Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/jqNvvXaK_99t8zqHfS3bn24yww4.roa
File: jqNvvXaK_99t8zqHfS3bn24yww4.roa (raw, json)
Hash identifier: lWv/3XfcTnAT4kooUMPZDn+5eo0GlGlPo/n05knCV0g=
Subject key identifier: 8E:A3:6F:BD:76:8A:FF:DF:6D:F3:3A:87:7D:2D:DB:9F:6E:32:C3:0E
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 0185730CB3062DDDAB8AB2ED7BB910504E82
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/jqNvvXaK_99t8zqHfS3bn24yww4.roa
Signing time: Mon 02 Jan 2023 15:14:50 +0000
ROA not before: Mon 02 Jan 2023 15:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.201.122.0/23 maxlen: 23
193.150.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:b3:06:2d:dd:ab:8a:b2:ed:7b:b9:10:50:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Jan 2 15:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea36fbd768affdf6df33a877d2ddb9f6e32c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:8a:a8:e3:a1:57:42:33:59:dd:f4:ca:ca:
16:0d:35:f9:74:c2:1d:02:57:56:6b:38:d2:04:d6:
8f:b4:64:6c:92:ae:c8:47:1f:7e:3b:1c:a5:bc:54:
4e:42:52:bf:78:08:d7:98:a7:79:32:21:fd:ba:89:
f3:dc:b8:9d:64:af:d0:90:47:56:76:7e:22:1f:81:
63:5c:7b:69:fa:8c:7c:b8:b8:91:2c:37:86:0c:82:
21:44:b5:a1:4a:a8:d6:bf:32:2f:6f:98:bd:a0:0f:
74:dc:83:a6:ce:e7:b7:79:06:ea:55:0b:36:4b:49:
5e:a8:21:1d:90:ee:4d:40:65:f1:c0:11:f6:51:b6:
f8:c7:e9:9d:16:a0:cc:ac:a2:58:c2:69:36:02:f3:
6e:4d:24:d2:8e:79:5b:b6:7d:eb:a3:47:02:29:9b:
71:62:df:5f:71:03:37:32:b7:20:8b:a3:61:16:b5:
11:8b:69:b0:6e:74:40:ed:87:f1:65:8f:cb:fe:4e:
c6:2b:f5:b6:2c:90:61:df:53:b1:cb:da:df:d6:66:
55:6c:4a:99:48:64:e8:79:29:26:b4:a7:26:51:1f:
02:42:0e:20:73:e6:23:6d:30:83:40:1a:21:ee:85:
0d:28:1a:c3:23:ea:d2:88:51:53:f0:1f:41:c7:d9:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:6F:BD:76:8A:FF:DF:6D:F3:3A:87:7D:2D:DB:9F:6E:32:C3:0E
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/jqNvvXaK_99t8zqHfS3bn24yww4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.48.0/24
193.201.122.0/23
Signature Algorithm: sha256WithRSAEncryption
44:58:c3:b6:f6:96:1a:25:1c:37:99:f1:ba:8e:b1:a9:8f:cf:
a6:33:8d:0a:58:36:27:91:3d:72:38:38:02:c7:e5:c1:9f:02:
a3:c3:aa:27:03:89:d3:b7:64:91:90:4d:67:ff:b6:0f:72:9c:
7e:fd:bb:e5:8a:f7:a2:1b:b3:f3:a7:9d:f9:bb:69:20:a1:e3:
83:af:9e:f2:d0:c7:f1:89:99:88:24:52:25:28:e5:19:dc:96:
d6:d6:cf:b6:16:25:df:b3:d1:fd:75:15:53:b4:4d:fc:fe:b3:
04:53:d8:ad:29:15:ad:f1:6b:09:37:f9:94:c7:49:f4:f9:d3:
8d:37:28:66:0b:58:25:c7:84:35:e2:19:ff:bd:a1:44:55:44:
91:39:47:8b:40:3e:56:69:88:b5:b4:f8:f7:1e:44:3c:1f:50:
9f:6f:99:cd:e1:99:b1:0e:b7:82:e7:74:92:1e:41:90:08:21:
42:2a:32:8c:b4:54:30:82:33:b0:7d:10:b9:ea:b7:7b:4a:67:
bc:b4:ea:0c:61:7e:29:b6:9f:93:c7:a8:b1:25:8a:5c:34:99:
12:22:c0:7a:11:2f:30:32:2c:07:42:ad:7a:72:5f:8c:5f:4b:
6b:65:a9:cb:f4:a8:ab:0f:1c:6a:c4:5d:aa:d4:ef:db:b0:25:
7c:46:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org