Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/9_CQnrKmpHBrmK2g4E748bu2r6g.roa
File: 9_CQnrKmpHBrmK2g4E748bu2r6g.roa (raw, json)
Hash identifier: nsFzHQLM05SwfV1Y0ZSvTdV+oBdbIN1bmGRHt4B0Hkg=
Subject key identifier: F7:F0:90:9E:B2:A6:A4:70:6B:98:AD:A0:E0:4E:F8:F1:BB:B6:AF:A8
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 01893E8831DD63D670FBDD086DB94868EE00
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/9_CQnrKmpHBrmK2g4E748bu2r6g.roa
Signing time: Mon 10 Jul 2023 06:41:00 +0000
ROA not before: Mon 10 Jul 2023 06:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44138
IP address blocks: 193.28.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:88:31:dd:63:d6:70:fb:dd:08:6d:b9:48:68:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Jul 10 06:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f0909eb2a6a4706b98ada0e04ef8f1bbb6afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:00:d6:7e:14:d4:0e:7e:56:93:84:a2:73:
2a:e3:12:13:4f:74:63:0e:66:0a:70:33:c8:48:54:
eb:8f:d4:1c:83:18:cc:92:2e:dc:57:c3:28:9d:02:
67:de:65:fe:ff:5d:84:ba:f5:b9:07:99:41:9d:bc:
9a:bd:3a:63:e2:6d:61:de:b1:b9:91:26:2b:27:37:
0c:1e:ce:9d:f8:27:23:f9:3a:6d:08:8a:59:9d:d5:
8a:9c:8e:c8:1a:6f:e7:3c:7c:78:e3:b7:f1:fd:d5:
91:d3:4e:4f:f6:95:36:e2:27:29:30:d4:35:8a:aa:
ab:6f:e8:a0:87:4f:dd:db:c7:80:c3:3a:dd:31:43:
fd:c8:75:5d:72:fa:1b:88:cf:3c:0f:62:d5:9b:a8:
40:f9:ec:bc:3a:92:60:de:8f:13:d8:55:8b:c2:9d:
a7:76:57:38:f2:81:e0:9e:fc:36:6c:5b:58:83:43:
8b:45:77:24:0b:57:ed:8d:96:32:db:7a:cc:97:06:
74:fa:e5:1a:f3:f8:b5:b3:67:b1:33:f4:42:04:24:
10:dd:d6:32:a1:b0:2a:14:ff:9f:07:cd:fc:51:5a:
89:a5:16:71:43:5a:0b:a4:50:06:b0:11:4a:e8:6c:
87:da:7e:e6:85:b9:4c:a8:f7:60:fa:c4:da:8a:d7:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:90:9E:B2:A6:A4:70:6B:98:AD:A0:E0:4E:F8:F1:BB:B6:AF:A8
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/9_CQnrKmpHBrmK2g4E748bu2r6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6e:c6:db:30:34:4a:28:8d:55:75:57:d5:64:47:9c:7e:87:
08:9c:e4:68:ac:c3:b2:3f:e1:91:58:d3:ba:ca:51:38:21:49:
75:2f:d5:f3:e4:4e:0d:13:61:2d:86:22:ed:46:54:77:d7:87:
1f:24:30:28:a1:00:e7:03:32:54:e8:0a:7e:d3:32:8a:d7:0c:
81:79:38:b7:f5:51:57:ac:bb:d4:9d:e5:c1:0b:6b:a6:6e:56:
33:f3:e2:e8:5d:05:a2:16:c1:b6:a9:29:37:f8:cd:e5:32:7a:
5d:20:b2:a0:02:09:71:0c:43:c2:bd:e2:9f:ef:e2:a4:99:58:
07:0b:c9:c3:88:05:1a:18:ea:d7:f6:35:cd:08:f3:09:63:a2:
af:27:30:cd:81:0c:46:75:7c:ae:44:3e:d3:60:d5:8f:a3:98:
29:dc:2e:e0:ce:73:17:ef:99:22:89:e0:be:13:aa:02:38:84:
29:b7:01:fb:1f:13:51:c9:ab:47:c3:6d:81:58:98:cc:0c:63:
19:7a:0c:27:16:c6:be:88:fd:d0:96:ef:6f:27:1d:d8:9a:01:
4a:f6:ed:5c:66:33:c4:24:e6:99:f8:82:dc:c9:b7:22:52:1b:
bb:36:89:4c:95:a6:57:66:ed:09:65:48:fa:68:4e:cc:ce:1f:
c6:b7:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:57 2024 by rpki-client on console-ams.rpki-client.org