Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/9EQRQJlNpAOozWkUQLd0eLNLB_0.roa
File: 9EQRQJlNpAOozWkUQLd0eLNLB_0.roa (raw, json)
Hash identifier: y1IMoACyBFGv82rlXvw59WOCJ4ALWr3gpyRmq/loilA=
Subject key identifier: F4:44:11:40:99:4D:A4:03:A8:CD:69:14:40:B7:74:78:B3:4B:07:FD
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 018572B441B58661D96E11DE4DD797558A2D
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/9EQRQJlNpAOozWkUQLd0eLNLB_0.roa
Signing time: Mon 02 Jan 2023 13:38:13 +0000
ROA not before: Mon 02 Jan 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 193.26.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:41:b5:86:61:d9:6e:11:de:4d:d7:97:55:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 2 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4441140994da403a8cd691440b77478b34b07fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:7d:bd:36:42:65:22:4b:b0:6f:fe:3e:e0:
dc:84:1f:43:8e:96:ff:cd:f2:1b:64:03:27:44:73:
e4:be:fc:fd:e4:b4:a8:dc:cc:c5:23:d5:ce:c2:83:
b3:d4:4b:27:72:81:b4:67:0c:45:46:a6:8f:7c:4a:
0a:1a:1f:fe:3e:24:74:72:3b:ee:48:ae:df:3b:f9:
3f:57:7a:88:a1:26:e2:1b:be:d7:29:74:8b:6e:eb:
a1:6f:71:18:1c:8d:ef:33:3b:01:f7:2e:66:dc:64:
2c:a8:9e:db:3c:54:f0:3c:72:8c:16:d3:3a:ac:9d:
1d:a1:4f:92:74:66:a6:99:6a:f4:40:04:41:c3:dc:
d7:49:15:26:3e:60:f7:21:94:8e:24:11:5e:ff:db:
a1:f4:1f:f2:4c:83:54:81:ba:7b:cf:46:6e:e4:f5:
89:2e:e0:cb:b8:4d:7d:5f:46:bf:d3:e5:86:ff:75:
d9:bc:a9:83:47:da:28:9e:6f:6a:d0:fc:ae:20:89:
3b:23:0a:c4:c3:43:0c:fe:34:af:42:e1:d6:bb:fd:
1a:2d:85:45:61:fc:8e:33:aa:2e:96:b2:48:41:30:
57:d9:96:ee:73:cc:61:44:9d:74:89:b6:a0:d2:10:
e9:18:5a:bd:56:da:e1:bc:2f:a6:40:b2:5c:ca:e8:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:11:40:99:4D:A4:03:A8:CD:69:14:40:B7:74:78:B3:4B:07:FD
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/9EQRQJlNpAOozWkUQLd0eLNLB_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.29.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:03:f9:97:0e:d9:a8:87:bf:7c:25:51:e1:bc:19:be:47:
49:fc:0c:f6:e4:84:fc:5d:e4:09:93:41:a9:59:80:d6:30:94:
ad:25:78:73:99:61:1d:0b:5c:1a:1d:b0:0d:47:a5:35:70:2c:
de:00:b2:3b:6d:ca:bf:2a:22:9a:50:ce:b6:c6:d9:ab:c5:78:
d9:91:31:a5:f3:d1:36:db:7d:4b:55:36:19:c4:45:72:5e:54:
91:66:23:66:83:f2:fc:ba:ef:77:b1:e0:be:73:10:68:2d:f6:
24:f5:02:12:8b:a1:37:2d:85:27:3f:6e:18:70:32:3c:23:13:
dc:0d:08:79:d6:ca:26:61:f1:30:e6:b3:e8:e0:3e:07:57:c7:
0a:2e:61:8c:d2:ad:52:3c:da:8a:3f:af:4b:15:cf:40:73:90:
52:63:9c:67:b4:9b:8e:7b:4f:43:20:65:53:6b:db:04:36:90:
e3:d9:03:98:33:f3:ee:ec:0e:a9:90:c7:68:37:08:30:b9:f1:
ce:7e:9e:51:2f:3d:8e:62:f3:7c:8e:9a:66:fc:32:3f:0a:c3:
97:5e:a4:0f:cc:f9:6e:16:9f:a8:ec:e2:e7:4e:7d:16:1f:dd:
bf:3e:9f:29:29:26:51:81:9f:74:1f:6d:4b:71:17:77:8b:b5:
bd:38:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org