Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/4twQcxF7RCfhDJxNpaaSCe4W4kA.roa
File: 4twQcxF7RCfhDJxNpaaSCe4W4kA.roa (raw, json)
Hash identifier: 90fTHG5YxOcNOG03b66rWS3CYvhzFfBiJgUdN200M3w=
Subject key identifier: E2:DC:10:73:11:7B:44:27:E1:0C:9C:4D:A5:A6:92:09:EE:16:E2:40
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 01857014FF306A89C85FFD153EC8AC93A0FA
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/4twQcxF7RCfhDJxNpaaSCe4W4kA.roa
Signing time: Mon 02 Jan 2023 01:25:02 +0000
ROA not before: Mon 02 Jan 2023 01:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31564
IP address blocks: 195.178.112.0/23 maxlen: 23
193.17.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:ff:30:6a:89:c8:5f:fd:15:3e:c8:ac:93:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Jan 2 01:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2dc1073117b4427e10c9c4da5a69209ee16e240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:de:e9:b6:c1:9f:5b:aa:0e:bb:f6:27:e0:
7a:e3:ca:e2:c7:3f:5c:1a:1d:21:9f:6d:ce:16:62:
7a:4d:e1:c1:84:a1:74:7d:df:4f:f8:52:45:05:89:
41:d3:0b:93:2a:22:1e:e1:36:26:1d:5b:ed:1a:8b:
3c:1e:2b:63:6f:c2:53:3f:e4:c1:2c:d0:e5:d2:e8:
2d:44:eb:a4:75:5b:fe:d3:6f:67:79:e4:25:96:ef:
d9:a6:59:40:96:96:56:31:e4:fa:48:af:c8:5b:dc:
73:07:61:81:45:46:02:53:79:ed:9b:ce:4e:55:e7:
17:a0:49:da:66:4d:47:81:04:55:c0:66:1d:0b:f7:
47:cb:9d:23:48:8e:ed:a3:ea:28:b3:df:38:b7:8e:
4e:02:a1:a9:59:35:d9:c4:c7:e9:3a:73:52:a8:72:
46:5a:82:6d:c8:19:0a:34:f6:61:70:c7:41:71:d7:
6c:6a:0d:f2:03:44:40:a7:0f:27:a3:9b:29:17:79:
56:8a:95:80:66:6e:fb:9d:66:b5:87:b1:16:be:8f:
3e:0f:79:df:87:30:ec:77:bd:28:65:2e:8f:d3:a5:
69:6b:0b:b1:66:d4:8d:01:10:4f:d0:03:22:39:a2:
b3:6a:f6:ae:39:cf:0d:31:fe:a2:b4:cb:b8:ba:26:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:10:73:11:7B:44:27:E1:0C:9C:4D:A5:A6:92:09:EE:16:E2:40
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/4twQcxF7RCfhDJxNpaaSCe4W4kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.73.0/24
195.178.112.0/23
Signature Algorithm: sha256WithRSAEncryption
23:81:4c:cb:59:a4:a7:69:88:e5:53:13:ac:e8:33:66:59:e4:
2e:cd:28:48:3e:30:26:6f:ae:a3:bc:49:cf:03:0c:fe:c1:5a:
d4:80:a1:55:70:08:ec:06:88:e4:be:41:89:f0:a3:12:30:e7:
ed:a9:da:ff:13:23:64:3e:d7:8c:f7:34:cd:c0:3c:d4:ee:a7:
78:eb:7f:b2:99:e5:11:21:84:77:90:73:bb:ab:2c:3d:0c:2b:
a4:f5:3d:37:53:b0:f4:81:19:7a:b8:44:b6:ed:56:78:08:69:
66:36:ad:55:c2:38:aa:29:55:80:f0:a2:84:81:21:d9:e2:32:
68:8e:19:51:31:db:8a:f6:c7:80:53:c0:b2:43:7d:b2:1e:a5:
cc:97:6b:ad:96:b4:d0:3f:60:4a:7d:40:11:1d:d7:62:c8:b3:
0b:63:e9:c0:fe:70:bf:8c:fa:9f:b6:49:01:a1:75:75:2c:e1:
37:37:44:b7:c6:32:8d:20:a5:1a:80:72:15:39:f8:5a:45:5f:
3a:7a:f8:e7:24:11:74:b1:c4:2a:2f:d4:9b:52:4c:cc:10:40:
b4:bd:cb:57:e7:0e:43:fb:18:d1:d1:9e:4f:49:29:0f:0b:56:
d4:ac:dd:20:f6:83:ba:39:a2:a6:8f:a1:d5:34:ad:9e:f4:ca:
8d:7a:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:34 2024 by rpki-client on console-fra.rpki-client.org