Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/3Ij0dzj2lY-kk9JAvQn7SVtiwao.roa
File: 3Ij0dzj2lY-kk9JAvQn7SVtiwao.roa (raw, json)
Hash identifier: vzwe9Rzkbby8LxpZcZnuprUzsq9mFVliUMfE4x7jzIU=
Subject key identifier: DC:88:F4:77:38:F6:95:8F:A4:93:D2:40:BD:09:FB:49:5B:62:C1:AA
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01856B6EA6E60FD9B2763680597C91EEC3EA
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/3Ij0dzj2lY-kk9JAvQn7SVtiwao.roa
Signing time: Sun 01 Jan 2023 03:44:51 +0000
ROA not before: Sun 01 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205330
IP address blocks: 193.239.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a6:e6:0f:d9:b2:76:36:80:59:7c:91:ee:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jan 1 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc88f47738f6958fa493d240bd09fb495b62c1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:b6:fc:28:b1:bb:a1:ee:ef:0e:5a:cf:a9:
4c:af:02:06:90:81:4c:20:4c:92:93:66:32:7b:54:
5f:4c:c1:e1:9c:6d:95:43:6d:0e:fb:55:52:10:f2:
2b:07:92:05:9c:f4:5c:5f:4a:9d:ee:64:7c:d4:2c:
b3:a2:19:73:e5:11:3d:ec:a8:a1:a9:05:46:83:a9:
ec:97:43:f1:82:04:ba:f2:2e:33:88:93:7a:da:ea:
77:88:e8:0c:2a:9d:b3:f0:3f:cc:84:13:37:fe:fd:
bc:15:36:1c:f4:75:c1:b7:7f:a0:55:18:c0:46:aa:
8d:3a:e7:51:12:20:d5:16:65:9a:eb:9d:5e:0e:e8:
7d:a3:f9:52:3c:54:1a:0b:4e:34:f0:a4:7e:c3:24:
c9:ec:03:d8:2a:34:92:d9:e0:39:2e:9b:7b:c9:d4:
8c:e7:6a:33:b8:17:e2:f2:7f:8f:cd:f2:96:27:0b:
0a:d3:63:1c:35:2b:31:22:b6:fc:44:4a:b8:e1:4e:
07:61:83:25:22:23:4e:28:fb:2c:83:21:7a:73:fe:
ae:e1:e2:be:29:9c:d4:eb:05:e8:06:7c:03:9c:68:
11:75:d4:b6:b8:5d:30:0f:80:d5:95:24:69:ab:80:
55:db:86:ec:31:84:17:3d:3c:57:18:e9:c4:9b:e4:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:F4:77:38:F6:95:8F:A4:93:D2:40:BD:09:FB:49:5B:62:C1:AA
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/3Ij0dzj2lY-kk9JAvQn7SVtiwao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.203.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2d:24:03:bf:ef:92:89:94:94:7e:2b:bc:7a:27:08:6b:d8:
e8:6a:00:e4:06:70:08:4f:76:94:d4:36:eb:ba:5e:0b:66:37:
16:c3:2a:56:54:88:75:b3:dc:45:2c:40:fa:a1:72:60:23:4d:
e1:55:30:f2:f4:fb:24:06:f3:d7:24:26:df:8e:a3:41:a7:2c:
70:e4:79:85:d6:10:a2:8a:fe:8d:3d:97:46:6e:f8:8d:a6:03:
94:9a:04:72:2d:5d:1b:01:ad:a8:17:1e:25:14:34:43:61:cd:
fe:a1:e1:51:50:a1:78:4d:0c:f4:16:6a:7d:60:59:8a:26:d4:
15:e1:ad:ce:dc:c8:0a:23:d5:fd:2e:ac:56:2e:28:aa:f5:8f:
13:cb:ea:ed:3a:d4:14:0c:53:ea:91:c2:d8:54:58:fe:7c:c2:
d5:23:ec:c4:9b:0d:ac:0c:24:81:d6:28:11:02:78:10:27:12:
8b:8a:74:cf:a8:a1:6f:61:75:a6:c2:d4:bd:e6:37:92:6f:92:
26:fc:b2:c1:51:ff:56:10:17:43:35:6f:71:f0:83:a8:61:a4:
58:33:a8:69:e3:55:f6:ff:41:f0:ae:0c:70:81:33:b2:71:69:
07:c0:08:ea:9a:df:06:3f:ab:d4:81:f5:c5:bf:00:e2:b3:58:
17:23:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:22 2024 by rpki-client on console-fra.rpki-client.org