Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mV7Bl8X3jxp9aLy11ZIWWB0lPsQ.roa
File: mV7Bl8X3jxp9aLy11ZIWWB0lPsQ.roa (raw, json)
Hash identifier: EyF5rQWPFkOnrREHxBqzmRi/IHVuklwdze9uhht1o1A=
Subject key identifier: 99:5E:C1:97:C5:F7:8F:1A:7D:68:BC:B5:D5:92:16:58:1D:25:3E:C4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB083E42B9CB459A799894352C040
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mV7Bl8X3jxp9aLy11ZIWWB0lPsQ.roa
Signing time: Sun 01 Jan 2023 06:04:42 +0000
ROA not before: Sun 01 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15384
IP address blocks: 193.91.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b0:83:e4:2b:9c:b4:59:a7:99:89:43:52:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995ec197c5f78f1a7d68bcb5d59216581d253ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:20:f7:5c:cb:60:94:46:c8:b8:ae:57:53:
56:5c:16:82:ec:bd:c3:35:0d:c4:52:9a:d6:da:b0:
5e:19:cf:4f:d4:94:e1:08:7b:4e:e1:3a:1f:f0:07:
d1:fc:b9:1a:d3:3f:31:ba:d8:13:f6:56:f9:04:ed:
f3:72:9a:8f:c9:16:56:36:0b:fa:fd:9e:f8:6a:77:
45:2f:73:2e:5b:a0:f6:48:2b:62:d2:b6:12:f8:cb:
b1:fb:10:50:e2:3b:1f:f4:83:28:a3:30:72:5b:38:
f5:11:4d:17:f0:48:df:bc:9d:7e:69:de:7a:fc:d6:
5a:62:87:6b:ae:32:ee:3f:39:3c:47:7d:ca:2c:5b:
04:4c:ac:60:01:32:50:12:de:dd:ae:59:fb:fe:45:
d6:49:60:04:81:40:ed:c7:60:38:dc:f1:36:7a:0e:
c4:ed:b2:1d:64:75:89:56:33:cb:3c:bf:51:9e:0c:
dc:10:ca:e8:64:23:53:1e:a9:3a:7e:05:2b:b1:44:
14:b7:82:15:0c:54:01:59:5f:7b:b6:9a:a9:61:63:
4d:42:fa:95:43:eb:2a:08:b6:d8:4b:b6:98:3d:c9:
85:f7:4c:4a:f1:fe:7f:ca:54:4f:e5:0e:db:11:27:
ed:2d:02:58:bc:6f:2e:ec:93:d4:40:8c:05:cb:93:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:C1:97:C5:F7:8F:1A:7D:68:BC:B5:D5:92:16:58:1D:25:3E:C4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mV7Bl8X3jxp9aLy11ZIWWB0lPsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.91.31.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5b:c9:7a:94:f2:7f:1d:eb:91:39:a6:72:d5:39:b7:7e:40:
01:29:3f:a8:4c:50:06:58:93:2e:7d:f6:d4:ef:02:69:4d:cc:
fc:5d:6e:b2:35:d0:55:fc:37:e6:59:10:8b:59:0d:4d:41:de:
e7:00:f5:fb:fe:bf:ac:f9:d2:4d:eb:2c:97:97:29:eb:3c:c0:
ec:90:da:31:8b:bd:37:24:66:98:5b:27:b4:72:92:28:51:36:
39:af:d7:53:49:ff:1d:85:ba:bf:fb:ed:62:21:9d:f6:e7:b3:
15:e6:24:2b:bd:f0:62:13:a2:6f:fa:ed:19:74:15:6d:20:bd:
5f:71:f0:72:34:37:c7:60:05:7b:d7:6f:2c:39:e8:2b:14:47:
d6:e6:eb:df:59:2e:44:88:e6:b9:aa:13:49:91:8e:84:5e:c1:
28:ad:04:b0:7f:57:80:fc:37:ae:7e:1f:7b:bd:6b:dd:9e:3b:
30:47:28:20:31:a5:de:7b:a4:b7:e9:eb:a9:21:f4:2d:5c:4c:
21:cf:15:8c:71:a6:f2:18:68:48:e1:f7:a8:40:fd:b4:e0:43:
8b:5c:c1:86:68:a5:4e:e6:09:61:65:00:2d:31:5d:08:38:d9:
63:2c:f8:eb:6e:1a:3b:7d:ed:5f:94:98:ba:bc:8f:8e:0a:5e:
c8:35:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org