Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/XvjtSMPWNkq0JdCZqzBxddl6baA.roa
File: XvjtSMPWNkq0JdCZqzBxddl6baA.roa (raw, json)
Hash identifier: rpkx+HiuY1IZXY1+zV/FfFoqFNzNbBZjgSZzJr3Fqic=
Subject key identifier: 5E:F8:ED:48:C3:D6:36:4A:B4:25:D0:99:AB:30:71:75:D9:7A:6D:A0
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 01856F38FDA211352531B7D78DCD48C32AB0
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/XvjtSMPWNkq0JdCZqzBxddl6baA.roa
Signing time: Sun 01 Jan 2023 21:24:43 +0000
ROA not before: Sun 01 Jan 2023 21:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200916
IP address blocks: 193.100.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:fd:a2:11:35:25:31:b7:d7:8d:cd:48:c3:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jan 1 21:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ef8ed48c3d6364ab425d099ab307175d97a6da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:b8:8a:c3:20:11:c2:6a:86:95:db:c2:96:
3a:98:ee:48:a6:a5:36:8c:c2:ff:67:db:4e:a4:d8:
3d:71:02:5e:03:2c:a5:12:d3:b9:08:8b:bf:a0:fc:
59:7a:6a:c0:57:c5:15:b0:ac:1e:61:67:16:1f:a0:
2b:05:59:ed:0e:1d:a0:56:b5:9c:91:05:b2:04:58:
69:60:25:ad:82:fd:69:5f:35:f4:20:6d:fa:61:82:
5c:d3:2b:f1:6f:0f:55:ef:ad:13:5d:9d:92:d1:35:
16:a5:1d:97:1f:41:e5:37:4b:97:d5:9a:dc:81:d8:
ed:2c:3c:0f:19:dd:e7:28:3f:cd:4e:0f:dd:91:bc:
d7:c2:a0:96:07:a0:23:8e:c5:4e:17:13:8c:ed:59:
6c:46:32:8c:dd:80:b7:e9:8f:3e:db:66:73:4f:a8:
93:9a:c5:a9:2e:b1:96:0a:08:be:1d:e8:28:a2:c7:
d6:4e:59:3c:82:d6:00:4e:ba:d9:cf:4b:7b:ee:7f:
e2:39:19:95:e3:dd:d0:39:6d:ca:31:c3:fe:61:43:
5f:ad:0f:1b:90:75:f2:0e:9c:cc:33:08:63:85:d7:
74:27:f4:a7:8f:fe:73:53:1b:ca:48:17:10:17:4f:
82:a2:d4:c0:f7:3e:8f:a8:4a:bf:e0:1d:b8:b3:a5:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:ED:48:C3:D6:36:4A:B4:25:D0:99:AB:30:71:75:D9:7A:6D:A0
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/XvjtSMPWNkq0JdCZqzBxddl6baA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.167.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f1:9e:07:f6:05:3b:a7:fa:33:01:cf:a1:5b:ce:b7:03:90:
08:94:f9:12:d8:9b:bd:fb:fa:da:02:a2:b7:f2:39:a0:cc:98:
16:76:4f:9c:15:1c:16:92:e8:d1:a5:31:55:b8:bf:11:cb:90:
20:86:9b:6b:6e:cd:85:bf:c8:37:e5:06:05:c3:3f:6f:1a:ed:
68:fe:9d:2b:df:6a:9a:fa:1a:75:2d:65:4f:ce:38:27:8b:ab:
85:66:35:e4:7f:11:21:97:9a:e4:61:cf:2c:d7:22:a2:46:50:
a1:07:34:51:76:71:d1:4a:95:a0:5d:99:63:a1:43:4e:5c:30:
68:d0:6e:8b:23:26:fe:00:4c:73:02:a3:28:22:68:b2:bc:e6:
52:4d:f1:c5:7b:81:a6:30:28:3b:9c:d8:d6:df:3d:d6:03:71:
d8:2c:3d:c7:a1:d2:85:83:d1:5b:d9:36:3f:67:de:d3:fc:b1:
86:54:74:2b:b3:cc:ed:ef:c2:2e:8b:b6:a0:e3:b2:a8:90:c2:
12:42:97:88:22:22:3f:0d:0d:cd:7f:1d:5a:bd:c6:5b:d6:8e:
e8:c5:60:8c:d9:6e:14:23:62:3a:05:37:f1:15:01:f6:01:43:
77:0e:7d:13:e7:a5:c6:58:e7:88:f6:b5:5a:7d:d9:82:6e:4b:
83:93:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org