Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/loGoqU9aTWJpBcZ8jY46euNCy3w.roa
File: loGoqU9aTWJpBcZ8jY46euNCy3w.roa (raw, json)
Hash identifier: J1KjKvhEE0WrH/FYFcWKEx5Gn2VpLPFzAKb1R0/fXs8=
Subject key identifier: 96:81:A8:A9:4F:5A:4D:62:69:05:C6:7C:8D:8E:3A:7A:E3:42:CB:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019053A1DC2025442F06732CA6DCE11AE640
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/loGoqU9aTWJpBcZ8jY46euNCy3w.roa
Signing time: Wed 26 Jun 2024 08:20:34 +0000
ROA not before: Wed 26 Jun 2024 08:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 18:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:a1:dc:20:25:44:2f:06:73:2c:a6:dc:e1:1a:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 26 08:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9681a8a94f5a4d626905c67c8d8e3a7ae342cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:e2:02:97:44:59:20:91:27:c4:13:47:78:
3a:7d:74:31:aa:52:cc:b7:1e:c1:b7:3c:4e:f5:c9:
0f:fa:46:93:e3:5f:61:44:ef:75:28:3c:0b:f5:27:
cc:0e:71:a9:4f:1d:c7:db:cf:91:98:92:b5:79:7a:
b8:b0:aa:7e:f1:24:68:62:b0:f2:82:60:a7:fc:c7:
5f:7e:57:92:5e:34:7b:6d:c6:b2:af:13:5f:bd:b6:
19:e3:9e:e9:36:c2:10:98:fc:7c:fd:97:e8:9a:f1:
8a:df:bd:fa:16:0a:f0:d8:90:2e:3e:20:1d:24:73:
39:b9:db:51:a4:79:ab:20:49:53:1c:7b:5d:f0:23:
1e:3f:17:5e:58:fb:38:44:7f:ac:1d:a4:ba:b3:42:
2a:26:5b:03:01:5c:09:5c:e3:0e:0d:96:78:67:45:
a8:eb:51:6f:51:13:f5:cd:7a:f2:0e:51:be:4d:48:
ab:c3:ff:af:c5:60:52:ff:5f:df:23:83:40:85:0b:
00:9a:66:17:97:7b:af:2b:06:82:06:8b:52:2f:97:
9c:a6:3d:84:1e:15:6f:ab:fe:34:a2:1c:a5:92:ed:
fe:c2:a5:bf:56:b2:f2:12:82:55:45:3f:ab:f3:35:
f3:63:a8:6c:e1:ef:b8:dc:a1:0e:ac:b3:a4:2f:36:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:A8:A9:4F:5A:4D:62:69:05:C6:7C:8D:8E:3A:7A:E3:42:CB:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/loGoqU9aTWJpBcZ8jY46euNCy3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:62:74:87:7e:ef:b3:cb:63:78:c6:63:4e:bf:db:c6:96:90:
70:d1:42:de:4c:78:6e:1a:33:18:c7:07:f9:fd:92:d7:75:80:
cf:8d:54:44:e1:65:34:3f:25:87:03:49:79:1c:32:68:8e:bc:
99:f7:88:d9:29:ee:a4:b8:91:ba:db:90:03:87:7d:1e:94:5c:
48:60:91:5d:a6:d3:f3:5c:be:a4:48:bb:04:d3:f9:20:fa:93:
49:fc:41:d5:ef:f8:89:58:7e:af:ec:da:f7:48:aa:bb:2d:c5:
da:ad:a4:f0:3e:b8:80:c8:04:d1:fc:0a:0b:f0:dc:dd:b4:44:
e4:78:02:01:6c:9d:fe:f3:f9:09:8f:0d:50:2c:80:b6:90:85:
3c:a3:26:7d:ca:ce:60:3f:47:61:5c:d2:5f:c6:9d:7b:50:2a:
02:18:f0:04:bb:fd:e0:a4:4a:a0:1b:71:79:9d:ba:10:58:37:
74:d4:d8:ba:86:a8:eb:32:e2:47:9f:a5:71:03:55:77:ea:1c:
19:ce:92:4a:b2:64:32:3e:eb:f3:eb:a2:ba:d3:84:10:5f:f0:
f1:e8:38:66:f2:09:7c:4a:e9:58:01:51:65:d3:00:ca:8d:ba:
8c:94:70:15:98:b8:cb:5d:19:1f:81:f1:6d:c6:cc:a8:19:6d:
48:12:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:03:54 2024 by rpki-client on console-ams.rpki-client.org