Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/AuSVXWuwT_LCmeNPx7IJ3Nw5RDU.roa
File: AuSVXWuwT_LCmeNPx7IJ3Nw5RDU.roa (raw, json)
Hash identifier: et0BCIXm+CJi1BXUii2S6o8orT9lUDKYjRv+ZYMij4I=
Subject key identifier: 02:E4:95:5D:6B:B0:4F:F2:C2:99:E3:4F:C7:B2:09:DC:DC:39:44:35
Certificate issuer: /CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Certificate serial: 018709D3796B61D5395DE001514FA0ADA88B
Authority key identifier: 4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/AuSVXWuwT_LCmeNPx7IJ3Nw5RDU.roa
Signing time: Wed 22 Mar 2023 14:57:46 +0000
ROA not before: Wed 22 Mar 2023 14:57:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43800
IP address blocks: 193.34.136.0/23 maxlen: 23
185.54.4.0/23 maxlen: 23
185.54.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:d3:79:6b:61:d5:39:5d:e0:01:51:4f:a0:ad:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Validity
Not Before: Mar 22 14:57:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e4955d6bb04ff2c299e34fc7b209dcdc394435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:63:a2:94:52:17:a8:66:b5:d9:8f:76:49:
8d:e0:28:f8:ae:c9:2c:55:d2:15:bb:5e:45:68:14:
08:27:73:57:69:8e:98:28:e6:e9:bf:67:c7:ae:79:
af:1f:99:af:36:e7:16:69:1b:b9:9c:77:4a:d1:af:
51:8e:d6:6b:76:a6:a2:60:2b:58:e2:39:ae:f9:64:
30:5c:29:f4:3b:aa:76:90:24:45:04:e1:ab:8f:e8:
04:c0:67:db:d1:56:e2:af:ca:cd:53:35:9f:93:9f:
de:95:e4:ed:f3:9d:00:21:6f:e5:e5:f1:2e:71:98:
04:2f:45:86:2f:08:90:a6:02:1e:fa:e0:ee:a3:a0:
47:5e:78:39:71:d9:85:0c:98:c2:e6:1c:d8:61:4b:
21:d6:e0:95:0c:36:1e:f2:3e:2c:e2:03:25:bb:7e:
8e:cf:f7:87:fd:5c:a4:e6:1f:3c:55:40:50:be:e6:
fb:45:b9:2b:c9:30:13:05:d1:93:55:d6:ad:ca:fd:
55:f0:79:14:87:ba:c7:c8:55:4a:9b:3f:11:8a:a1:
1f:0e:e7:58:61:c7:fd:d2:71:18:d6:84:a8:6a:e2:
56:9b:b1:53:ea:e0:74:eb:0b:c2:ab:98:04:aa:5f:
9e:65:f7:08:ec:01:45:50:a3:3a:5c:52:f3:eb:a3:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:95:5D:6B:B0:4F:F2:C2:99:E3:4F:C7:B2:09:DC:DC:39:44:35
X509v3 Authority Key Identifier:
keyid:4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/AuSVXWuwT_LCmeNPx7IJ3Nw5RDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.4.0-185.54.6.255
193.34.136.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e1:11:2c:a8:95:04:f4:63:77:bb:be:b9:be:d6:16:b0:c9:
a4:5b:70:c8:bf:51:bd:99:fc:2a:72:2c:34:91:ba:e2:a8:11:
ad:36:f5:bc:c2:ed:ab:fe:e7:36:43:75:9b:03:c8:26:28:dd:
e6:26:dd:d7:e1:9a:b4:c4:76:b2:e1:6d:cf:b1:b7:7d:7c:36:
56:88:93:e8:99:1d:7f:10:79:05:7b:33:93:06:02:89:82:56:
71:38:cf:91:95:0b:43:19:e6:5b:66:13:91:05:fa:14:72:bc:
f1:bf:35:b8:55:34:c1:c5:73:26:0c:72:90:19:b4:cb:61:77:
c6:96:48:9e:08:a8:69:55:00:5d:61:42:f3:de:6f:6b:d3:01:
46:6e:19:d7:26:40:ba:41:6a:8c:71:12:e1:76:76:77:5b:2a:
88:5c:5e:1d:23:65:42:9c:5d:e4:da:03:ee:f3:da:42:66:3a:
a0:c2:dd:75:79:40:67:5e:fb:f5:7a:9c:cf:87:6b:9e:35:83:
42:61:e9:77:1b:9c:82:6d:29:49:40:f7:da:6b:0e:ab:10:0c:
d0:75:b7:03:08:c3:2f:a0:a3:69:4b:ef:cc:03:55:89:36:cb:
3f:54:e3:65:5e:43:aa:71:28:99:d3:d0:c4:d2:76:45:d6:84:
c6:d7:ff:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:51 2024 by rpki-client on console-ams.rpki-client.org