Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DuHUnnKShWrDSF_OtQ5O9vNr3xE.roa
File: DuHUnnKShWrDSF_OtQ5O9vNr3xE.roa (raw, json)
Hash identifier: uHl/pLF7y340c/m4cxY038IaTReDdEv3mavS2rP3jY8=
Subject key identifier: 0E:E1:D4:9E:72:92:85:6A:C3:48:5F:CE:B5:0E:4E:F6:F3:6B:DF:11
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 0187A3406EDF58412B6E5EF1818608F47454
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DuHUnnKShWrDSF_OtQ5O9vNr3xE.roa
Signing time: Fri 21 Apr 2023 09:58:41 +0000
ROA not before: Fri 21 Apr 2023 09:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62364
IP address blocks: 193.39.4.0/23 maxlen: 23
193.39.4.0/24 maxlen: 24
193.39.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:40:6e:df:58:41:2b:6e:5e:f1:81:86:08:f4:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Apr 21 09:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ee1d49e7292856ac3485fceb50e4ef6f36bdf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:b3:f8:7e:b6:e1:cb:a6:57:2a:18:7b:ae:
65:26:87:a1:9c:bd:a1:f0:8a:e2:d2:c1:95:4d:f2:
80:e3:7b:2e:41:b8:2d:12:4b:f8:75:e3:38:70:d6:
77:8f:ff:61:ad:17:ec:44:37:ef:b2:b7:30:34:aa:
e1:85:93:d9:98:d0:72:58:6d:c0:c6:fc:58:18:66:
53:d0:41:d6:e7:05:d1:03:b5:bc:b8:9e:7f:6a:20:
22:15:ec:f6:0b:2d:e1:cf:0e:85:f5:03:74:18:4d:
10:b1:6e:4f:c9:1c:83:94:80:0b:f1:a9:5a:5a:65:
99:8c:0a:82:f4:5c:19:4b:e7:13:c1:4d:4e:43:a0:
7e:9c:b6:b4:49:08:8e:76:ca:3f:89:a9:49:78:bb:
ab:9a:c5:22:98:bf:71:79:46:c5:ea:cb:42:bd:ff:
0b:67:b8:24:b3:16:78:da:38:26:a4:cf:83:45:d5:
97:99:5c:95:e3:77:99:84:1e:98:f6:c2:6f:e0:15:
04:bb:86:f6:1b:3b:bc:0c:4f:87:c9:4b:a8:30:3f:
d1:6e:bb:56:6c:19:29:6b:1c:a4:79:b2:19:f4:d1:
64:e8:4c:b4:00:02:24:76:0e:b5:95:e2:ae:53:99:
6e:31:8f:68:7d:98:77:95:51:4c:6c:67:88:d0:c9:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:D4:9E:72:92:85:6A:C3:48:5F:CE:B5:0E:4E:F6:F3:6B:DF:11
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DuHUnnKShWrDSF_OtQ5O9vNr3xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:e1:cb:5a:71:f3:42:32:08:0c:95:cc:5a:92:ba:86:e5:58:
55:7c:bc:26:bd:55:91:09:cf:cd:4f:d2:4a:38:47:57:a3:85:
a9:2a:da:46:10:8e:d0:74:66:a9:02:33:ef:b5:f6:f2:3d:c3:
a3:a7:62:c5:85:64:88:de:06:53:79:46:d0:7a:15:b9:4a:6c:
68:0f:ea:e5:9e:98:ac:56:3f:e5:a5:c5:05:fe:a0:f0:6c:aa:
93:45:3b:9a:b3:69:a9:d5:e9:bf:f0:ce:99:d7:b1:1f:89:45:
02:bd:07:ef:47:3b:54:51:df:23:0e:20:5c:dc:56:ac:72:ad:
dc:28:da:ae:3c:af:50:51:21:fd:00:84:0a:d1:af:be:e9:11:
fd:85:07:b6:65:4b:db:54:e6:a0:46:15:65:a9:5a:e6:5a:00:
11:4e:f2:5b:ef:b2:89:e4:2a:f0:10:2a:f5:de:65:40:51:3e:
ab:1e:43:2f:90:0f:3f:48:96:a2:52:8f:f5:62:88:67:43:d6:
f9:e3:1c:3f:18:8c:cc:8b:25:0a:f2:2d:16:02:3c:4f:7a:2c:
69:fd:be:6d:cc:1c:14:95:62:2a:8b:eb:ce:8d:b3:5e:38:89:
e1:a1:f7:5f:a4:01:da:1d:70:3b:1c:4a:6e:b8:c1:f7:62:08:
25:e1:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:36 2024 by rpki-client on console-ams.rpki-client.org