Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/V2vCVmXCCYBNynb0gUxH4Xn_2Ck.roa
File: V2vCVmXCCYBNynb0gUxH4Xn_2Ck.roa (raw, json)
Hash identifier: ulcH49sXjwRrgxJuKdxyzMG/teqtSPMT4YD/lDWH00c=
Subject key identifier: 57:6B:C2:56:65:C2:09:80:4D:CA:76:F4:81:4C:47:E1:79:FF:D8:29
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 01856D41B5ACCDEE7961B3DD2D8F65F97B23
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/V2vCVmXCCYBNynb0gUxH4Xn_2Ck.roa
Signing time: Sun 01 Jan 2023 12:15:00 +0000
ROA not before: Sun 01 Jan 2023 12:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44879
IP address blocks: 193.47.168.0/21 maxlen: 24
193.47.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:b5:ac:cd:ee:79:61:b3:dd:2d:8f:65:f9:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Jan 1 12:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=576bc25665c209804dca76f4814c47e179ffd829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:e3:2b:58:e7:f6:04:51:23:9d:76:db:2d:
e8:2c:dd:28:a3:1a:6d:6e:4d:34:dd:3f:80:54:a7:
07:f1:20:29:b0:74:38:d4:08:ea:42:47:3e:e8:48:
26:3a:35:81:9a:a1:d8:05:a9:46:93:0a:62:0c:69:
20:cd:01:69:4a:2e:61:12:1e:cd:a9:83:53:51:30:
14:ca:18:26:19:bd:26:6e:95:6b:96:8a:bb:5e:01:
c9:df:33:02:ff:a7:14:dd:52:05:c5:0b:8c:a2:b8:
6b:62:c2:ac:66:32:83:ba:76:9d:53:23:fb:45:e0:
53:cf:07:a6:24:b5:41:32:6d:b6:2b:22:4f:69:94:
84:67:86:cf:5d:9d:b0:c0:75:46:b2:64:b1:bb:ba:
bc:15:9c:04:87:df:08:cd:13:6e:45:1c:44:15:2f:
e3:c6:ad:b3:d0:11:5f:2e:6d:4b:96:61:58:cf:7e:
15:57:71:bc:26:6b:af:79:38:0b:25:4b:ed:33:f3:
a4:f5:df:fe:e4:14:35:5d:16:b7:44:64:9e:85:9f:
f3:e1:2e:bd:12:84:2f:11:56:4b:6d:b4:74:49:3d:
ea:e6:2f:1f:c0:d3:bf:d0:1d:0b:33:f0:11:6f:83:
b8:c5:9d:1a:68:23:de:44:0c:9b:7d:f4:ae:05:ca:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:C2:56:65:C2:09:80:4D:CA:76:F4:81:4C:47:E1:79:FF:D8:29
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/V2vCVmXCCYBNynb0gUxH4Xn_2Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
Signature Algorithm: sha256WithRSAEncryption
a3:72:11:f2:d6:b2:ea:9e:c4:9d:a8:cc:71:f3:e6:4d:a4:55:
6b:33:e5:27:53:68:40:44:e7:bc:81:78:e8:5d:b9:37:70:08:
97:02:03:6f:c7:cb:6f:2d:40:7f:0c:71:6d:fa:c2:de:aa:14:
a5:91:e8:6b:dc:25:9e:23:5f:41:1b:8e:b2:1c:26:3e:6a:67:
5f:f0:5f:a5:c0:75:fe:67:69:f8:fd:23:30:dd:4f:51:df:ce:
1f:6c:e1:09:9e:a2:0d:70:9a:f7:4f:28:e2:c9:e3:44:38:75:
83:e6:14:c3:a8:14:a6:1c:23:e7:76:4e:c1:4c:86:4c:a2:9e:
a5:9a:e4:8b:26:7a:46:a5:f8:b8:31:8d:88:8b:3a:2e:30:76:
1a:a2:1d:85:30:07:91:95:28:d0:cb:c3:8b:cc:dd:e0:1d:60:
80:07:ed:e8:83:c9:d1:08:21:63:90:e5:74:b7:66:af:9b:15:
fb:2b:cb:f0:a0:4e:b9:5b:79:85:90:52:9a:fc:14:b8:eb:0a:
4d:60:4c:5a:09:28:fc:ec:4a:7b:43:6b:cd:09:c3:b2:9f:bb:
ef:c7:d9:5d:91:00:f9:bc:d1:2d:1f:cb:a3:be:7e:2c:a9:23:
ee:8a:9b:ae:e0:e4:e9:6a:35:bd:fe:b7:4c:4b:f6:c6:ef:0f:
b7:62:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org