Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/1TUCtdKiLSUPIWUtyZYmk6WS4KM.roa
File: 1TUCtdKiLSUPIWUtyZYmk6WS4KM.roa (raw, json)
Hash identifier: 4SJA5/R7eeI62Bs62Z+mYGpiUOn6KKXZDta1zydNv4I=
Subject key identifier: D5:35:02:B5:D2:A2:2D:25:0F:21:65:2D:C9:96:26:93:A5:92:E0:A3
Certificate issuer: /CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
Certificate serial: 01856C53A9C68AA9E6014F0FEB9EDB2C7D82
Authority key identifier: DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/1TUCtdKiLSUPIWUtyZYmk6WS4KM.roa
Signing time: Sun 01 Jan 2023 07:55:00 +0000
ROA not before: Sun 01 Jan 2023 07:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.35.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a9:c6:8a:a9:e6:01:4f:0f:eb:9e:db:2c:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
Validity
Not Before: Jan 1 07:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d53502b5d2a22d250f21652dc9962693a592e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:a0:c8:9c:1a:8a:83:8d:28:a5:28:c4:18:
96:a8:e9:f8:b6:6c:c3:bd:8a:2a:9d:7b:56:76:7b:
b2:df:94:ba:57:eb:2b:a4:5e:d9:9e:aa:49:2c:12:
36:5a:18:04:e0:12:e1:a7:94:88:1f:38:d5:38:96:
3b:9d:e8:38:3e:ca:4b:52:54:ef:a1:25:e4:e1:44:
25:69:95:60:58:41:f9:2a:fb:5e:fa:77:e9:4a:ce:
e3:e5:91:b5:da:63:8e:69:76:79:e0:b2:57:9e:21:
36:f2:3e:f1:9c:11:fa:de:c6:85:8c:4a:aa:d4:7c:
73:b2:3c:53:15:b9:11:c0:1d:86:44:5f:8d:42:9e:
dd:8b:27:86:bd:20:ee:5b:21:d3:a7:cd:6e:00:79:
6f:6b:43:5a:f9:71:17:ca:c6:df:d8:16:ad:1b:89:
a0:27:9e:fd:a7:b5:1a:ad:a4:7d:7a:08:c3:c6:c9:
ee:bc:94:e3:45:00:a5:58:85:45:12:f9:c2:53:cf:
82:e7:ce:dd:12:48:eb:29:09:56:c0:80:f6:40:b2:
2c:96:80:c5:8b:de:3f:6d:6c:4a:10:e2:2d:90:97:
1a:a5:77:fd:d9:a0:b4:96:2b:8d:8a:d0:f4:8e:dc:
ac:59:55:ac:1b:80:51:65:9b:e0:24:12:61:58:a8:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:02:B5:D2:A2:2D:25:0F:21:65:2D:C9:96:26:93:A5:92:E0:A3
X509v3 Authority Key Identifier:
keyid:DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/1TUCtdKiLSUPIWUtyZYmk6WS4KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5a:55:fc:f1:fb:1f:16:0e:0b:d8:13:e4:c3:1c:17:5a:0b:
2e:02:78:52:fd:3c:ca:40:b2:a0:9f:df:14:e7:1b:a4:ea:f8:
f9:5d:05:15:47:00:ce:c8:95:fa:71:e8:05:75:6e:a7:a7:1b:
28:25:29:5e:84:2a:ca:03:20:4f:ea:bb:b7:cd:49:11:b9:27:
4d:a4:0b:7e:1b:5a:60:20:b1:27:5a:44:96:07:10:2d:07:79:
2e:ca:4e:54:bf:22:c3:fa:5c:22:0e:f4:79:62:7f:93:8e:09:
ab:2e:88:ac:4f:49:fe:99:cf:60:ad:b6:42:cb:3d:84:7b:87:
65:cf:9f:c8:ef:37:f3:79:1e:ce:8a:5c:8d:80:61:0e:6e:15:
4f:70:b5:d8:e8:66:c7:35:93:ff:1f:83:df:df:0c:93:46:5b:
79:8e:9f:5d:ad:52:d4:2c:64:69:02:a2:26:d1:c0:d4:98:56:
42:78:a0:41:87:90:a7:c8:9b:5f:7d:9f:ae:44:be:4b:e0:61:
86:2b:82:13:19:6b:97:3b:cb:af:e7:6d:69:d3:cc:df:49:a5:
a8:0a:b0:9d:a6:68:43:5a:7c:85:89:6c:3d:a7:d4:dd:9f:aa:
83:66:48:e2:c1:29:22:ba:16:ae:8d:40:6e:51:32:13:50:ae:
bc:a1:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:53 2023 by rpki-client on console-ams.rpki-client.org