Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/lOigXv7uIFxstiQ3EY3xdDl4pHw.roa
File: lOigXv7uIFxstiQ3EY3xdDl4pHw.roa (raw, json)
Hash identifier: ijifkpgfAJpUqACvwQON5mWVGWnDEIyhAsO7lwA3V0I=
Subject key identifier: 94:E8:A0:5E:FE:EE:20:5C:6C:B6:24:37:11:8D:F1:74:39:78:A4:7C
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 01856F9DD88E94EA7BAD59107EE75D8F5AF7
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/lOigXv7uIFxstiQ3EY3xdDl4pHw.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.8.58.0/23 maxlen: 23
193.8.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d8:8e:94:ea:7b:ad:59:10:7e:e7:5d:8f:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e8a05efeee205c6cb62437118df1743978a47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ae:04:9a:e3:7b:9b:42:ac:cb:9c:52:24:c5:
43:c4:a3:b9:10:88:86:36:d3:e4:8e:b8:33:c6:66:
70:07:ad:aa:be:ca:22:16:45:2e:02:3c:37:e0:3d:
69:35:ec:b1:9d:1c:a2:8a:20:b1:78:08:8a:4f:3a:
ad:3d:38:ef:a9:36:ec:ec:4b:24:d3:79:32:77:9a:
c0:8c:dd:4f:55:3c:67:f2:2e:47:06:dd:09:c6:d3:
2c:8e:8b:9f:66:ca:48:1d:a4:9f:93:95:b9:4c:2c:
dd:fa:d3:93:3e:12:a9:6a:d8:cf:87:ea:a2:59:73:
2e:34:84:26:d1:60:16:cd:4c:cb:c2:7c:d2:41:b2:
23:5a:e4:e4:50:36:0f:ae:fd:6f:dd:48:95:81:68:
bc:47:9c:ed:9b:f5:de:a4:35:1d:99:7f:b5:46:bf:
4c:87:96:06:6c:55:ca:7c:51:a1:90:1c:82:cd:b6:
1f:3d:b3:70:ae:de:e3:ba:ea:2b:30:2e:e6:d9:d9:
23:ff:68:50:1a:f2:77:9e:27:44:a4:14:75:a0:14:
66:0f:5a:1e:a9:1a:57:92:68:7b:d6:ea:c0:bd:32:
38:6e:98:5f:48:40:80:f3:ff:67:5a:90:3c:c7:01:
71:32:b9:89:66:13:bb:af:e5:4c:08:ba:f3:fa:10:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:A0:5E:FE:EE:20:5C:6C:B6:24:37:11:8D:F1:74:39:78:A4:7C
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/lOigXv7uIFxstiQ3EY3xdDl4pHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.58.0-193.8.60.255
Signature Algorithm: sha256WithRSAEncryption
3e:5d:7c:71:c1:0c:01:6a:41:b6:e3:37:23:c0:bb:0a:b2:88:
7c:12:fb:b8:ec:1b:50:da:12:e7:38:5d:46:60:d8:fc:04:22:
dd:9f:2a:bb:93:b6:4a:cc:37:26:01:c3:96:78:11:9d:0d:7e:
ee:3d:88:a8:6e:d8:b4:42:50:fc:bb:a5:56:60:05:77:20:45:
ae:5b:1a:51:23:15:6c:80:fe:5e:31:68:0b:23:55:5a:81:bf:
7f:c6:4a:01:96:40:1f:85:47:70:79:15:61:c7:8a:1b:cc:36:
99:84:14:66:00:c9:50:e5:2f:96:2d:7d:35:52:ec:ad:a7:04:
38:11:0f:07:66:94:57:a3:d4:e5:40:95:a1:9e:0c:ee:22:e0:
d8:e9:72:64:59:0d:68:2b:66:1a:78:5e:dc:62:36:10:c5:27:
a2:02:d8:e3:f7:42:70:f9:e2:23:74:3c:bd:0a:7c:0e:34:bb:
af:55:f0:be:7f:5b:af:a9:a3:16:49:d1:aa:b5:4d:c4:3e:ef:
bb:cf:2d:2d:6e:b8:fd:86:86:ad:7d:25:e1:d5:01:38:03:c1:
2e:f4:dc:01:4b:67:4f:52:bd:ce:f5:c6:01:bb:49:a0:e1:7e:
1f:6c:62:5c:00:9b:33:02:db:93:65:36:ae:d0:6c:73:21:e5:
1a:2f:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:58 2024 by rpki-client on console-fra.rpki-client.org