Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/tsp2zQ9e4o-ec7Jo42UQET2xeR0.roa
File: tsp2zQ9e4o-ec7Jo42UQET2xeR0.roa (raw, json)
Hash identifier: 5bImvmyHOj+sh/t/ImikjpZUwcbqq1TGcjSsBMt74dE=
Subject key identifier: B6:CA:76:CD:0F:5E:E2:8F:9E:73:B2:68:E3:65:10:11:3D:B1:79:1D
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 01856C5CA6F4D9F9CB85081B6DD9C325C401
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/tsp2zQ9e4o-ec7Jo42UQET2xeR0.roa
Signing time: Sun 01 Jan 2023 08:04:49 +0000
ROA not before: Sun 01 Jan 2023 08:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200645
IP address blocks: 193.104.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a6:f4:d9:f9:cb:85:08:1b:6d:d9:c3:25:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Jan 1 08:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6ca76cd0f5ee28f9e73b268e36510113db1791d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:ce:74:8e:0b:34:56:3d:63:00:cc:6e:cf:
88:1f:b1:ad:84:62:69:5e:66:ed:a0:87:84:ef:45:
7a:c2:77:82:90:06:b2:6c:e2:36:8d:48:84:4c:38:
21:44:74:2d:ce:1f:93:48:bc:65:ba:24:5c:a3:28:
46:a6:59:d5:a2:32:30:63:8d:2f:78:07:fc:b3:9f:
58:65:10:0b:34:96:4c:dd:9e:0a:47:a5:c1:14:69:
7e:29:c2:4a:75:9f:ff:ba:c1:4c:f6:06:ab:97:a1:
cf:b4:4b:96:ab:da:01:c4:8c:0e:0b:07:9f:df:c9:
9a:e3:b8:85:6a:a9:ae:f2:08:ad:6a:da:a9:30:92:
fd:87:c3:5d:25:a1:42:6d:4a:29:23:c1:3f:e4:92:
71:49:78:81:d8:f6:9a:77:b2:be:6d:ff:7d:10:4a:
a2:20:fc:ca:10:10:c7:32:38:28:af:56:b9:a5:27:
d1:fc:bf:9c:f8:8e:8b:84:ad:5a:3c:ae:fb:25:7d:
4f:35:7d:17:29:1c:be:9d:e8:37:57:c7:09:52:f8:
d8:36:6c:38:19:82:04:b5:67:de:29:e9:b6:40:5b:
69:1a:d3:9d:60:e0:e4:33:ef:cc:16:bb:05:db:db:
c4:1f:ee:04:4b:bf:17:46:85:b8:84:bd:60:56:70:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:76:CD:0F:5E:E2:8F:9E:73:B2:68:E3:65:10:11:3D:B1:79:1D
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/tsp2zQ9e4o-ec7Jo42UQET2xeR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.29.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f0:1d:71:04:ab:59:24:b6:d6:1a:ae:a2:31:b7:1a:58:fe:
9e:66:44:2b:3b:73:fe:32:2e:ac:bb:b8:4e:dc:4f:2e:eb:da:
6e:53:a0:8c:7c:49:e0:e4:e8:33:1c:b2:6b:08:1a:2d:99:e2:
52:6c:c6:bf:5b:71:3c:b8:d9:2b:54:53:da:67:a5:da:e4:fd:
97:6a:4c:47:06:16:38:64:7a:6c:dd:16:24:06:e1:2b:27:8e:
12:bb:55:fc:7c:22:1d:58:d9:6b:80:20:70:71:3b:7f:9a:b4:
ad:2d:90:b9:f6:f1:1e:79:fe:b0:f0:e4:26:27:c6:5b:34:a6:
b2:b3:01:cf:76:86:3f:5c:c0:c4:1e:6b:ea:a5:35:0e:ff:de:
7d:74:e2:45:87:b1:94:93:14:34:67:d8:8c:14:08:e2:ff:e5:
42:68:b9:c7:fa:6a:e1:4e:d3:ce:58:2a:50:56:ad:f1:39:cd:
6c:f0:f3:f7:24:0d:56:ec:3e:5d:80:06:1c:4b:25:cb:cb:6c:
71:b4:fe:8d:5c:3a:86:5e:d2:f9:13:63:3f:fc:15:27:98:3a:
85:ff:c0:dc:29:01:02:11:1c:79:b4:9c:6c:75:ba:c8:bf:b6:
eb:45:60:ef:7d:e5:38:0f:b7:17:60:1f:0e:e5:0c:9f:df:ee:
c0:6e:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org