Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/VKvBZE6XorAzRE4BxEIFrJzwGLg.roa
File: VKvBZE6XorAzRE4BxEIFrJzwGLg.roa (raw, json)
Hash identifier: b+x1wvVOeWEFKqwuv3XMdd0K4UJOH6qpu/MgcF+h72A=
Subject key identifier: 54:AB:C1:64:4E:97:A2:B0:33:44:4E:01:C4:42:05:AC:9C:F0:18:B8
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 01857246BE1E0BA1BDBBA1A68EE444FD8B10
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/VKvBZE6XorAzRE4BxEIFrJzwGLg.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12933
IP address blocks: 193.41.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:be:1e:0b:a1:bd:bb:a1:a6:8e:e4:44:fd:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54abc1644e97a2b033444e01c44205ac9cf018b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:1f:b8:a2:a0:c1:9f:da:0f:f0:72:11:89:
13:9e:91:47:85:07:2d:87:ff:59:24:37:64:79:a1:
43:a8:aa:0b:d4:79:41:4b:ff:a9:1d:25:a0:0f:ac:
2f:ed:11:30:15:82:1e:aa:c3:01:93:fc:44:aa:72:
93:a6:93:0c:ec:22:c2:6c:a1:d2:82:6e:e9:95:ec:
50:ee:96:cc:18:d6:3a:ba:06:5d:84:a0:61:88:a1:
3f:d1:1a:e7:4c:2c:90:c0:37:e3:cf:a4:c7:a4:94:
28:2f:39:ed:d4:2d:40:4e:88:56:62:d2:35:0d:73:
21:40:3d:12:a6:09:13:e4:69:ae:42:6f:4b:f6:76:
88:30:b7:3b:0e:f0:06:27:0c:08:11:01:06:51:24:
83:12:0a:30:0c:32:16:9f:c6:6f:19:af:f5:95:27:
59:7a:df:97:1b:cf:00:44:bd:9d:79:28:bd:8f:b5:
de:2c:93:cf:d3:ab:81:67:d2:5c:4e:ae:bd:f8:de:
2e:e6:fb:29:5b:3e:e1:59:7c:d3:b1:ea:c8:b0:24:
1f:b3:52:7e:d0:b9:9f:ca:50:79:3c:4d:d3:67:2c:
e8:d3:a7:10:67:98:7c:d8:c0:89:d2:c3:ce:97:25:
0e:7c:f2:96:e1:5a:68:ae:69:0a:2d:fe:9d:0f:a0:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:C1:64:4E:97:A2:B0:33:44:4E:01:C4:42:05:AC:9C:F0:18:B8
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/VKvBZE6XorAzRE4BxEIFrJzwGLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:14:df:33:48:0a:fc:83:c4:0f:fa:5f:3a:42:e2:e2:63:67:
e0:78:3d:7f:e1:9a:d2:de:8c:99:bb:5c:93:5e:b1:e7:50:62:
53:da:0b:1b:09:cb:dc:7a:59:5f:7a:2e:4d:3a:61:7f:02:12:
9e:19:41:4a:05:24:25:9e:3a:51:91:43:91:8e:2e:37:5a:4d:
89:ce:1f:b4:b7:f6:51:da:8a:b6:d9:ff:ca:ed:9c:54:26:72:
3d:be:c5:65:49:9a:93:81:73:93:23:4a:41:c7:c3:39:67:a7:
0b:df:41:54:1f:9c:1e:46:9a:c5:96:7f:86:1a:c2:9a:34:ca:
6d:4b:e6:e9:13:58:f0:4f:df:db:bd:b8:46:b1:c2:58:9d:6e:
f6:5b:10:cd:44:96:90:52:c3:ad:ef:df:c7:cc:bf:bd:1f:e1:
16:81:e7:7d:61:60:03:43:94:2d:4b:12:2f:e4:74:af:80:f7:
6d:e2:9e:98:22:97:2c:10:0a:9f:bd:10:c5:4b:64:d0:f2:b3:
01:a4:81:28:39:72:a0:78:21:d0:27:93:b3:9a:78:9b:03:44:
0e:f5:4a:8c:3f:1b:ec:59:3b:98:95:bc:af:28:df:ff:de:ff:
16:3b:ed:fe:75:23:5d:c3:e6:68:0e:b3:cb:b3:31:5b:ec:29:
d2:78:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org