Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/56dtkJGfb4RCzlCm6jGBX3eKr8o.roa
File: 56dtkJGfb4RCzlCm6jGBX3eKr8o.roa (raw, json)
Hash identifier: jeC/o248azaDUIcocyUtxZaSqw/+BC/8AxHKFr7N1Yw=
Subject key identifier: E7:A7:6D:90:91:9F:6F:84:42:CE:50:A6:EA:31:81:5F:77:8A:AF:CA
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 01856F14A4A50AC0F1F5D2431A35186D0994
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/56dtkJGfb4RCzlCm6jGBX3eKr8o.roa
Signing time: Sun 01 Jan 2023 20:45:01 +0000
ROA not before: Sun 01 Jan 2023 20:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8823
IP address blocks: 193.47.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a4:a5:0a:c0:f1:f5:d2:43:1a:35:18:6d:09:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jan 1 20:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a76d90919f6f8442ce50a6ea31815f778aafca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:3e:f6:af:55:9a:67:af:2b:dd:c5:b4:e3:
43:3e:54:9f:2b:25:fa:97:c2:4e:a9:af:8e:27:4d:
fe:df:40:0c:f8:c5:15:16:70:e8:8c:d9:80:55:75:
14:bb:b5:7f:34:c3:d0:52:86:9b:9c:63:53:da:7e:
17:3e:1b:66:63:e3:f4:6b:cd:5f:67:e4:e6:8a:13:
71:24:ea:0c:71:a1:b6:ee:c9:20:45:66:25:4d:07:
6a:54:3f:69:65:98:4c:a1:6e:f0:15:b1:86:51:84:
b8:48:4c:31:7f:c8:10:d0:22:ee:69:2e:45:1f:19:
3d:9e:e1:15:a6:5f:58:0b:28:c4:9f:f8:1a:04:55:
79:1b:75:7b:e1:f2:20:ba:6a:dd:3e:a1:73:f6:ec:
b8:18:ab:e8:90:29:fe:35:82:f7:35:86:76:b2:d7:
3d:15:0b:e6:ad:b7:df:ea:7e:35:de:9b:63:51:f6:
b7:52:19:4e:c9:32:1c:7b:59:37:f3:4d:c7:95:f1:
f9:9a:45:5f:26:12:2f:bd:32:b8:1e:3d:f2:5b:17:
64:87:e8:2e:09:06:d8:c3:87:a6:3e:08:ec:6d:64:
f6:c6:4e:9f:6f:f6:48:d4:5b:a5:85:2a:37:ca:a7:
9c:54:58:12:b4:4b:ee:78:be:d6:e6:c8:2a:19:60:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:6D:90:91:9F:6F:84:42:CE:50:A6:EA:31:81:5F:77:8A:AF:CA
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/56dtkJGfb4RCzlCm6jGBX3eKr8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.149.0/24
Signature Algorithm: sha256WithRSAEncryption
78:73:ed:07:fa:94:e1:56:94:a7:01:eb:f7:3d:b4:56:08:30:
96:78:58:5b:8f:df:4f:ef:ef:bd:88:3c:e2:f4:53:1d:37:96:
0e:a6:c5:ec:6b:f0:55:78:e2:4d:2a:59:97:be:a1:ea:a4:09:
37:ee:b6:a8:bd:a4:a0:d6:20:34:b3:a1:b0:cb:ca:ae:ff:6d:
b1:8c:9e:a2:f0:de:e5:81:c1:21:68:15:6b:76:7e:70:7f:0a:
08:82:be:e5:c4:33:06:00:a8:59:dd:15:29:bc:7b:ba:ce:dd:
c2:6c:2e:3a:26:be:d4:9f:85:8b:1a:c5:f5:c5:22:42:de:5f:
c1:e2:c5:5b:35:75:f0:25:3e:f2:e6:e0:24:f3:bc:fb:4a:6f:
e9:98:8c:d8:1e:fc:2a:e6:20:ca:e1:b3:5b:fb:19:2a:08:2c:
02:e2:11:66:b7:21:de:26:b1:f9:ef:76:d2:5d:38:0d:7d:59:
41:c1:4b:e3:74:4f:ef:a0:71:55:e3:89:c9:4a:49:5e:49:1e:
50:4f:ce:eb:a3:dd:32:5d:78:4b:70:99:00:cc:46:ec:00:36:
6c:6d:53:d4:e8:04:93:15:c7:eb:05:f7:30:2b:0f:58:5a:12:
3c:f1:ea:85:91:75:de:45:88:6f:1e:59:71:ea:a1:27:c3:ef:
5b:97:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:38 2024 by rpki-client on console-fra.rpki-client.org