Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7fK7_A3BZ5oESiKoCRs4aoxpJqU.roa
File: 7fK7_A3BZ5oESiKoCRs4aoxpJqU.roa (raw, json)
Hash identifier: +AOk5XCXOfToC3GYHczOKuszEhaMUgbAHLCDI0xRN60=
Subject key identifier: ED:F2:BB:FC:0D:C1:67:9A:04:4A:22:A8:09:1B:38:6A:8C:69:26:A5
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018571278AA8712BD3F1009AB52A2CAAED13
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7fK7_A3BZ5oESiKoCRs4aoxpJqU.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44899
IP address blocks: 193.110.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8a:a8:71:2b:d3:f1:00:9a:b5:2a:2c:aa:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf2bbfc0dc1679a044a22a8091b386a8c6926a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:d6:89:88:bb:1b:99:f7:23:42:c4:7c:87:
b0:62:1f:1e:83:b3:77:1d:c5:bc:69:43:1e:bb:48:
0a:95:8e:4e:39:12:fe:b7:82:da:f6:d6:f1:99:5d:
3a:4f:5d:ba:a4:97:2c:86:46:df:65:57:51:6e:23:
b2:9c:82:84:11:87:59:d8:3d:9d:7d:d4:ac:af:98:
8b:d1:84:6e:6b:71:5d:c4:65:73:a9:0a:44:73:66:
6a:ae:c9:96:19:43:89:13:4c:ed:69:4b:2a:9d:98:
2d:b9:0c:77:b9:ce:f8:04:01:d7:1b:8e:9b:da:97:
cc:74:62:e7:9e:35:4e:eb:30:70:f3:29:fd:6c:da:
75:f0:0c:b7:7f:50:18:d1:ca:70:b2:47:4f:c1:91:
e7:9f:20:5f:18:a7:0d:f2:d9:08:13:6b:df:cf:c8:
82:f6:46:1d:f9:b9:03:10:9c:70:cb:ff:8f:9b:c1:
7f:63:d1:96:7e:bb:98:17:1e:81:ec:e6:f5:9b:b2:
bd:4f:40:bb:05:20:8c:54:b3:a3:2b:38:5f:57:76:
d8:67:6c:54:39:f4:ca:bb:ba:0e:98:8b:ff:6a:94:
fe:ae:21:e3:7a:b3:bc:8f:f8:cc:16:8e:ce:32:0c:
6f:be:f1:a1:1d:95:f1:7f:ca:00:4f:c6:6a:05:89:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:BB:FC:0D:C1:67:9A:04:4A:22:A8:09:1B:38:6A:8C:69:26:A5
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7fK7_A3BZ5oESiKoCRs4aoxpJqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:e0:f7:ac:f9:52:03:a7:58:fd:40:a6:65:f6:92:13:fb:61:
bd:bd:52:ab:39:9d:82:bd:09:ee:fa:5d:b8:44:ab:96:d5:cf:
31:7f:35:1d:91:2c:9d:c7:b4:3f:29:94:38:44:a7:dd:66:31:
a1:5d:02:ef:df:ea:80:51:23:91:33:07:6b:85:4e:82:86:6b:
09:d1:9a:9f:bd:7e:cc:92:ce:3a:a4:7b:90:b1:bf:89:5a:1e:
26:ba:30:df:ce:87:85:75:2f:63:a5:ed:5f:64:b2:40:a3:a8:
76:ea:35:f7:9a:d3:17:76:12:04:79:bc:05:1c:50:f4:4b:32:
7e:60:36:7a:4d:f3:7a:f7:58:7f:32:30:2f:e9:e3:7f:e8:5a:
6f:2b:d1:3d:0a:8c:47:ed:20:b5:7b:74:86:72:57:a3:55:82:
53:d0:a6:44:67:db:f8:4e:00:12:c9:46:a3:40:0f:a5:3f:06:
e0:57:60:51:5c:ce:7a:ad:ec:3c:3f:37:1a:d5:7f:5e:f2:bf:
e4:bb:01:26:12:c0:78:0a:b3:e5:65:db:20:63:49:ed:2e:52:
4e:a6:0e:9c:85:aa:54:ec:13:0c:3b:27:58:92:0b:cc:26:9d:
ef:83:ff:17:bc:64:c3:a7:27:05:c2:b2:cd:97:ff:10:52:dc:
0c:d8:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org