Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/myPt6d9CRDBC3MXjSrRZBrPBenE.roa
File: myPt6d9CRDBC3MXjSrRZBrPBenE.roa (raw, json)
Hash identifier: QGR/PyEhSGtFHerzHMonfeZu/8Ll+FWetXw1tV7uupg=
Subject key identifier: 9B:23:ED:E9:DF:42:44:30:42:DC:C5:E3:4A:B4:59:06:B3:C1:7A:71
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 01896938543C01EC2070F1FC7AB1D8768368
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/myPt6d9CRDBC3MXjSrRZBrPBenE.roa
Signing time: Tue 18 Jul 2023 13:37:26 +0000
ROA not before: Tue 18 Jul 2023 13:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 193.169.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:38:54:3c:01:ec:20:70:f1:fc:7a:b1:d8:76:83:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jul 18 13:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b23ede9df42443042dcc5e34ab45906b3c17a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:21:9c:1c:88:a7:f5:8c:14:24:0c:44:e7:
ff:37:22:8e:39:8c:f8:fa:f6:69:5b:33:cb:f5:b8:
2f:ec:6f:26:bc:15:98:5c:35:76:37:13:76:6d:36:
66:6c:02:66:a7:55:f7:83:b5:94:25:68:3f:59:e9:
0f:5e:43:80:e0:e8:4e:d2:b3:f3:30:7f:e1:a3:50:
4a:88:6e:a0:11:74:84:41:5c:db:39:15:d2:93:b0:
1c:06:6e:0f:b8:f0:47:05:07:c8:23:39:81:f3:ea:
4f:09:3b:ba:8c:9c:cf:fe:94:a6:bc:03:7f:87:37:
63:4e:ea:e0:fb:ac:f5:02:8e:19:e9:0a:29:25:cf:
f1:cd:4a:b6:87:02:e4:db:fa:30:92:e5:d2:0b:4d:
ba:d1:9e:74:03:32:56:ef:af:9f:69:39:f9:19:e4:
f7:aa:2c:74:09:95:14:41:d3:b6:ac:35:3c:52:e2:
76:28:ce:fc:c8:33:1a:e2:ee:91:dc:62:4c:53:0e:
7b:fe:69:37:ef:ac:9a:ad:ab:b8:f1:e4:74:23:29:
cf:de:0f:23:2c:c2:ca:91:12:fe:b6:18:8f:15:3d:
8a:2c:36:9d:00:cf:9d:db:62:72:02:84:be:75:88:
16:8c:13:be:4e:5e:74:7f:ea:5c:da:ce:a2:0b:3e:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:ED:E9:DF:42:44:30:42:DC:C5:E3:4A:B4:59:06:B3:C1:7A:71
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/myPt6d9CRDBC3MXjSrRZBrPBenE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0f:93:4e:0f:09:4b:3e:7d:7d:99:43:02:ea:a1:db:2f:69:
e8:56:dd:bf:fd:65:d8:f2:3d:23:7d:fa:0d:36:42:cd:c6:6f:
65:7c:9d:6e:a7:dd:93:31:a6:bd:66:af:b6:d9:fe:5f:a0:9d:
36:37:e1:93:e3:77:76:67:24:4e:b9:f6:89:4d:7b:83:c9:98:
9e:85:0b:1b:80:0d:30:5a:c1:aa:01:a2:6a:db:93:f7:68:7a:
fb:fa:df:7a:da:79:9f:f1:9d:70:0e:9e:a9:15:31:4f:6e:63:
93:6e:6e:3d:2b:5c:26:7d:32:3a:21:a4:e4:d1:77:36:ff:1e:
ca:6d:aa:a6:7e:b5:b2:c8:0e:fb:26:9f:b8:d6:af:93:7f:94:
38:27:88:c0:bd:3c:c4:5f:75:1c:be:95:79:d2:1b:64:a4:2c:
b5:dd:0e:5a:c8:dd:41:5b:57:cb:f2:38:ed:a5:29:32:4e:35:
53:e2:39:65:82:9e:f5:4f:4d:ac:75:d7:a4:62:ed:fb:65:16:
22:ef:90:39:63:56:f0:54:2b:24:c0:2c:eb:63:2f:a4:c5:92:
77:87:28:d6:42:13:6f:1d:77:28:80:23:f6:21:8b:9a:95:20:
5a:f7:c5:f2:20:12:9e:74:95:eb:5a:a9:89:04:48:c0:a5:b4:
3a:e0:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:11 2024 by rpki-client on console-ams.rpki-client.org