Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/xJyP2xdPZUsnRz6z3wegdVBSh4A.roa
File: xJyP2xdPZUsnRz6z3wegdVBSh4A.roa (raw, json)
Hash identifier: cxH2PKqwST7MgS+104Pv8JSeSopnK7OAJQ0IZeT+tjc=
Subject key identifier: C4:9C:8F:DB:17:4F:65:4B:27:47:3E:B3:DF:07:A0:75:50:52:87:80
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 01856E2666DE70C67468ACA1D0CDFDB55D51
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/xJyP2xdPZUsnRz6z3wegdVBSh4A.roa
Signing time: Sun 01 Jan 2023 16:24:48 +0000
ROA not before: Sun 01 Jan 2023 16:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3219
IP address blocks: 193.6.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:66:de:70:c6:74:68:ac:a1:d0:cd:fd:b5:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 1 16:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c49c8fdb174f654b27473eb3df07a07550528780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:d5:c5:0d:18:99:39:4e:86:ee:38:68:2f:
00:04:94:b9:c8:f2:d7:86:24:80:1d:3d:2f:e6:36:
31:a1:56:c4:f5:df:3f:24:bd:df:ac:61:3f:ab:ea:
e0:d2:b3:2f:7f:94:b1:04:90:59:f8:27:38:f6:f7:
61:c8:a4:b8:87:23:4a:eb:34:2e:46:19:96:01:10:
cc:1e:e8:a1:ef:16:ec:9f:b7:60:7e:ac:16:d0:8f:
a1:9d:99:97:89:05:97:ac:0d:ae:f9:4d:49:32:7c:
d2:9e:fd:41:2c:8e:55:31:8f:08:ef:4a:60:39:7f:
22:b3:8a:11:eb:8f:5f:f1:c3:84:3b:72:8b:b7:d6:
4d:1c:8e:96:19:ac:9e:00:49:11:42:87:71:1c:a0:
39:5d:87:83:91:4d:e0:bd:59:b8:95:d6:f2:98:17:
7a:97:aa:1d:2d:e0:2f:24:4e:6c:27:5c:80:20:dd:
0c:0b:11:52:e5:1a:d4:76:a0:a9:36:d8:fd:b2:b0:
f5:d4:e3:98:c0:bd:5e:9e:18:e4:4c:68:89:21:79:
aa:40:b4:5a:4e:b6:32:d7:94:4b:2c:95:24:33:9f:
05:49:13:8d:0d:70:8f:4c:d1:95:48:9b:9f:20:6f:
28:e1:8c:9b:39:96:de:60:70:6c:40:cd:c0:21:89:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:8F:DB:17:4F:65:4B:27:47:3E:B3:DF:07:A0:75:50:52:87:80
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/xJyP2xdPZUsnRz6z3wegdVBSh4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.6.238.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3b:65:04:b1:4e:0d:38:cd:03:01:b2:c3:a5:fa:d7:21:a5:
95:47:7d:71:2f:4f:da:81:49:30:6e:18:10:41:cb:86:5e:a9:
bd:14:0c:47:fd:9c:16:fe:e9:2a:ab:09:c7:1d:b9:89:dc:e7:
1f:37:10:90:3f:5a:4a:d1:12:47:ff:3c:b8:94:33:80:b5:4f:
90:bf:fb:36:16:62:0d:b4:9c:00:44:fd:b3:1d:67:bf:37:9a:
d3:dd:24:9a:78:18:26:22:1c:fd:7a:bf:2e:52:52:6d:b5:7b:
44:4a:32:2a:dc:8c:1d:a7:d2:60:70:c7:90:a0:c7:ef:cb:c6:
32:6f:86:b1:15:be:b0:06:7d:6c:a8:ec:6a:f7:cb:b4:df:9a:
73:cb:b5:28:58:38:20:2c:74:c2:c7:87:f9:6b:41:8a:19:e7:
0b:1a:ba:6f:c5:ac:17:38:00:bb:0e:24:52:17:0e:92:91:aa:
37:c8:b2:70:b7:fa:d5:fd:90:14:be:91:fe:b2:59:9e:55:f5:
ed:04:19:d7:1c:3d:3a:4f:af:6c:a4:14:ca:d9:57:78:22:13:
b3:de:45:fa:bb:d2:00:11:4a:f2:a4:85:56:55:fd:ee:c0:41:
be:6f:66:d6:60:1b:c3:c1:5f:a7:dc:20:16:97:ca:45:a0:37:
52:97:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org