Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/9ZezclMaAVdOA3udSeTyf-It6Vw.roa
File: 9ZezclMaAVdOA3udSeTyf-It6Vw.roa (raw, json)
Hash identifier: q/TQb07xW4wGAShufF3ZhsaAYqzv7TPN1SilSDSdH/E=
Subject key identifier: F5:97:B3:72:53:1A:01:57:4E:03:7B:9D:49:E4:F2:7F:E2:2D:E9:5C
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01856F4B941DF41EFE266529B8738B13FCA6
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/9ZezclMaAVdOA3udSeTyf-It6Vw.roa
Signing time: Sun 01 Jan 2023 21:45:02 +0000
ROA not before: Sun 01 Jan 2023 21:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.53.174.0/24 maxlen: 24
193.53.185.0/24 maxlen: 24
193.53.186.0/24 maxlen: 24
193.53.190.0/24 maxlen: 24
193.53.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:94:1d:f4:1e:fe:26:65:29:b8:73:8b:13:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jan 1 21:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f597b372531a01574e037b9d49e4f27fe22de95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:8e:b2:04:7c:81:d9:2e:39:60:a7:12:aa:
65:c5:ea:0c:f0:b0:a9:87:33:8a:b7:85:51:95:c2:
b1:06:d1:94:85:6f:a6:7f:94:ca:d5:6e:54:2f:a9:
a2:a2:95:35:4e:50:d6:0c:7e:05:f5:9f:e7:af:b2:
8b:29:63:5d:4c:61:e4:e6:3a:9b:11:97:74:93:be:
e2:6c:81:a8:6e:e9:6e:d1:1d:d9:67:db:86:24:26:
af:09:70:89:da:26:1a:03:28:72:08:48:7d:ab:0e:
aa:c0:dd:bf:c2:3f:20:c7:9f:9c:88:2b:d0:16:e4:
8e:3f:3f:2a:a5:08:4b:df:c7:2d:27:52:83:d6:78:
ef:83:13:26:51:1d:a9:3a:71:e0:18:d0:9a:5f:33:
79:c6:1b:eb:ca:78:3a:5a:0b:f1:5a:96:5a:01:1a:
06:79:2c:b9:3a:1e:a6:bf:24:97:92:25:42:d5:82:
ef:ca:42:09:7c:71:ed:a1:92:ef:f9:0a:cb:23:f6:
23:83:22:a5:95:b9:96:06:dd:af:bf:6a:c0:af:2e:
7b:9b:71:6d:8b:3d:2b:44:57:ae:2d:6e:50:57:d7:
fd:bb:b0:56:d2:89:d6:2d:85:d5:cc:9c:8c:f6:7d:
4c:3f:15:98:9e:ac:55:ca:e5:7a:0a:5d:7f:87:e8:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:97:B3:72:53:1A:01:57:4E:03:7B:9D:49:E4:F2:7F:E2:2D:E9:5C
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/9ZezclMaAVdOA3udSeTyf-It6Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.174.0/24
193.53.185.0-193.53.186.255
193.53.188.0/24
193.53.190.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8f:e1:1f:fd:4b:99:2b:1e:86:b2:37:1f:f8:2c:f8:f1:ca:
6e:6a:35:82:c5:da:1a:73:7c:9e:d0:da:fb:59:65:48:a9:a4:
a7:af:a6:cc:8e:15:f2:3e:a4:e7:59:2d:f9:02:a5:00:f6:86:
ea:c3:87:51:ed:7e:08:bf:e7:8d:16:df:2c:dc:53:8a:4c:1c:
e8:7c:8c:07:10:dd:b8:22:6f:7c:3a:da:71:97:ae:2e:43:90:
a3:0f:53:3e:30:36:32:13:b0:58:70:07:a8:ec:2c:fd:1f:1b:
53:60:af:04:e4:3b:51:12:d9:ef:f1:77:2b:cc:69:ef:7d:f0:
60:2d:ef:ff:0e:b5:a1:a6:c4:55:fb:e8:87:32:41:12:d5:04:
70:ad:3c:c9:37:57:11:9a:c0:5f:a7:f6:77:59:ef:35:6f:24:
f1:df:7d:b5:d0:8f:96:74:36:f3:dc:8e:36:f4:c0:b6:ed:3f:
b9:47:d8:6e:94:ed:17:32:6b:7e:52:cc:15:2c:88:b6:47:87:
79:c6:21:3f:66:57:01:ba:52:d8:2f:d0:f8:07:04:73:63:0f:
91:c6:97:80:e2:1d:f6:70:2c:f9:b8:49:4a:cf:cb:e8:34:a8:
82:09:55:a0:6a:ae:fc:63:5e:4b:38:52:6e:36:86:07:60:bc:
f0:5e:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:09 2024 by rpki-client on console-ams.rpki-client.org