Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/hWko9hR0GsAVQ0skaib4FtS55gk.roa
File: hWko9hR0GsAVQ0skaib4FtS55gk.roa (raw, json)
Hash identifier: KmWory2EgkueilcwGVIX5m5Tcvf7JwTzevj84ikEeD0=
Subject key identifier: 85:69:28:F6:14:74:1A:C0:15:43:4B:24:6A:26:F8:16:D4:B9:E6:09
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018B9862880009867A58DE0A737C658FD373
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/hWko9hR0GsAVQ0skaib4FtS55gk.roa
Signing time: Sat 04 Nov 2023 03:31:16 +0000
ROA not before: Sat 04 Nov 2023 03:31:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:62:88:00:09:86:7a:58:de:0a:73:7c:65:8f:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Nov 4 03:31:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=856928f614741ac015434b246a26f816d4b9e609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:10:81:d3:88:07:cc:eb:b9:7f:03:fa:13:
2f:ba:7d:55:c4:5f:11:3e:d5:1a:3c:df:83:61:e4:
7b:b8:88:2a:f1:cf:9b:2f:4b:29:b1:c3:78:86:e5:
5a:42:e9:5c:6e:4a:f9:35:9a:da:c5:19:c7:d6:5d:
21:c0:af:b7:8b:fe:1d:c9:e1:48:95:ab:e2:94:ab:
ff:ea:8e:b4:57:d5:d4:1b:58:74:88:26:0b:42:61:
18:5f:48:50:db:2c:b5:6a:07:19:75:08:cb:e7:22:
ab:63:ec:ce:c1:07:5a:47:b8:bf:ce:a1:ac:6d:5f:
9a:21:3d:c3:9b:fe:84:a9:9e:87:10:39:e4:8e:3c:
7e:9a:64:ab:a3:1a:27:82:25:bb:a3:f3:c2:6b:ba:
e4:9f:11:78:48:29:a8:15:e5:28:bb:e0:fd:b1:1e:
17:75:6b:af:82:bd:18:f9:2e:f0:6e:c7:f0:a3:93:
a8:48:6e:cc:ec:c6:1d:2f:ef:3d:0d:0d:1b:48:df:
b0:dd:62:ac:b7:81:32:eb:dc:dd:5a:31:af:81:f3:
31:ea:4a:5f:d5:eb:32:78:af:11:0a:7d:81:c1:94:
55:71:c8:43:c5:3d:97:dd:7c:b5:95:4a:65:65:73:
22:18:52:0d:ec:4f:20:2e:3d:4b:05:ae:70:50:88:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:28:F6:14:74:1A:C0:15:43:4B:24:6A:26:F8:16:D4:B9:E6:09
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/hWko9hR0GsAVQ0skaib4FtS55gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:22:0d:b0:8b:37:82:c9:29:d9:a0:dc:e8:0e:47:7e:1a:9b:
b5:3a:53:5c:2e:56:cf:96:77:4b:19:48:fe:35:75:b4:9c:14:
5b:4a:1f:74:2e:4e:82:48:d3:2e:26:9a:36:89:bc:2e:a1:e7:
90:07:62:94:6b:d3:d4:78:30:c2:cf:d0:be:39:7e:f8:89:43:
a8:a8:e3:45:a9:ed:77:40:51:17:7d:83:41:66:aa:bb:03:ef:
bf:9a:d6:fb:40:6b:a4:ef:0c:f0:e4:f9:be:a1:c9:6f:cd:0f:
5c:04:2c:5e:79:4a:9d:d1:7a:55:58:55:98:23:fe:af:eb:7a:
b2:26:16:c6:cb:41:44:44:2d:31:63:e3:e5:17:df:7c:72:19:
f9:35:19:c5:67:1e:67:dc:1e:bf:df:13:8b:89:48:8d:b7:10:
c8:b0:b2:9b:53:ca:ee:46:2c:e6:6e:38:85:3e:c3:86:f7:c3:
77:82:93:bf:90:c3:4e:b9:9d:8d:e6:77:0c:51:b0:aa:78:04:
67:30:8e:3f:f3:46:24:e9:5c:96:ca:9f:08:bc:23:2f:b9:d8:
92:40:18:3c:1a:7e:95:ee:11:f3:52:2f:48:aa:05:6c:ab:bb:
93:ad:b5:f6:6d:91:e7:c5:0b:4a:fc:fa:7f:7c:08:fc:3c:2e:
2c:da:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 04:43:27 2023 by rpki-client on console-ams.rpki-client.org