Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/U68kKpsW2wYUm3xR74_Me9YMPYg.roa
File: U68kKpsW2wYUm3xR74_Me9YMPYg.roa (raw, json)
Hash identifier: jS0w60HgLDEE8uuEl1ikmjTFMy3b6q5w5xSuaTLVGTc=
Subject key identifier: 53:AF:24:2A:9B:16:DB:06:14:9B:7C:51:EF:8F:CC:7B:D6:0C:3D:88
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 018895FF3B744FE881CD3B3DED6E9D8DA6F8
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/U68kKpsW2wYUm3xR74_Me9YMPYg.roa
Signing time: Wed 07 Jun 2023 13:15:11 +0000
ROA not before: Wed 07 Jun 2023 13:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 193.84.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:ff:3b:74:4f:e8:81:cd:3b:3d:ed:6e:9d:8d:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jun 7 13:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53af242a9b16db06149b7c51ef8fcc7bd60c3d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:62:20:34:06:97:e3:3d:c0:f2:34:ae:eb:
30:a4:00:b2:85:fa:ba:a0:de:de:68:03:b2:a7:71:
4c:db:b4:19:96:c2:b9:c3:ff:ee:16:73:13:02:c8:
be:e6:b7:f1:a4:4d:10:d0:ed:1c:17:1e:e0:1b:89:
ce:c0:e5:30:b0:f3:90:b3:05:44:fd:9b:4e:6c:48:
16:85:6a:f4:01:7f:f0:c7:82:bf:0f:3b:bf:a0:e5:
a7:28:fb:61:62:8a:a1:f0:fd:44:83:5d:4c:b0:2f:
de:b2:4a:9d:7f:ce:36:7e:94:fa:51:8b:d6:05:6c:
87:8c:fb:08:1f:66:11:1a:c7:ff:8c:1a:e1:03:de:
90:91:b6:62:b9:53:d2:bb:41:11:48:2a:22:f3:f3:
ab:b6:4c:6d:0d:ea:bc:25:0a:d0:a6:a9:c1:c2:87:
84:ed:76:e1:21:b7:5f:ad:82:1d:40:4d:3d:09:aa:
32:9e:3d:d5:f5:68:08:26:6d:0d:b2:cc:22:cb:5c:
da:17:59:35:fc:50:21:ae:14:4e:1d:e3:d6:68:7b:
12:3e:0b:e8:ba:78:85:20:1a:ab:9b:f1:55:fd:62:
28:b7:e8:d7:5f:07:cd:7b:4c:b3:39:e3:63:85:ef:
be:39:af:82:60:f7:95:a7:b9:60:c2:8e:28:fb:33:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:24:2A:9B:16:DB:06:14:9B:7C:51:EF:8F:CC:7B:D6:0C:3D:88
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/U68kKpsW2wYUm3xR74_Me9YMPYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:61:ce:7f:97:cb:30:f3:52:4b:0c:f6:82:67:35:3b:57:3c:
0e:72:20:7a:17:d5:0f:7b:fe:e5:c4:d2:1f:f0:68:3f:80:f2:
eb:db:ec:92:ae:8f:a8:c8:02:18:76:03:dd:4f:cb:92:27:5a:
dc:53:1b:4e:7e:d5:ff:5b:62:b1:fb:3d:fe:a1:40:9a:41:ce:
ce:d8:fa:33:86:07:8b:8d:a4:b3:f2:06:4a:d2:51:a9:55:ce:
81:ac:1d:a4:a7:55:44:cd:b2:12:ee:0e:0b:cb:8c:b5:d9:1e:
5b:3a:cc:ea:7e:f9:92:f6:3c:e1:d6:2e:6d:b9:89:c2:fb:13:
d8:b8:b8:63:ec:31:2d:a8:ad:9f:10:5c:b2:3f:45:e1:90:74:
8d:d6:62:9f:c3:fa:a3:f5:85:6e:26:62:e0:db:c2:5f:e2:ec:
5d:2c:c1:fb:84:02:d8:01:b6:0b:3b:6e:68:d1:41:8e:c1:48:
38:c2:b5:e4:dd:c0:f7:c1:a7:fc:95:24:99:17:57:20:f9:e4:
fe:77:39:66:ac:7b:b5:11:96:09:ba:ce:44:de:ba:d3:2e:95:
5e:c2:d8:48:b1:62:71:ce:c8:cc:ec:2f:88:21:52:74:c9:c4:
00:11:22:24:1d:98:2d:a3:50:1d:27:46:4e:a3:06:0b:0b:1e:
7a:b1:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org