Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/o_v97twFsjYzIAv0zX44oJy0ynU.roa
File: o_v97twFsjYzIAv0zX44oJy0ynU.roa (raw, json)
Hash identifier: j4DyC1X3dg9JnV0ZvJcAwTtHFJ18zDmu/MOs2ethDMA=
Subject key identifier: A3:FB:FD:EE:DC:05:B2:36:33:20:0B:F4:CD:7E:38:A0:9C:B4:CA:75
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 018B95D12E63ED4F62BAE99DFC5C074F0584
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/o_v97twFsjYzIAv0zX44oJy0ynU.roa
Signing time: Fri 03 Nov 2023 15:33:15 +0000
ROA not before: Fri 03 Nov 2023 15:33:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 193.56.38.0/24 maxlen: 24
193.56.43.0/24 maxlen: 24
2a00:6fc0:c010::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:d1:2e:63:ed:4f:62:ba:e9:9d:fc:5c:07:4f:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Nov 3 15:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3fbfdeedc05b23633200bf4cd7e38a09cb4ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:fe:94:36:ec:ad:6f:8a:48:64:eb:c3:8c:
6b:30:12:55:21:04:43:8d:c2:e0:70:23:e1:63:f6:
b0:f0:c7:4a:83:ea:c8:32:1c:41:9a:3d:27:40:39:
cc:87:03:85:aa:e5:03:83:b9:af:87:31:67:a3:5d:
a0:25:fc:fb:d4:b3:0c:d2:52:b1:de:6d:a2:1a:d1:
eb:77:22:57:05:80:d9:12:9f:21:d8:02:92:88:65:
a2:f4:e1:e7:4b:6d:1b:57:61:bb:02:1d:23:7a:8e:
df:3c:ae:15:59:fe:b1:87:1f:16:2a:12:33:48:3d:
72:36:49:02:a0:6d:2b:9e:f4:b9:e6:56:9b:a5:9c:
97:a0:af:28:a3:55:63:e7:c1:b2:b3:88:81:fd:d6:
0e:26:e9:63:68:75:a3:50:3d:a5:0e:fb:6a:63:d2:
18:9a:81:3f:1b:b4:46:b2:a6:b8:56:b2:e9:44:e7:
5b:82:46:a0:b5:34:8b:d0:4a:2a:e3:c6:d3:48:ec:
37:4c:1f:a7:ee:86:38:2b:b5:c8:cf:7b:74:c0:f5:
d5:68:c3:e6:58:cc:e0:61:39:a7:02:19:28:ff:3d:
3a:92:fe:e7:b4:d0:4a:f6:40:8e:4c:3b:f8:21:6b:
2d:50:4b:2f:13:21:57:aa:54:b1:54:76:9a:78:d2:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:FD:EE:DC:05:B2:36:33:20:0B:F4:CD:7E:38:A0:9C:B4:CA:75
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/o_v97twFsjYzIAv0zX44oJy0ynU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.38.0/24
193.56.43.0/24
IPv6:
2a00:6fc0:c010::/44
Signature Algorithm: sha256WithRSAEncryption
79:df:93:14:33:fe:05:5d:3b:08:18:ee:bd:11:20:77:10:dd:
41:d4:d5:29:8d:df:a6:9d:ea:51:08:c5:9f:ed:98:60:cd:4a:
a8:1a:15:9a:1b:60:16:df:53:a3:e6:d3:f4:10:1e:55:d5:45:
3e:5d:4b:a0:d2:0b:c8:40:9c:03:14:f7:cf:96:c3:e4:ab:02:
a5:c7:a3:15:0d:17:63:ad:50:71:fe:d4:5d:1b:e2:47:01:b9:
64:a3:a3:3f:f9:da:21:b0:13:81:23:e3:35:db:cb:9e:73:6a:
d7:b3:9a:24:44:48:2c:40:e6:67:30:d6:99:2f:cb:a5:38:63:
60:58:42:4a:b4:04:5e:53:49:74:87:a2:ef:49:de:6a:99:4e:
02:e7:52:c8:e4:0a:48:23:c0:ff:a3:6f:60:29:96:b8:e6:3f:
d7:35:52:3c:23:3d:27:3d:6f:9a:94:ca:ba:ce:59:b0:7d:aa:
ea:34:12:d0:d9:41:5d:00:77:69:5b:5f:44:89:c1:17:f0:a7:
51:a5:be:a2:40:6f:f8:45:a4:64:e4:59:b0:2b:9b:49:07:5f:
25:68:19:5c:0e:9b:c0:82:17:c5:15:a2:24:56:03:51:66:63:
1e:1a:d7:c2:44:ea:09:7d:79:ca:18:1c:68:21:a4:3e:df:98:
8e:34:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:30 2024 by rpki-client on console-ams.rpki-client.org