Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/vv7zwEHiQGq32mA931ah24zHnvM.roa
File: vv7zwEHiQGq32mA931ah24zHnvM.roa (raw, json)
Hash identifier: ApHCQGK35iED2Ox43LWcRs5gJQW4hxTUFCJSSoKNyKk=
Subject key identifier: BE:FE:F3:C0:41:E2:40:6A:B7:DA:60:3D:DF:56:A1:DB:8C:C7:9E:F3
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 018BC850E8565AA9FD75F029C8CC705DD3D2
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/vv7zwEHiQGq32mA931ah24zHnvM.roa
Signing time: Mon 13 Nov 2023 10:53:47 +0000
ROA not before: Mon 13 Nov 2023 10:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35450
IP address blocks: 193.192.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:50:e8:56:5a:a9:fd:75:f0:29:c8:cc:70:5d:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Nov 13 10:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=befef3c041e2406ab7da603ddf56a1db8cc79ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:58:91:dc:48:43:42:05:d8:d3:cc:f0:c5:
e3:78:f2:81:04:de:2c:53:41:c7:1a:18:f0:1b:86:
06:91:7f:44:b0:be:ff:0b:aa:51:a4:38:21:78:03:
f2:5f:7c:95:c9:a4:8c:95:4c:4b:a4:b8:35:90:53:
01:3a:ef:8d:d3:1d:fc:48:eb:36:7e:48:82:ce:36:
57:a6:2f:35:21:50:79:7a:a0:be:18:a0:1c:17:dd:
ee:66:42:d7:b6:8f:b3:c8:62:85:1f:4f:50:cd:bf:
af:60:13:fa:0d:45:25:21:ff:db:b4:3c:95:1d:ce:
f5:66:d4:cd:71:f1:14:6d:37:ce:80:a4:f4:c6:4a:
37:1b:d7:a3:d3:4d:3e:38:4d:f9:92:32:cd:e0:f3:
c2:cb:fe:06:ab:82:19:df:e2:07:bd:81:15:35:92:
14:0c:bd:12:9c:a2:0d:42:09:b2:5a:ae:7b:f3:10:
f7:f3:f2:44:69:26:e6:2f:ee:12:07:6e:53:d9:30:
e7:c1:bd:32:7e:db:d4:2d:f7:ab:03:d7:99:54:4f:
85:15:6c:cb:9f:a0:b1:73:b3:fc:84:e1:54:47:67:
1d:dd:75:0d:31:73:4f:8a:4d:a9:8c:16:85:af:55:
6a:74:84:72:64:d8:42:f1:aa:d5:b3:84:b1:25:e8:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:F3:C0:41:E2:40:6A:B7:DA:60:3D:DF:56:A1:DB:8C:C7:9E:F3
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/vv7zwEHiQGq32mA931ah24zHnvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.42.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:35:f8:e4:31:ee:e7:11:a3:87:12:90:83:67:f9:b5:12:70:
9b:40:1d:12:82:96:3e:f8:15:f6:e2:97:bb:e0:46:7e:0f:05:
b5:c8:80:c7:19:26:40:1b:75:4d:f7:f0:d5:3a:87:be:27:b0:
8f:40:6e:d9:94:95:69:3e:5c:c9:be:45:4c:7f:a0:38:f9:49:
8f:d7:df:f9:b7:db:66:38:2f:ad:49:62:0b:d6:8d:fc:30:24:
c7:4b:0e:85:2d:42:7c:47:a6:52:b9:92:88:1e:31:0b:54:2d:
5e:bc:dc:02:8c:d8:8c:7a:51:c3:f4:50:52:2f:b8:39:70:0a:
57:31:6d:4c:e4:4b:e1:29:14:cb:d8:5b:27:eb:31:1d:49:f0:
ad:48:e6:24:99:89:0a:29:30:c0:12:7f:c1:92:ea:bd:b1:04:
80:ef:88:44:28:d1:a7:19:89:fa:18:ca:c9:2e:79:83:e1:7a:
b9:9c:0d:c8:2f:33:f4:a6:9a:97:9e:79:d9:d3:ed:22:e0:ee:
9b:2d:6f:38:c0:aa:7a:c5:58:69:20:08:8f:6c:f8:af:6a:18:
58:59:12:76:a5:46:75:d2:0c:00:df:d0:9e:64:fe:f1:43:2f:
ae:a7:a2:a4:fa:40:92:93:e9:bf:4e:9e:6f:e4:c0:9a:d7:8b:
44:b3:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:17 2024 by rpki-client on console-ams.rpki-client.org