Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/DC_TGM73odmSv8CMCCXy5XXN_bY.roa
File: DC_TGM73odmSv8CMCCXy5XXN_bY.roa (raw, json)
Hash identifier: XH8EfqLlLYEY+G2jv5JVc32nDt4IRq3OOE+1mTqTVSk=
Subject key identifier: 0C:2F:D3:18:CE:F7:A1:D9:92:BF:C0:8C:08:25:F2:E5:75:CD:FD:B6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 018CC4244D3958ADA4F4E1902B331C0DE384
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/DC_TGM73odmSv8CMCCXy5XXN_bY.roa
Signing time: Mon 01 Jan 2024 08:29:22 +0000
ROA not before: Mon 01 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.8.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 10 Jan 2024 15:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4d:39:58:ad:a4:f4:e1:90:2b:33:1c:0d:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c2fd318cef7a1d992bfc08c0825f2e575cdfdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:6f:2a:b3:e8:f8:ba:f7:df:fa:1d:31:b5:
1e:76:e2:6c:83:97:e4:de:c6:a1:73:cd:72:05:e0:
d4:2f:3d:1e:05:7d:1f:07:f5:db:9f:7c:38:81:de:
ed:b3:45:c4:36:a7:ac:03:41:d7:ff:a1:05:39:9e:
51:f6:b0:23:0d:25:4a:73:bc:10:90:8a:eb:e2:f7:
4c:ba:fb:47:f0:b3:17:cf:6c:1a:71:e3:db:65:e3:
b8:47:e9:06:31:ed:43:2c:45:63:cf:18:19:7f:35:
34:5f:41:70:89:de:82:29:e7:5f:99:5f:be:a9:51:
a8:62:cc:e5:cf:e7:1c:e0:ca:f7:5f:6f:13:dc:a5:
9a:24:14:32:66:24:e9:7c:a9:51:68:c0:c4:a3:33:
2c:a9:b2:30:69:52:45:96:3a:03:d2:5c:d4:f3:96:
62:22:dd:1c:3b:c6:c5:5f:0e:b5:ae:cc:56:cb:e2:
04:2b:4e:64:8d:4c:23:e8:a7:2d:02:d6:7d:4d:f3:
d4:bb:52:e5:08:fa:3a:aa:c1:43:09:49:41:78:0b:
90:15:81:df:9c:6f:d2:22:f6:ed:39:93:20:b7:09:
96:ff:00:6f:01:5a:9b:34:1b:f9:88:d5:9d:35:a8:
9d:aa:90:18:57:bb:85:5c:c7:a9:48:2f:73:d5:81:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:D3:18:CE:F7:A1:D9:92:BF:C0:8C:08:25:F2:E5:75:CD:FD:B6
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/DC_TGM73odmSv8CMCCXy5XXN_bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.236.0/23
Signature Algorithm: sha256WithRSAEncryption
31:63:ea:56:cf:32:21:d8:6f:e9:d9:8a:2b:03:91:d1:b3:05:
fb:50:94:ed:70:40:cc:5d:fd:09:a4:1f:70:06:1d:96:b1:11:
8d:03:60:ce:99:6c:ba:9b:44:60:50:f6:ef:6b:d5:7d:da:06:
4a:e1:2a:a3:a5:16:01:66:95:d6:8d:6e:60:6b:44:22:76:44:
e0:8e:09:ba:7c:5e:37:bf:27:3b:38:cf:5e:a9:09:49:05:15:
e1:a1:04:4d:2a:1b:ef:d5:52:ff:e3:78:43:81:0d:32:e9:35:
d3:bd:57:74:1a:92:b5:bb:00:98:a2:93:34:12:09:d1:ae:fd:
4f:8b:1e:67:2a:3b:74:ca:be:64:0e:61:a7:30:28:60:d6:be:
2a:5b:00:6f:ee:a0:cc:e5:0b:ac:74:41:68:cc:c8:36:5c:54:
ed:02:d8:ce:5f:db:e0:a6:e1:2c:2c:40:06:13:5c:58:96:fb:
07:3c:cb:65:5c:3f:93:d4:3d:63:64:54:93:66:db:7c:84:2d:
2c:af:e0:72:e8:1b:dd:82:21:33:b7:ad:74:5b:ee:41:1c:84:
46:69:4e:ef:a8:e8:97:b1:26:c6:55:07:9e:8d:e7:7a:8f:f9:
05:4f:6a:4b:50:63:9a:b6:30:4d:80:86:c7:bc:e7:ca:55:87:
ed:21:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:22 2024 by rpki-client on console-ams.rpki-client.org