Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/hKANI2JhsnuncyyVcI515J9o9U0.roa
File: hKANI2JhsnuncyyVcI515J9o9U0.roa (raw, json)
Hash identifier: ajA4PP+3Fz6XvL3LYoSa7fT+bbDo6kFb5Si7xPIY1Is=
Subject key identifier: 84:A0:0D:23:62:61:B2:7B:A7:73:2C:95:70:8E:75:E4:9F:68:F5:4D
Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial: 0185723A32E65C32D7F6918A934B4FFA8831
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/hKANI2JhsnuncyyVcI515J9o9U0.roa
Signing time: Mon 02 Jan 2023 11:24:54 +0000
ROA not before: Mon 02 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20624
IP address blocks: 193.178.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:32:e6:5c:32:d7:f6:91:8a:93:4b:4f:fa:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Validity
Not Before: Jan 2 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84a00d236261b27ba7732c95708e75e49f68f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:4d:e3:17:ee:f1:17:6f:4a:43:90:55:d4:
94:0f:fa:d2:a5:bb:42:27:e7:ac:76:d3:df:9d:24:
70:e2:d1:7f:bf:35:ae:84:10:f0:70:f8:6e:c7:24:
be:d1:34:4f:01:81:7a:5b:f2:60:6d:ed:be:e6:d3:
6a:c3:79:a9:f7:17:d9:9b:c9:b8:65:c1:d2:ea:f9:
db:14:cd:46:55:be:f6:13:78:94:73:49:ad:ba:51:
56:36:67:70:3a:6b:97:7f:35:6f:3b:c6:58:3b:83:
09:06:a4:e5:e3:15:d5:bf:9d:ed:5d:f6:b0:7b:40:
6b:68:79:7f:cd:bd:48:fa:da:67:0c:45:0e:fa:d0:
93:46:d5:4d:79:d1:ee:19:f4:da:a7:eb:39:72:9d:
0a:b1:79:68:0c:22:cb:58:1f:e6:58:1b:be:9c:67:
be:36:82:db:86:ef:62:97:7f:ec:bc:f3:b2:ca:18:
ac:23:d9:26:71:77:b1:af:8a:fb:0a:a3:04:78:f0:
9d:5c:0e:4b:a0:1c:f9:75:8e:75:db:91:87:6f:88:
f5:73:ac:4b:52:cc:61:79:d4:c6:28:f1:2e:be:8a:
e0:17:5d:04:4f:f7:13:ab:18:69:07:80:78:ec:a9:
cd:6a:b4:d5:78:80:9d:30:11:86:a4:3d:14:ad:69:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:0D:23:62:61:B2:7B:A7:73:2C:95:70:8E:75:E4:9F:68:F5:4D
X509v3 Authority Key Identifier:
keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/hKANI2JhsnuncyyVcI515J9o9U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2d:e2:aa:60:6c:f0:b0:3f:48:ef:91:3f:ae:d9:31:4b:87:
b2:a1:e5:d1:93:4f:34:e7:8c:47:93:3c:8a:47:2c:21:96:59:
ff:f1:49:a3:dc:0b:af:9e:20:38:b4:3c:83:49:a7:dd:2e:07:
e0:aa:c0:82:82:3a:c8:5c:0e:7e:c4:c7:d1:0c:3d:f9:bf:38:
7b:fc:70:0a:c0:71:30:ec:a1:a4:01:a1:d3:bc:1f:80:a1:3d:
66:cc:fa:49:71:76:bf:bf:d7:c2:16:d8:52:91:7f:70:9e:35:
d6:aa:bf:ee:9d:2e:2c:cf:e0:a4:14:5e:21:b2:e1:d0:cd:5a:
ca:d0:aa:04:e5:43:67:7f:ac:b8:50:64:85:dc:22:2f:06:f1:
1f:24:65:5f:ae:b0:9f:59:24:0a:55:57:47:e9:70:ce:b4:de:
64:4d:bd:d9:48:c5:ab:e6:8a:22:65:57:22:7c:1c:71:be:9e:
94:9f:0a:82:3d:30:b0:2b:e5:b1:10:0b:97:ed:d1:62:10:d9:
e4:b9:37:4e:1e:76:50:03:a4:21:21:50:84:31:38:d0:ce:b0:
98:7e:a3:da:33:98:9b:30:1b:3f:15:a3:67:25:b5:3a:72:f9:
21:13:51:56:83:47:99:0b:65:97:83:eb:71:73:84:8f:ff:80:
19:df:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org