Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/90FWjo9TeBvuG8lEDrptKQTBEUk.roa
File: 90FWjo9TeBvuG8lEDrptKQTBEUk.roa (raw, json)
Hash identifier: ZIkLQWsGp2or05oIkODSsl6j5Wemr1l2RhIuNHu4Q3s=
Subject key identifier: F7:41:56:8E:8F:53:78:1B:EE:1B:C9:44:0E:BA:6D:29:04:C1:11:49
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 01857321D17A150F52EC7840B1DE14D89E4D
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/90FWjo9TeBvuG8lEDrptKQTBEUk.roa
Signing time: Mon 02 Jan 2023 15:37:54 +0000
ROA not before: Mon 02 Jan 2023 15:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51061
IP address blocks: 193.110.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d1:7a:15:0f:52:ec:78:40:b1:de:14:d8:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jan 2 15:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f741568e8f53781bee1bc9440eba6d2904c11149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:2b:27:8a:3a:5c:80:82:7e:31:4f:17:94:
fb:30:35:f7:c7:6f:c1:a3:d1:08:c9:58:08:da:1b:
cf:f3:58:9f:2a:ca:99:00:06:4b:62:b9:2a:79:47:
2a:db:8e:f8:8d:ee:55:e3:95:33:bc:ec:86:24:ea:
ab:30:64:4d:95:5c:0f:b0:24:1f:e8:ad:65:75:e3:
ac:99:7a:f6:04:60:bb:8a:70:5f:9f:c7:d5:4a:44:
a3:4d:36:45:2f:0e:47:b7:e6:28:f8:02:7f:4a:95:
9d:67:34:4c:8a:c9:e6:c2:37:6d:98:8f:42:d8:8a:
83:64:1c:af:c5:0b:3f:97:55:36:4f:85:d6:62:c8:
71:07:b2:25:3f:16:4a:a0:04:dd:88:f7:d2:dd:58:
75:c8:37:cf:9c:ab:9b:aa:6c:ab:11:6b:83:5d:86:
50:02:b9:0c:17:e8:5c:c4:3e:6d:72:9c:a9:59:78:
8d:c9:ee:2a:f9:51:e4:65:fe:8a:1f:30:87:c5:46:
74:d3:94:01:f1:c0:98:42:e1:fe:4b:fb:e6:c6:e5:
cf:e3:a0:ac:b4:05:6e:9f:31:be:ae:32:4c:90:fb:
10:6b:3b:01:a6:a7:a3:83:ed:2b:ae:6e:ca:63:32:
34:ef:95:76:fa:b6:17:24:d5:c4:ac:8d:5c:7a:f9:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:56:8E:8F:53:78:1B:EE:1B:C9:44:0E:BA:6D:29:04:C1:11:49
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/90FWjo9TeBvuG8lEDrptKQTBEUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
02:86:7d:7f:a3:7b:d5:7e:65:8b:2a:f6:5f:23:cf:be:3f:af:
e4:26:67:a9:db:49:f2:48:73:b5:58:ff:78:11:e4:b5:93:1e:
23:43:a1:7c:74:a4:31:e1:56:46:20:6f:1f:40:b2:69:c8:5f:
79:6d:28:67:40:22:a9:66:3b:e1:df:eb:6e:98:41:12:7b:86:
ed:12:d0:b7:12:44:d5:78:40:38:d8:e5:cd:fb:90:ab:08:7f:
05:71:b3:28:2d:e8:56:30:16:74:22:20:e6:f8:33:67:75:76:
66:10:80:15:cf:e8:5b:f9:41:42:f3:59:4b:64:e4:2b:17:70:
53:ca:39:6d:c0:3c:3f:ed:2f:60:c6:6b:dd:ed:60:31:10:8e:
d6:01:97:46:f6:42:12:6a:f5:b9:23:43:85:2d:f7:62:40:27:
8e:b2:20:42:d8:9d:a7:ed:ed:dd:27:cd:45:dd:9c:91:7c:86:
bb:42:33:7a:6b:7a:32:c9:e5:68:39:7e:f6:af:7b:15:84:ad:
c9:c5:7f:a0:11:19:4f:b7:47:2a:79:85:b1:cf:99:7e:a6:57:
08:c3:c3:60:4c:9f:f6:ab:d4:b5:bf:e8:f3:36:c5:96:6d:d4:
ae:c1:eb:59:b9:51:a1:68:43:73:3d:13:14:ce:48:78:76:c9:
f2:00:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:28 2024 by rpki-client on console-ams.rpki-client.org