Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/dxIYZXqimSp9e6GX6r2ua_6Sq7c.roa
File: dxIYZXqimSp9e6GX6r2ua_6Sq7c.roa (raw, json)
Hash identifier: 1zw4v2w1JBqbb5gHLZmmnLUxykqCzb+YB/obSRn5hEw=
Subject key identifier: 77:12:18:65:7A:A2:99:2A:7D:7B:A1:97:EA:BD:AE:6B:FE:92:AB:B7
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01856F82406B249CB79E893EA514931944DF
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/dxIYZXqimSp9e6GX6r2ua_6Sq7c.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 251
IP address blocks: 193.34.48.0/22 maxlen: 24
195.13.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:40:6b:24:9c:b7:9e:89:3e:a5:14:93:19:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771218657aa2992a7d7ba197eabdae6bfe92abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:89:22:df:cb:0c:9f:c8:68:27:47:b3:f7:
a9:11:c0:60:13:8d:b7:16:9f:a4:f7:b2:ba:d0:68:
85:63:0f:a0:de:a6:cf:6c:73:36:bc:39:ef:d6:11:
71:3d:1e:63:ad:89:8c:75:c1:7a:8e:cf:b0:e2:f5:
78:3e:22:4a:fe:36:44:19:90:a4:f4:f0:64:17:24:
29:33:f0:53:c6:5f:3b:b5:65:d4:b4:0c:ff:b7:16:
d3:36:fd:58:9f:0f:26:fb:c6:91:2d:96:bb:9e:f0:
26:89:a7:94:bd:00:3f:14:ad:dd:b5:38:d0:22:17:
1d:7f:5c:49:6a:df:83:95:d1:bc:da:a0:b1:f8:7e:
54:2f:f8:31:9c:61:d8:ab:08:12:12:a1:e5:ef:8e:
a2:00:9a:a1:e1:2e:0b:89:6e:59:38:76:66:e7:7d:
8c:19:ba:84:2f:04:da:72:d7:66:d8:bb:ad:fa:74:
38:72:aa:89:89:bf:f6:18:f7:7d:2e:7c:70:bd:4d:
b7:a8:13:14:13:4f:16:88:6b:c3:77:ea:47:f0:f3:
5f:c1:c5:5a:02:2a:04:69:ce:34:f0:b9:b5:b3:94:
ab:fc:a0:2b:a3:af:25:25:38:4a:1e:57:d1:bd:6d:
90:81:d5:12:97:ca:1c:bc:de:c0:8b:25:96:ed:44:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:18:65:7A:A2:99:2A:7D:7B:A1:97:EA:BD:AE:6B:FE:92:AB:B7
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/dxIYZXqimSp9e6GX6r2ua_6Sq7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/22
195.13.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:28:13:a3:27:d1:23:5c:e1:a0:71:84:9c:50:84:cc:59:16:
fc:c7:96:05:5f:6b:a3:82:96:db:60:74:76:85:b6:5f:1f:3b:
43:85:01:63:20:4e:66:ec:a2:ac:5a:92:1a:f4:99:db:cc:e0:
66:b3:36:12:9f:fd:44:dd:df:a6:e9:78:98:4a:75:3a:2f:9a:
ae:89:1b:a4:73:33:54:c2:fa:96:21:00:52:dc:33:61:d6:fb:
69:aa:fd:74:4d:bb:77:c2:66:c9:b7:85:28:8a:95:c2:e0:90:
4e:37:c9:a1:17:76:b1:83:0d:c1:c5:62:11:54:e4:0e:dc:05:
0d:f8:35:2f:13:6d:4a:f9:73:09:d1:8e:ed:2c:5b:96:2d:0b:
cd:a3:ba:7d:f4:3d:81:99:51:4e:2d:ea:45:21:e8:37:5e:4a:
c2:e3:83:4f:de:f4:cc:bb:d0:73:75:3a:13:9d:29:79:84:db:
c7:ae:74:95:ec:68:0c:d2:72:8e:06:8e:c9:c8:68:c1:b9:cb:
8e:9e:c6:5c:f7:a3:02:e5:50:b4:0a:64:f3:0d:9c:d3:57:7e:
45:a1:42:6d:24:34:93:26:39:57:10:d2:6b:2a:05:41:ab:6d:
83:97:e7:c2:6a:52:7e:c0:84:30:f7:87:de:26:ba:bd:58:4f:
2b:ff:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org