Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CcEqxylWZUnqLg783Gx30dJT2Vs.roa
File: CcEqxylWZUnqLg783Gx30dJT2Vs.roa (raw, json)
Hash identifier: USwNYEkSTbT0L6/08IVkRvTORLksxVlwxvX9/cRWsKU=
Subject key identifier: 09:C1:2A:C7:29:56:65:49:EA:2E:0E:FC:DC:6C:77:D1:D2:53:D9:5B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A446B6B74FD96278252E5DF12583B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CcEqxylWZUnqLg783Gx30dJT2Vs.roa
Signing time: Mon 02 Jan 2023 12:34:53 +0000
ROA not before: Mon 02 Jan 2023 12:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 193.36.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:44:6b:6b:74:fd:96:27:82:52:e5:df:12:58:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c12ac729566549ea2e0efcdc6c77d1d253d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:b8:34:e7:ce:c3:0d:ed:02:1e:4f:42:e4:
29:88:8c:34:2d:26:e2:9f:a6:52:ab:61:c7:b0:89:
47:3b:d5:ae:b8:b7:d1:6b:02:9a:d3:92:b4:b6:eb:
db:a4:66:ca:2b:19:9a:d8:fe:a7:23:49:2a:73:e7:
61:ef:a2:40:55:27:30:15:c0:88:b0:3c:63:2d:b5:
39:0f:12:2c:ee:b5:2c:4f:b8:2c:dc:1a:39:ca:fb:
6b:d4:9d:c5:63:a8:3a:6e:5a:26:33:21:af:ac:80:
ec:e4:6e:41:77:92:29:81:fb:ec:1d:c4:c4:a7:ce:
0e:5a:78:a6:a9:58:66:70:40:f2:92:fd:b6:63:ed:
f8:1c:07:01:9f:27:c5:20:e0:e1:52:10:ae:e5:37:
20:3a:8d:41:26:62:fa:8a:5d:c3:45:1d:82:9c:06:
68:61:c7:ae:8b:b8:0d:af:8d:43:23:ab:fd:7f:5a:
5c:7f:54:55:0d:98:a4:92:5c:d1:b4:51:98:ab:68:
b0:ac:21:c9:08:b7:96:b7:32:68:81:8f:9a:15:a1:
2a:99:bb:4d:30:e3:2a:fc:2b:0c:54:4f:51:20:a1:
13:21:82:dc:db:a9:49:c9:fd:88:f8:71:c5:41:24:
28:af:1c:17:87:7e:9a:e0:28:60:ca:69:dd:45:18:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:2A:C7:29:56:65:49:EA:2E:0E:FC:DC:6C:77:D1:D2:53:D9:5B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CcEqxylWZUnqLg783Gx30dJT2Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c1:3a:fc:e8:2c:7e:1e:8d:18:af:48:5b:4b:57:8f:f3:ab:
3d:21:2c:91:4f:cd:28:83:ef:4c:e5:48:14:18:aa:2d:2e:36:
ef:40:be:77:03:f5:bb:22:49:97:1d:50:76:49:0b:f9:b8:51:
c4:6f:10:a7:f8:34:f3:4b:20:29:03:aa:67:4b:1e:1d:fc:d5:
2c:67:55:52:be:a0:f5:00:cf:b9:1b:d1:4a:bb:10:d4:ca:98:
10:57:d8:9c:4c:dd:a7:0f:27:89:49:c9:d6:53:4d:30:71:a6:
c5:36:e6:93:24:88:bc:09:f6:e8:2b:27:cf:f4:70:e3:7d:46:
21:ca:cf:ba:3a:38:da:de:3f:78:f9:53:d3:ed:c0:b4:6e:54:
a3:60:27:45:54:92:87:a7:dc:3d:b9:b2:37:51:7b:d9:c4:81:
24:f4:51:d4:4d:50:fc:9f:48:be:1d:9d:b3:26:c8:50:b5:76:
09:f1:1f:d2:ab:01:80:6c:c5:da:0a:ac:8a:5d:45:54:6c:f7:
5b:f1:58:89:70:26:b3:54:5d:ac:6a:bd:b5:93:75:d8:22:f3:
85:53:a5:48:03:8c:b7:83:86:ed:07:23:4a:b3:55:a8:44:03:
98:a5:1c:cc:df:37:93:6e:9c:a5:fc:74:97:91:91:34:75:0a:
ce:35:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org