Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/d6YRcdybjuvTP5cSMJz68i3NTlE.roa
File: d6YRcdybjuvTP5cSMJz68i3NTlE.roa (raw, json)
Hash identifier: ccl2YQv0+BeJHRzfllBGhTCvDGQKjjdHukSUwdsEyIk=
Subject key identifier: 77:A6:11:71:DC:9B:8E:EB:D3:3F:97:12:30:9C:FA:F2:2D:CD:4E:51
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 01857321D042F1B351A75423FAB7A320A18D
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/d6YRcdybjuvTP5cSMJz68i3NTlE.roa
Signing time: Mon 02 Jan 2023 15:37:53 +0000
ROA not before: Mon 02 Jan 2023 15:37:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39257
IP address blocks: 193.110.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d0:42:f1:b3:51:a7:54:23:fa:b7:a3:20:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jan 2 15:37:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77a61171dc9b8eebd33f9712309cfaf22dcd4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:e6:f6:05:5f:6b:da:b9:d4:bd:02:64:c1:
14:78:d6:dc:79:6d:45:a1:e2:00:ec:d2:eb:55:db:
e9:1c:aa:c7:5c:f2:a8:65:2a:53:c8:4d:5d:b9:df:
4c:ab:df:b9:3f:66:52:e5:1d:d6:60:25:5a:50:38:
4d:c2:d6:d5:bc:2b:48:71:36:67:07:21:bb:b6:4f:
9f:5a:90:05:e2:e9:4d:82:a9:dc:18:45:3f:63:66:
f7:17:7d:e8:44:5d:e5:11:4d:7f:9a:73:0d:7f:79:
ff:09:b1:97:b0:f7:05:88:3a:5a:f6:34:b9:0b:bd:
d4:5e:24:38:4c:ed:43:5f:61:5e:50:cd:17:91:7d:
cc:11:7a:e0:c2:12:4d:f9:06:05:c0:3d:4e:a6:0b:
24:d4:b5:aa:50:d0:f9:0c:95:72:a5:48:56:26:65:
0e:2f:65:35:bc:7a:e7:c2:34:76:36:15:16:a1:d7:
ff:66:99:33:4f:a5:fa:6f:94:27:2f:a1:98:df:f6:
f0:ec:49:7b:85:d1:da:7e:3b:43:77:23:1c:c3:8f:
36:4f:6c:94:f5:cf:27:d8:9a:9c:07:59:61:05:ed:
19:be:ed:8e:05:ce:39:0f:75:d1:93:d8:65:4a:0b:
0a:ea:bc:fc:a0:ab:9b:50:2a:22:4f:14:56:17:fc:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:11:71:DC:9B:8E:EB:D3:3F:97:12:30:9C:FA:F2:2D:CD:4E:51
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/d6YRcdybjuvTP5cSMJz68i3NTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:da:29:90:ae:51:a2:84:c7:38:bc:15:2c:b2:02:83:54:90:
b4:69:56:22:fa:5c:32:27:50:dc:ee:04:28:21:56:23:03:ac:
ca:9d:0d:87:e4:ae:26:34:4b:23:32:e9:af:ac:05:3f:8e:97:
9a:75:f8:d4:8b:d4:1c:e9:78:f3:18:69:4a:b1:3c:00:01:69:
5a:78:2c:99:2c:c9:36:e1:73:80:5b:9e:91:78:e8:15:a7:97:
f9:ba:35:40:63:fa:9d:8e:0a:fb:1c:49:56:e8:cd:ea:8c:0a:
c4:7c:39:0b:9f:f9:bd:09:40:0c:c6:5f:0c:1d:cb:f4:50:91:
dd:83:54:dc:61:7e:66:d3:e1:27:e8:e6:12:05:30:c3:95:bd:
22:1e:64:ff:90:b9:53:70:27:9e:88:6a:60:be:a2:af:e7:0e:
0e:06:c9:fe:13:fe:e7:68:3a:a1:c8:99:90:a0:de:a7:db:df:
3b:8a:ff:2b:1b:95:0d:f6:bd:d3:c2:f2:08:37:7e:3f:1d:7b:
83:23:6e:77:6a:b6:4f:0f:5f:69:1a:6e:fb:a1:d8:94:d4:3c:
45:bb:ff:fe:a3:d0:e9:23:53:dd:55:e1:ba:fa:ba:5d:d3:c5:
c7:08:e3:ea:ad:79:4b:e7:40:6b:f4:17:1c:25:5e:78:d3:57:
d6:a9:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:28 2024 by rpki-client on console-ams.rpki-client.org