Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/xx1aa23orlSB2G6d-T1U95la3YA.roa
File: xx1aa23orlSB2G6d-T1U95la3YA.roa (raw, json)
Hash identifier: SxyxSauB8zdAv/tFg96HzB4oXx0HXXZYQaNBrlrwiaY=
Subject key identifier: C7:1D:5A:6B:6D:E8:AE:54:81:D8:6E:9D:F9:3D:54:F7:99:5A:DD:80
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 0188BF5E218B3BFF417F4D9B7BB9D91EF8B2
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/xx1aa23orlSB2G6d-T1U95la3YA.roa
Signing time: Thu 15 Jun 2023 14:03:17 +0000
ROA not before: Thu 15 Jun 2023 14:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49576
IP address blocks: 193.148.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:5e:21:8b:3b:ff:41:7f:4d:9b:7b:b9:d9:1e:f8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jun 15 14:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71d5a6b6de8ae5481d86e9df93d54f7995add80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:63:b2:a1:fe:ae:2f:bc:f4:71:6d:b3:00:
b6:c9:0f:a2:de:bd:fe:ef:bf:21:d8:4d:3a:19:2a:
0a:91:8b:e3:ef:10:16:52:25:ec:1e:97:b7:87:82:
13:d7:17:fd:a6:b1:ae:ab:f2:91:e0:63:2e:62:10:
47:bb:a4:a5:31:ea:bd:e8:4e:2f:6b:9e:14:e6:7c:
18:d2:03:f4:01:82:11:5f:a2:e3:83:6b:4d:4e:9d:
95:7f:05:8a:6d:03:49:f2:68:4e:d6:c7:df:83:f2:
3f:8a:89:ef:49:7f:56:09:a0:3c:eb:ab:ee:ff:93:
a1:fa:15:d2:5c:3f:b4:ba:91:a0:fe:b9:a1:0f:83:
5d:9e:49:b9:8d:dd:ee:b6:63:dc:aa:2c:45:bd:fa:
e4:d5:53:e8:ab:16:5c:d2:8c:c9:38:1b:f5:55:f3:
5c:a4:67:24:bd:9d:08:03:8a:ff:87:7c:fd:ac:79:
78:f8:4f:93:1c:09:06:71:d7:67:fc:cd:57:2f:bc:
46:47:03:26:66:ff:45:0b:b5:ba:c4:b5:0d:e1:93:
d7:c2:68:2d:1e:b3:85:63:f8:2a:64:aa:14:a7:63:
f4:c4:b4:8e:e7:57:32:96:fc:84:72:bb:f2:6f:15:
cc:fd:96:aa:e5:75:64:bb:7f:33:61:f1:58:63:99:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:5A:6B:6D:E8:AE:54:81:D8:6E:9D:F9:3D:54:F7:99:5A:DD:80
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/xx1aa23orlSB2G6d-T1U95la3YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.96.0/19
Signature Algorithm: sha256WithRSAEncryption
95:a2:8c:c0:f3:80:33:8b:c1:94:7b:34:53:1c:49:96:44:ec:
02:6b:94:57:80:2d:a0:f7:31:76:26:f7:0b:e6:a2:17:64:e8:
b7:8f:73:3a:d1:0b:33:b6:c7:db:1d:8e:a9:f6:d0:13:f2:05:
84:6b:7f:4c:42:28:76:6c:92:9b:3e:49:28:7d:6d:d4:b8:8a:
1d:33:7d:b7:58:4f:57:f1:30:72:0c:62:55:f5:da:12:3c:0e:
f5:64:2a:30:7a:ad:e6:be:ed:bd:1e:fe:7b:3d:d9:61:29:aa:
47:5e:c6:96:e2:31:f2:cb:10:2a:f5:c2:34:95:d6:87:07:0a:
fd:da:6e:ac:d7:ad:61:a2:63:d6:fd:45:2d:77:af:59:29:3c:
39:1f:fc:24:c8:3e:84:4e:32:38:e1:e1:d7:54:f3:5d:a3:eb:
b6:2d:02:ea:e9:c8:dd:69:a7:9d:26:85:d1:08:6b:9a:29:7f:
10:6f:d0:f1:cd:00:2b:14:1d:4f:b6:2a:f1:47:26:89:84:3c:
a7:fb:78:f2:ab:00:e0:ca:85:88:1e:09:2d:2a:74:fe:ba:9e:
d6:77:dc:f6:5e:5d:f1:2e:58:b7:49:ed:95:83:f8:68:5d:09:
38:32:1e:f3:43:bc:db:47:f8:df:3f:2a:8f:e3:e4:54:94:40:
89:7e:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org