Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/Cc-ayRMXkC-xa3tww6XNgC-qbkQ.roa
File: Cc-ayRMXkC-xa3tww6XNgC-qbkQ.roa (raw, json)
Hash identifier: 7/16exJyfTiEKUGemCsxitevCt3sl3IaDmVsILRXiOo=
Subject key identifier: 09:CF:9A:C9:13:17:90:2F:B1:6B:7B:70:C3:A5:CD:80:2F:AA:6E:44
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 0185724C7297BFC81212FC47004E547E4A9D
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/Cc-ayRMXkC-xa3tww6XNgC-qbkQ.roa
Signing time: Mon 02 Jan 2023 11:44:50 +0000
ROA not before: Mon 02 Jan 2023 11:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6696
IP address blocks: 193.105.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:72:97:bf:c8:12:12:fc:47:00:4e:54:7e:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jan 2 11:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09cf9ac91317902fb16b7b70c3a5cd802faa6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:4b:80:05:21:13:b4:fb:f6:c9:c7:21:59:
cd:68:2e:75:9e:c3:7a:2e:66:24:68:91:6a:f5:8a:
cd:27:54:45:22:54:de:4d:d8:4d:20:cb:99:2a:6f:
85:21:a6:95:cb:df:2a:ec:f6:a5:fd:95:73:ca:a9:
e4:e9:4b:cd:99:76:77:c5:91:9d:5d:99:08:ef:2c:
06:db:b5:fc:aa:dd:a4:de:f4:9e:41:90:13:b8:b3:
2b:43:7f:ef:0d:b0:b8:c5:de:27:c0:91:e8:a5:53:
a7:71:35:4b:f3:d2:dd:02:b6:ee:80:fa:e9:1e:c1:
3e:05:4e:2c:19:54:0e:e0:6a:25:2b:37:c8:60:48:
8b:ca:14:03:8d:eb:c7:35:89:0d:73:cb:86:a4:00:
43:7f:ba:f6:44:4a:dc:09:ea:9f:02:b2:15:d5:fa:
34:0a:08:e1:55:63:44:71:b6:3c:65:79:8c:6b:6a:
8e:be:db:f5:42:b8:ac:a3:36:54:98:6b:83:62:16:
43:bd:08:1e:b7:b9:e3:7e:33:bc:20:a3:70:0f:b1:
cf:87:fe:5f:5f:7b:01:02:e3:c8:35:ac:8d:b1:0e:
f5:62:a2:aa:73:87:f0:6a:52:e7:23:76:ea:3e:74:
0b:de:b0:7b:4f:70:c1:22:f0:2f:a0:dd:35:cd:a0:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:9A:C9:13:17:90:2F:B1:6B:7B:70:C3:A5:CD:80:2F:AA:6E:44
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/Cc-ayRMXkC-xa3tww6XNgC-qbkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e7:ae:ef:d3:df:84:ac:93:21:83:5c:29:c2:13:a7:f5:78:
22:5e:7f:ae:f6:dd:46:01:dc:2e:7f:f0:91:01:ad:6a:86:ec:
80:b1:ef:ac:22:03:e3:df:38:a5:63:60:23:29:09:32:b9:cd:
76:b8:0d:3a:f3:b0:61:9f:66:03:71:ba:b4:dd:93:e8:4b:ab:
13:77:34:5d:92:3c:70:23:65:5e:07:6b:a6:26:6b:29:51:59:
00:bf:4f:86:ed:8b:df:08:9c:91:29:92:44:30:8e:66:0a:19:
9a:53:92:2f:60:8e:e4:c3:98:df:5f:e7:29:11:77:46:f0:84:
3c:48:60:df:a3:ee:88:72:d6:e8:79:e6:f4:65:62:bd:61:97:
ce:a2:26:9b:fd:4f:37:a9:6f:4d:9b:d0:73:bf:30:a0:9f:4f:
72:c3:2f:df:ec:7b:cb:cb:e2:bb:2a:75:f6:97:f5:bf:eb:67:
a7:25:cf:38:c5:ce:5c:db:9e:a2:7e:f8:08:06:49:9e:24:44:
a0:1c:0d:5d:f4:08:02:b0:ae:cc:0a:05:85:1d:8e:d4:44:6b:
cc:4d:dc:62:e2:08:be:17:b6:0d:47:fc:01:8e:7d:bc:f1:1e:
74:b3:45:21:fe:74:a4:0b:a3:05:7c:c4:c9:20:a3:06:a5:c9:
d2:e9:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:02 2024 by rpki-client on console-fra.rpki-client.org