Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/dMS7ZCoQyBc67f4yQuzY3YcP2_g.roa
File: dMS7ZCoQyBc67f4yQuzY3YcP2_g.roa (raw, json)
Hash identifier: P3RIGOAQ3TAeI6uso7ME6PjCDe/LNzPwD8RTpy2Nioo=
Subject key identifier: 74:C4:BB:64:2A:10:C8:17:3A:ED:FE:32:42:EC:D8:DD:87:0F:DB:F8
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0185710C19BF24C386C6FB335DD19C6ECE8F
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/dMS7ZCoQyBc67f4yQuzY3YcP2_g.roa
Signing time: Mon 02 Jan 2023 05:54:56 +0000
ROA not before: Mon 02 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41485
IP address blocks: 193.227.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:19:bf:24:c3:86:c6:fb:33:5d:d1:9c:6e:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Jan 2 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74c4bb642a10c8173aedfe3242ecd8dd870fdbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:95:ff:e2:f3:84:c2:85:9d:1a:8e:87:5b:
9f:8b:49:60:f3:a1:d4:03:23:ec:38:f3:ac:8c:5e:
d8:b5:ba:70:91:16:ff:e1:66:00:8c:c3:2f:11:3d:
f0:d7:cb:5d:5c:9e:7d:09:91:77:69:1f:a3:ce:fe:
d3:78:80:b3:f6:4f:15:1a:9e:94:11:f1:f7:2b:19:
17:d2:ab:aa:15:23:0f:6a:0f:60:28:37:ea:f2:a7:
ab:43:b0:aa:8b:79:06:da:7a:e9:a0:1f:22:e8:5b:
5b:e3:3b:93:76:13:92:d0:cb:02:16:06:55:f5:76:
17:f3:ff:39:ff:80:4b:b3:b7:58:b1:92:5d:2d:27:
b0:29:31:db:19:d0:d5:06:9f:e6:06:bd:ef:e2:49:
95:8a:a1:a3:da:52:07:30:4d:f1:98:0f:5b:bb:fd:
5f:46:fa:1f:af:67:d5:db:28:bf:0d:b9:3e:4d:1b:
16:3f:88:41:e4:28:2e:52:2c:ef:f5:68:9c:ca:b0:
77:6d:bc:2d:46:b7:bd:48:7f:23:8c:15:8c:f2:73:
3b:33:f5:e1:36:b0:46:71:15:7c:10:64:ca:82:ae:
ca:3e:e4:c7:cd:d2:ce:28:78:0b:8a:c4:26:08:39:
08:7d:96:a9:d8:af:b1:8a:88:84:45:08:34:ce:3b:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:BB:64:2A:10:C8:17:3A:ED:FE:32:42:EC:D8:DD:87:0F:DB:F8
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/dMS7ZCoQyBc67f4yQuzY3YcP2_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.96.0/24
Signature Algorithm: sha256WithRSAEncryption
05:66:5e:3e:e1:ee:08:c0:78:89:94:cb:2e:3e:fd:e7:d6:9b:
ad:fb:24:74:6e:2b:d8:84:92:8e:3c:ca:c8:a1:2d:65:45:83:
9b:21:fb:9a:95:9c:3b:35:12:c3:ba:3f:0d:8d:e8:7f:42:2e:
ec:5d:18:54:98:df:c0:d8:d0:e4:75:8a:34:37:9d:dc:7e:61:
1c:e5:4d:82:8b:c0:0b:91:65:91:74:83:c6:8b:df:82:7e:4f:
79:1a:5b:54:19:1d:36:32:0a:b9:46:bd:97:2d:0c:5c:df:e5:
49:cc:8e:93:43:e4:93:02:47:17:52:cb:9a:30:e0:a2:06:de:
e8:66:4a:32:ad:55:39:4f:37:be:5a:f8:77:57:2c:0c:ca:fe:
16:91:4b:2d:9c:79:53:24:1a:38:9d:69:80:b5:3c:03:63:ad:
ff:80:11:1d:d5:86:ec:a5:9a:b9:fc:89:bb:e4:77:23:b5:6b:
ed:43:3e:9b:5a:d6:25:c6:c2:56:32:78:7e:64:56:31:d1:32:
60:e4:35:7c:be:41:f1:44:8b:5f:66:3b:1e:17:b0:4d:9e:38:
d3:15:78:58:df:10:2f:aa:00:3c:da:65:87:f1:9b:d5:a1:f2:
44:5f:25:c9:3b:21:06:69:9d:71:c8:ed:db:f6:a6:c0:76:4c:
96:94:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:42 2024 by rpki-client on console-fra.rpki-client.org