Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/S0lkDozPx4BjXVNo4s1bLQGgJqY.roa
File: S0lkDozPx4BjXVNo4s1bLQGgJqY.roa (raw, json)
Hash identifier: sAO1dbtt9KHdeaj3FcbARCPcYACk/sAAg0RC7ixx3A0=
Subject key identifier: 4B:49:64:0E:8C:CF:C7:80:63:5D:53:68:E2:CD:5B:2D:01:A0:26:A6
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 01856FD52AFA05B41E20CBE7CEBEC23B7D45
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/S0lkDozPx4BjXVNo4s1bLQGgJqY.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50628
IP address blocks: 193.202.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2a:fa:05:b4:1e:20:cb:e7:ce:be:c2:3b:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b49640e8ccfc780635d5368e2cd5b2d01a026a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:0c:62:c6:fe:0e:3c:9b:bc:58:51:89:7b:
4c:36:95:2b:7e:18:52:b9:44:f7:be:e0:a2:36:c8:
d0:a5:fa:cd:df:d3:47:e8:e4:56:b8:31:7c:31:9a:
89:e6:9c:f7:ef:15:48:d6:a7:4b:83:a7:a6:f8:99:
c3:e6:5b:8d:ff:43:58:c0:07:8b:b9:3e:3f:74:23:
42:ca:ba:62:4a:3e:c8:92:a6:a0:66:a7:41:c6:c8:
10:28:e1:5a:86:db:c8:ca:88:53:f5:1e:70:39:1e:
48:88:9b:f5:20:3d:2d:7c:d2:f1:73:94:12:60:a8:
73:ec:af:9f:bf:66:2e:d0:e8:19:1b:34:65:b9:66:
b9:bd:f6:bb:3d:3a:32:d0:09:d7:25:48:0e:63:e4:
b4:46:b8:4b:c5:66:61:89:59:6a:26:92:2c:f0:26:
0b:a8:d8:b7:2d:52:83:60:20:a0:9f:71:a5:4d:5e:
5b:36:3a:57:c9:7a:68:47:d1:3d:d6:2c:eb:d6:c9:
f9:7c:9f:a4:4d:15:18:bb:a6:a9:78:db:4f:3d:f8:
e1:d6:32:75:47:11:8e:79:9a:c8:65:07:e1:d7:69:
27:39:f6:53:a3:65:25:cc:58:02:c6:14:fb:a8:a9:
a8:b7:e2:c4:26:fe:e2:e2:87:93:0c:aa:2d:7c:5f:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:64:0E:8C:CF:C7:80:63:5D:53:68:E2:CD:5B:2D:01:A0:26:A6
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/S0lkDozPx4BjXVNo4s1bLQGgJqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2b:4a:28:ba:58:16:d0:2b:24:6c:e9:e9:85:34:83:a3:24:
88:a8:77:9f:35:8e:35:d6:e3:00:04:d5:fa:08:57:ec:83:ea:
01:17:98:1d:5c:bf:81:da:24:1c:67:51:da:c3:51:04:38:f7:
23:fd:3c:37:40:e0:9f:a7:db:38:27:40:e5:f0:41:40:87:a4:
ee:f1:28:80:24:fd:95:3a:c6:7c:a4:06:51:e9:0b:b4:dc:18:
a4:2f:2d:c0:35:df:8f:e7:25:b2:9a:71:b0:81:b3:1d:48:20:
bd:41:30:a5:74:ea:09:7b:15:6a:3d:22:c0:e5:07:91:ba:12:
19:87:28:de:d3:ac:01:d4:ce:4b:b9:52:bc:4c:87:30:56:1e:
ac:15:14:3a:52:37:e8:49:a9:8c:91:a8:5b:c5:cc:5f:60:6d:
16:83:6c:6c:93:fd:e2:00:8c:7f:2b:39:ff:ac:c9:3f:d0:d9:
df:a9:de:cd:d9:86:09:94:41:c9:f7:02:a7:b3:a2:23:2c:8c:
ab:dd:c6:2d:5b:64:7a:d5:76:10:cc:d2:5b:1a:23:e9:15:37:
56:57:39:1f:2a:5f:9d:6f:06:39:d4:3e:c7:81:85:6d:33:3c:
fb:c8:4e:da:28:49:b0:0c:20:cf:64:52:7c:79:80:81:8c:ba:
7f:45:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:11 2024 by rpki-client on console-ams.rpki-client.org