:d5:9a:68:9d:3e:18:d8:e4:c1:25:5c:
62:e9:75:b1:25:07:eb:4f:68:8f:58:ff:d3:b9:b0:
92:6f:68:49:c6:e8:6c:f3:61:1a:28:1f:1a:5f:0c:
f5:cb:57:1d:8e:59:b6:a8:2b:dc:80:bf:bc:2a:3f:
65:b3:b6:1f:d5:57:89:b3:5d:2c:76:59:2c:43:db:
cb:00:f1:62:3b:cf:27:88:d6:45:b1:b0:7c:cb:3b:
78:5b:0f:fd:37:d0:19:7a:a5:8e:45:08:e8:be:11:
7f:c0:41:01:07:52:a8:e6:62:1b:4c:98:81:ea:8e:
8b:82:43:1b:de:29:a9:26:6c:a3:6f:1f:99:b9:59:
f9:b9:a8:61:87:0d:da:62:1a:33:28:7a:de:1f:e6:
9b:8e:97:f9:5d:2a:69:c7:43:75:fb:64:95:ba:2e:
c6:75:7e:d0:0b:a4:1e:e5:91:3a:c0:7d:f3:50:29:
d7:84:93:f4:17:e3:67:4b:fd:ba:cd:63:71:16:39:
d4:31:6b:32:b3:c6:3c:01:eb:08:f7:dc:f6:dc:9b:
6f:2a:3b:be:fa:7c:f2:72:eb:87:ae:73:95:b1:74:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:C5:F1:78:A7:B7:69:BB:E5:1F:4F:A3:C0:3C:E4:C4:BE:B5:8A
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/1-KHF8Xint2m75R9Po8A85MS-tYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.42.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5d:a6:8a:f1:9f:34:49:25:6f:77:66:9c:26:5a:ed:e4:d1:
0f:20:b3:62:de:bd:ff:f3:11:56:4c:93:29:5e:90:07:09:33:
4b:eb:f2:a5:69:0c:b3:0f:dc:e6:4b:ad:c7:59:1c:d1:51:66:
38:bf:43:bf:31:84:57:e8:aa:63:14:fb:39:88:87:5f:12:00:
8f:ca:c2:ee:39:de:b7:f5:58:bf:83:fb:30:52:e7:e9:ba:0f:
d3:28:95:4d:ed:0c:e9:2e:04:f8:a8:c7:57:c9:ec:17:2d:b4:
a1:3f:5c:0f:ff:c2:06:c9:c4:9f:76:54:c0:4b:cd:34:27:fa:
f7:c5:b9:0b:f9:da:e1:21:8a:ff:87:32:b1:ee:2c:ce:fe:29:
de:e6:92:40:eb:d4:e0:60:46:5b:82:83:4f:f0:b4:3c:7e:9b:
fd:de:ec:47:7b:15:1e:2d:21:90:49:c1:c2:b1:2d:63:79:db:
53:af:5e:cd:f3:a6:f0:54:a1:e1:10:88:2b:1c:b6:ee:63:4e:
bd:0f:51:8c:99:48:90:a4:57:33:a4:6a:6b:b8:83:b1:58:d5:
2b:7e:e8:da:4b:b8:8a:80:b6:6c:7e:a4:cc:0c:12:3d:57:11:
0b:52:1f:28:fc:c5:a4:8b:02:58:d5:7f:ac:a8:7d:7d:2c:c4:
94:c0:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org