Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/57HJsYv40_Yo4aijouQsEMBMoxM.roa
File: 57HJsYv40_Yo4aijouQsEMBMoxM.roa (raw, json)
Hash identifier: ecGQ5KJJ4bG1xRnqtL6/vN5nKxfXNmkKBYDQ7t9y580=
Subject key identifier: E7:B1:C9:B1:8B:F8:D3:F6:28:E1:A8:A3:A2:E4:2C:10:C0:4C:A3:13
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 01856F9DE246652EACA961194D35BBF3F99F
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/57HJsYv40_Yo4aijouQsEMBMoxM.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 193.176.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e2:46:65:2e:ac:a9:61:19:4d:35:bb:f3:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7b1c9b18bf8d3f628e1a8a3a2e42c10c04ca313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:3f:14:94:7a:8f:ed:84:fd:ed:04:cb:00:
ba:93:52:2b:10:94:75:5a:4f:eb:66:3d:22:b0:17:
c1:a8:eb:ac:15:25:82:f9:6d:02:d1:bf:04:d4:f5:
9b:92:21:35:a2:08:07:73:3c:36:dd:27:93:07:ee:
8d:ca:ea:1e:34:1f:45:f2:b3:2f:0e:d9:0c:4a:c9:
03:56:86:c3:ff:d9:a5:60:0d:0c:69:a0:79:ae:0f:
a7:3c:64:3f:39:7d:95:b8:2c:ac:f2:09:0d:73:8f:
bc:7a:da:45:08:f4:99:35:c2:61:cb:08:ff:49:b9:
d7:f6:32:17:18:be:61:65:9f:16:2c:11:7e:10:87:
a8:ac:24:43:3f:7f:52:9c:43:b6:1d:39:43:e7:c1:
d0:de:5e:b7:61:12:83:df:a2:29:78:a9:ca:15:ac:
a7:10:d3:94:fe:36:f1:ac:26:ca:41:a4:b7:48:54:
19:df:6b:d1:70:b5:54:80:2d:48:1c:98:b0:7a:3b:
f9:98:2b:7f:b3:8d:1c:dc:0b:53:5d:e1:7f:09:2b:
c7:49:62:e9:61:fd:50:d6:10:6b:1c:54:2a:3c:e8:
43:36:be:b5:a2:0c:e9:54:95:f4:0a:b3:24:95:ad:
13:d2:26:06:80:85:1c:06:8d:5a:26:e4:4e:1c:ae:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:C9:B1:8B:F8:D3:F6:28:E1:A8:A3:A2:E4:2C:10:C0:4C:A3:13
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/57HJsYv40_Yo4aijouQsEMBMoxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:63:25:17:9a:85:40:0e:4b:5e:57:ad:a9:7a:d1:92:69:30:
b7:1b:01:18:a6:54:3d:e8:36:53:22:b2:78:f2:ea:16:0c:fb:
98:87:b7:02:7e:09:0f:a6:93:a0:09:38:79:f1:06:3e:b4:66:
88:04:7f:b4:73:c7:9c:72:f4:d7:22:c2:8a:67:3d:d7:fe:85:
d9:31:a2:33:ba:db:5c:6a:b9:7d:6f:85:7b:6d:17:a6:0d:70:
5b:32:11:ad:b1:7d:2e:f5:07:1a:6e:ad:5a:a6:c3:b1:ce:e9:
ce:cf:d3:c5:bc:af:f1:d6:3e:9b:9e:b2:60:9f:eb:f4:8a:1b:
74:d6:aa:68:5b:10:83:20:3c:59:00:3c:52:24:c8:81:cd:ff:
07:68:47:a2:10:5c:27:5d:98:f1:99:7d:34:37:27:e0:a0:2b:
c4:4e:59:aa:d8:27:ad:3d:49:1d:50:52:06:12:d1:14:d7:59:
d9:0d:30:5c:44:9b:df:98:d3:07:cd:b8:36:d3:2a:53:7c:e7:
82:66:6b:d3:f3:db:13:01:68:39:39:2c:c1:79:8b:18:fe:f7:
15:d9:c2:a3:86:41:4b:ba:50:ac:5c:2c:ff:64:c9:90:42:c3:
4e:ea:24:70:8d:6a:b4:09:7f:2c:87:b5:4b:0f:2b:4f:db:df:
02:3e:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org