Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/tdg39j0wz1LBVOfA8RgpKyyS5-o.roa
File: tdg39j0wz1LBVOfA8RgpKyyS5-o.roa (raw, json)
Hash identifier: uCby9VO91QOcgFMXnw9eXDRzEuWwmB9g2xXp+T1Wwn8=
Subject key identifier: B5:D8:37:F6:3D:30:CF:52:C1:54:E7:C0:F1:18:29:2B:2C:92:E7:EA
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0188C4CD6E8A00C81455B17D8AB2BFE5651D
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/tdg39j0wz1LBVOfA8RgpKyyS5-o.roa
Signing time: Fri 16 Jun 2023 15:22:57 +0000
ROA not before: Fri 16 Jun 2023 15:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.113.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 18:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:cd:6e:8a:00:c8:14:55:b1:7d:8a:b2:bf:e5:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 16 15:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5d837f63d30cf52c154e7c0f118292b2c92e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:0c:15:64:8a:51:d8:da:99:44:88:e8:d1:
5e:d9:91:2e:46:02:9c:b9:ba:c3:53:c5:16:a9:36:
3a:c9:84:5f:d8:2e:f4:eb:a3:b1:01:23:d4:3f:27:
a1:4f:27:84:f6:91:ed:9b:c3:45:df:a2:7b:14:8f:
2b:89:ef:26:9e:15:e4:f4:77:ce:a5:21:b7:d6:84:
f0:17:91:2a:5a:76:08:6d:68:ea:c0:0b:ee:31:e8:
29:3e:1d:79:84:3d:4b:83:1a:6f:f8:c5:82:ec:4f:
e5:61:da:5d:b1:b5:7b:02:d8:ec:fd:86:de:ab:88:
a0:0c:31:88:ff:30:ee:b3:29:d1:2b:93:23:52:f4:
2a:ac:35:af:11:15:9b:59:ae:a8:eb:cf:64:c0:1b:
a7:eb:7f:50:dd:ae:a5:84:55:1c:d1:14:dd:54:10:
7f:83:a3:3c:18:2c:03:b9:0d:63:5a:72:9d:7c:ae:
da:4a:bb:77:6b:b1:0b:a7:de:c2:b2:1d:2f:58:7f:
ca:56:49:62:eb:0d:b6:2d:f7:df:7a:f0:04:af:92:
cc:00:b8:ab:c9:63:04:f6:bc:17:a6:9e:b5:ff:36:
13:b8:33:7e:71:dd:91:b0:e1:e6:f6:5b:be:02:c8:
f5:b4:c0:c8:1a:1a:6e:59:a0:5b:f8:48:4f:7e:2a:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:37:F6:3D:30:CF:52:C1:54:E7:C0:F1:18:29:2B:2C:92:E7:EA
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/tdg39j0wz1LBVOfA8RgpKyyS5-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:41:79:54:57:60:43:c9:5f:27:40:4b:e3:1b:c4:59:0f:9a:
2a:18:63:e9:bd:c8:f6:15:ed:18:d2:74:df:0d:40:fa:ef:20:
f7:f1:29:6e:eb:fa:90:d8:a6:48:72:83:85:09:d7:ef:a8:1d:
24:3f:36:e7:97:87:a2:ef:22:5d:d1:21:2a:7e:89:8f:05:f8:
45:61:90:b6:12:83:d8:73:27:55:a8:ed:96:43:c8:95:3f:6f:
92:21:3e:a1:1c:6d:41:37:9c:a6:ae:c9:61:86:c5:b0:83:84:
6f:79:1d:9a:23:47:f9:af:6b:7a:42:e6:ec:d9:d4:e7:11:0e:
87:45:78:a0:f8:08:11:f8:6a:08:f7:50:06:61:45:4f:ae:d8:
f9:50:48:ea:90:e3:f3:51:fe:c3:6e:9e:89:c8:d1:38:b6:73:
d1:d5:64:68:93:38:00:bd:89:be:f2:f1:e0:e0:85:5c:09:c9:
be:f0:f6:a0:aa:8f:9e:54:62:1c:4a:b6:dc:29:aa:0e:b8:19:
a3:7d:3c:10:c1:23:28:84:46:28:bc:76:8e:0f:31:bc:d9:ef:
f1:e6:0e:2d:94:96:2f:da:65:60:c7:6b:7f:f2:08:36:bd:af:
d9:91:cb:d2:b2:54:2b:62:d0:42:d0:ff:d3:2e:58:b9:ea:f8:
bb:d4:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org