Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/WS0vgbj7lKpgCZDuPaBNWtCzN48.roa
File: WS0vgbj7lKpgCZDuPaBNWtCzN48.roa (raw, json)
Hash identifier: BPjXQxk2EEyv8L9Ho/USG8xUYPFwGoH2BLC+Pps+gg8=
Subject key identifier: 59:2D:2F:81:B8:FB:94:AA:60:09:90:EE:3D:A0:4D:5A:D0:B3:37:8F
Certificate issuer: /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial: 018F9F41DC2063F899A559FC88498EDFD97A
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/WS0vgbj7lKpgCZDuPaBNWtCzN48.roa
Signing time: Wed 22 May 2024 07:44:04 +0000
ROA not before: Wed 22 May 2024 07:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 193.163.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 17:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:41:dc:20:63:f8:99:a5:59:fc:88:49:8e:df:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
Validity
Not Before: May 22 07:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592d2f81b8fb94aa600990ee3da04d5ad0b3378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:d3:10:ee:a7:7f:50:a8:b8:96:46:e0:cc:
d4:ea:a3:00:d4:ee:b5:15:f4:dc:9b:de:cd:72:73:
68:1d:8a:8e:01:6f:9e:08:23:10:71:0e:e8:b1:32:
4d:6e:d4:29:e1:89:c1:0b:a5:02:26:5a:a5:61:70:
6f:e6:85:53:3b:16:4f:a6:13:aa:a3:e8:4d:76:36:
0f:54:f6:98:5c:db:24:19:71:95:96:82:77:c3:56:
a1:45:a7:12:23:68:21:e5:d2:93:1f:da:33:08:f3:
17:9d:8c:65:5a:3f:95:28:e4:2e:ea:37:52:5d:35:
ea:e8:10:05:e9:9a:08:8e:f1:63:16:1f:da:21:39:
40:df:27:33:44:49:5f:8b:80:77:e2:35:12:a2:9a:
6a:bd:0f:6f:d3:25:16:61:1d:ed:39:a4:a0:4a:ad:
5c:a2:cc:e2:d5:a7:d3:63:9e:6a:8f:3d:07:0e:6e:
5c:09:cb:fa:8b:52:36:ec:e8:43:84:4b:42:6b:bb:
8e:22:26:0f:96:a1:86:fb:59:ca:30:c4:91:7f:d7:
9e:60:bb:59:97:2a:1f:a1:80:1c:8a:6a:40:16:33:
9f:d3:12:8a:3d:39:73:4c:97:57:03:33:18:80:3f:
0d:cf:b3:17:7b:74:f6:68:bd:39:1c:4f:79:4d:41:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:2F:81:B8:FB:94:AA:60:09:90:EE:3D:A0:4D:5A:D0:B3:37:8F
X509v3 Authority Key Identifier:
keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/WS0vgbj7lKpgCZDuPaBNWtCzN48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.170.0/24
Signature Algorithm: sha256WithRSAEncryption
36:af:69:d8:a9:ea:d6:92:14:fd:ef:a5:a1:32:ce:5f:5f:a7:
bb:4a:c0:2e:b6:cc:ef:2e:76:90:5e:e7:bb:1a:bf:d8:c4:46:
be:06:6d:e0:46:1a:37:d2:51:31:1a:47:64:80:dc:e4:fd:f1:
11:6e:48:86:70:d2:bd:f5:26:cd:48:dd:f7:52:14:d3:4e:c5:
e4:cc:8c:69:6e:64:60:ea:35:5c:f6:ba:08:23:0c:49:8f:7c:
c7:e2:c0:3e:86:bd:39:2a:0e:05:27:c2:6e:12:29:ab:22:60:
fb:f4:6a:6e:d3:49:b7:bb:1d:12:92:83:1c:87:98:15:49:42:
20:2c:23:f3:8d:62:1a:e3:f0:66:49:d9:ef:4d:c0:de:5f:2a:
6c:6f:a8:09:33:10:6c:cd:9e:4f:e9:7f:26:69:f1:b7:b9:4f:
7e:86:8e:bf:40:ec:cd:95:a5:30:ab:5e:a0:90:94:bf:12:34:
33:ab:ce:41:3e:65:84:2b:e2:15:e8:48:d2:b2:64:db:26:02:
24:74:56:32:f8:5c:46:e6:43:c9:71:21:c0:d5:90:50:74:56:
79:8e:08:f9:61:40:e2:80:0f:3d:db:15:64:f0:5e:ad:06:cc:
7c:ca:da:34:d6:56:6a:49:7e:d5:ed:2a:cc:65:d6:96:c0:2f:
43:57:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 18:56:28 2024 by rpki-client on console-fra.rpki-client.org