Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/i9RNXOmJekLHqBKIcreDZKHkasM.roa
File: i9RNXOmJekLHqBKIcreDZKHkasM.roa (raw, json)
Hash identifier: vDcAeAR1/wkL4c3wLE1yAQTMomp4zEEQKZ9nHuLC7xc=
Subject key identifier: 8B:D4:4D:5C:E9:89:7A:42:C7:A8:12:88:72:B7:83:64:A1:E4:6A:C3
Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial: 01856EA6A8C98A5BC4550D7AFD43F0A1456E
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/i9RNXOmJekLHqBKIcreDZKHkasM.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44478
IP address blocks: 193.84.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a8:c9:8a:5b:c4:55:0d:7a:fd:43:f0:a1:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd44d5ce9897a42c7a8128872b78364a1e46ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:c8:34:dd:b6:97:59:e5:ff:28:6f:bc:3f:
3e:ba:0f:60:a0:df:f3:03:ef:d4:d2:72:4b:6c:76:
cd:00:a4:b6:2b:eb:a3:ab:c9:26:59:21:ce:cb:d8:
36:fc:83:9b:73:da:5f:b8:e0:de:d6:39:93:32:1b:
91:e0:95:14:55:ef:47:d6:11:30:4b:7d:84:0f:6f:
3a:af:4b:54:85:fc:b9:1f:e5:c0:af:c9:fa:1a:b5:
9e:89:0a:fb:eb:60:2c:c8:0e:33:70:e5:19:38:26:
33:ff:e0:1e:00:81:2c:d6:45:b5:c1:a0:c0:72:e1:
a9:32:6e:e5:74:b3:49:3b:2e:9a:7d:ba:30:94:4b:
77:6c:eb:72:90:ff:4a:ee:3b:7a:83:0f:28:59:4f:
f7:87:69:72:ad:31:78:38:52:f8:ed:03:06:f6:7a:
e4:c0:94:4e:7f:d0:da:df:46:d7:95:b6:3f:ad:69:
04:64:98:5d:41:4f:9e:06:bd:7f:27:69:89:09:f4:
db:8a:00:0b:02:fb:93:ad:e5:1c:fe:77:62:bc:0e:
2c:5b:d4:d9:92:1f:42:32:e2:d8:6a:c0:6b:ee:d3:
60:cd:40:e3:4b:c8:76:b3:cb:4b:27:c6:61:f2:60:
78:3b:97:21:4a:53:c1:b8:63:46:1d:4a:c0:b2:21:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:4D:5C:E9:89:7A:42:C7:A8:12:88:72:B7:83:64:A1:E4:6A:C3
X509v3 Authority Key Identifier:
keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/i9RNXOmJekLHqBKIcreDZKHkasM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.76.0/24
Signature Algorithm: sha256WithRSAEncryption
90:14:7c:e6:c9:24:42:06:7c:27:0a:bb:99:5a:3b:37:20:b7:
e7:aa:a0:ec:cc:a8:51:5a:9a:08:8a:59:36:e8:a3:15:f0:12:
c5:ef:bd:7e:e1:da:fe:85:8f:58:ee:e0:3c:94:42:28:6f:00:
55:3a:06:9f:22:cb:90:a0:e2:6d:1c:89:ee:c8:cf:92:8d:a0:
39:37:58:2b:31:f7:28:17:75:70:cc:59:01:bf:b1:04:fa:66:
d8:82:a6:92:d3:0e:38:6d:6a:4b:dc:6a:4d:7d:3c:51:90:90:
12:69:c2:1a:d8:1a:85:8f:a6:84:d3:4a:93:1e:ce:6c:6a:95:
e1:f7:fe:e2:59:e1:43:ee:8b:b9:91:3b:30:8e:f9:f1:17:77:
9a:2e:05:ca:32:6f:00:6b:3d:f3:11:6c:c8:05:10:a5:4f:36:
97:fd:9f:75:4c:bd:a3:38:7f:15:2c:f9:0e:66:26:33:89:a4:
9e:63:18:e9:1f:31:18:e2:b3:96:be:9e:50:d1:4d:5e:9b:68:
6a:2b:7d:c8:c9:14:6a:c4:33:e6:2d:5b:a6:08:64:93:63:49:
f0:8a:95:1a:6e:a4:33:31:de:d9:16:0e:59:93:a2:5f:f8:2b:
cf:bf:07:dc:ac:1a:48:8c:0a:ea:6d:75:c3:76:71:69:4d:eb:
b0:e6:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:05 2024 by rpki-client on console-ams.rpki-client.org