Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/1tfijwgoeTcnhEuNy2O1BYfINmo.roa
File: 1tfijwgoeTcnhEuNy2O1BYfINmo.roa (raw, json)
Hash identifier: rH50dtTLKJS393R5sqDDyZ4T0TTRv+bhqsMEbPVjYnU=
Subject key identifier: D6:D7:E2:8F:08:28:79:37:27:84:4B:8D:CB:63:B5:05:87:C8:36:6A
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01859AFA6501A0F38F336EDBD5E5A7FE6A3D
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/1tfijwgoeTcnhEuNy2O1BYfINmo.roa
Signing time: Tue 10 Jan 2023 09:19:39 +0000
ROA not before: Tue 10 Jan 2023 09:19:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:fa:65:01:a0:f3:8f:33:6e:db:d5:e5:a7:fe:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 10 09:19:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d7e28f0828793727844b8dcb63b50587c8366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:6a:5b:8d:ae:fe:70:a9:0b:ac:0b:ad:76:
b5:4b:dc:ba:19:5d:8e:7d:eb:31:a8:a0:b6:30:80:
3d:d8:ad:0e:37:7c:22:c4:ae:3a:fa:20:0a:4a:2b:
69:dd:03:e5:e4:7e:5b:44:a9:6e:de:98:80:a4:de:
1d:c3:ef:44:58:93:f4:7d:ea:9a:62:49:2f:1a:51:
68:aa:d5:85:d1:0c:c5:13:eb:38:02:3e:0d:b3:9a:
f6:f8:2b:b6:e9:63:b7:19:95:3d:96:ae:8e:32:5a:
48:ee:95:de:2a:3f:5e:3b:e9:60:b5:92:e9:c0:82:
ad:f2:11:99:1f:0d:b9:1c:e5:a4:8b:8d:bc:1f:85:
39:83:a2:c6:23:e7:6e:e1:37:d4:cb:51:02:69:71:
c8:01:4d:59:73:fc:af:75:76:81:b2:d1:3a:b6:8a:
11:cc:19:2b:86:aa:e7:06:25:e1:cf:e3:1b:11:f8:
44:90:8d:1c:cc:1d:9b:fe:e8:01:45:96:9f:09:df:
c4:40:0f:4d:12:97:22:28:05:f0:37:fd:46:6e:9f:
35:be:ca:05:e3:5f:a0:46:2b:c7:a8:19:7f:f5:27:
71:4f:51:88:89:92:5e:bb:f1:8b:f1:25:58:c1:02:
47:e9:a1:c6:0a:d6:fc:70:89:8c:87:cf:6c:84:e4:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:E2:8F:08:28:79:37:27:84:4B:8D:CB:63:B5:05:87:C8:36:6A
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/1tfijwgoeTcnhEuNy2O1BYfINmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
19:48:e6:79:36:07:1e:7a:33:ea:4f:c4:42:47:b2:f6:ca:1d:
77:36:4b:13:00:12:51:05:e4:5a:ed:79:4c:82:2d:2d:60:ba:
bd:22:a2:9c:cd:82:06:46:be:b6:dc:97:ef:38:4e:4d:fd:16:
f9:07:55:22:ee:b4:b4:ec:b6:d5:7b:ee:7a:32:aa:b3:07:df:
cf:50:bb:b3:e0:78:76:85:a8:1d:75:ed:ed:29:f6:d8:5c:81:
33:6f:66:f2:57:5d:48:ed:60:bf:24:5d:b1:d5:0f:d2:de:8e:
4d:fb:f1:16:58:92:14:d9:7e:c5:e4:c9:44:2f:8a:07:22:7a:
85:db:8a:a5:a4:fe:a6:db:fc:b1:d8:c4:da:f0:8b:26:62:bb:
58:5e:c0:2e:43:bf:07:81:ec:57:ed:5d:8f:f4:f1:fc:c2:7d:
55:ab:43:e9:a7:e0:65:cc:0e:b6:ca:83:e4:07:79:3e:41:8b:
32:b4:33:81:40:c0:36:d0:ea:35:74:10:77:5d:ac:a0:27:4d:
ff:48:cd:14:d4:4d:f3:e0:a5:8b:e1:ed:59:e3:d9:f8:fe:0c:
0f:8b:c9:a7:aa:b7:63:38:ef:41:ff:66:de:d8:41:19:8b:86:
a2:ce:96:7a:29:c2:72:c0:63:6e:25:a4:e7:82:12:e5:2a:7a:
9f:9d:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:20 2024 by rpki-client on console-fra.rpki-client.org