Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/V203xHxrpRKAEOGpoRErP2n2zWs.roa
File: V203xHxrpRKAEOGpoRErP2n2zWs.roa (raw, json)
Hash identifier: jMkbEzLVxmspprSJpwXLFD8N9spH3b2bDQBHoU1AnsE=
Subject key identifier: 57:6D:37:C4:7C:6B:A5:12:80:10:E1:A9:A1:11:2B:3F:69:F6:CD:6B
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 018572310DE681749EAD2342C46BC7C06CEE
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/V203xHxrpRKAEOGpoRErP2n2zWs.roa
Signing time: Mon 02 Jan 2023 11:14:55 +0000
ROA not before: Mon 02 Jan 2023 11:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.162.44.0/24 maxlen: 32
2a10:f0c0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:0d:e6:81:74:9e:ad:23:42:c4:6b:c7:c0:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 2 11:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=576d37c47c6ba5128010e1a9a1112b3f69f6cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:87:b8:52:6e:67:1d:8a:8d:39:c6:45:34:
81:31:d3:a4:ba:cf:e0:ad:59:e7:3d:3b:cc:14:d0:
eb:58:dc:47:89:d4:e0:77:a0:f0:e5:32:ab:c6:e8:
d3:b7:81:16:7c:cd:5a:de:cd:ce:6f:61:b1:87:83:
c7:a9:4e:1a:09:5c:af:b1:08:a0:5d:fe:2b:a6:a0:
28:38:31:58:1e:8e:d0:b4:a1:6d:4e:d4:f5:58:9a:
be:b8:c8:ae:c3:22:65:60:58:90:92:57:50:b7:f8:
61:41:f9:ff:a5:fa:e1:1b:61:75:66:9f:64:5a:85:
25:b0:9f:d5:2d:13:4c:06:d7:5b:30:e3:37:29:c7:
d4:71:07:ec:84:fc:d6:71:c4:5b:f6:01:4f:3a:9e:
af:92:72:42:ed:b1:6b:b5:66:30:29:13:fb:7e:03:
3b:ed:fe:b7:91:33:e7:bf:e8:21:6f:55:28:df:63:
5e:f7:0e:b6:86:49:a0:9e:b2:4e:8c:81:94:68:bb:
be:a4:ca:df:58:c9:21:e7:e2:5a:b0:65:51:c5:97:
91:e7:8c:b4:80:49:3f:08:66:f6:0d:40:8d:bb:71:
f7:bb:a8:0b:12:90:e5:e1:52:43:01:e9:50:df:94:
43:7f:09:75:0c:9e:0b:8f:74:12:db:8f:f3:03:a3:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:37:C4:7C:6B:A5:12:80:10:E1:A9:A1:11:2B:3F:69:F6:CD:6B
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/V203xHxrpRKAEOGpoRErP2n2zWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.44.0/24
IPv6:
2a10:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:65:54:77:b5:d4:ab:1a:83:d3:6d:0f:4a:1e:e1:a0:60:30:
b4:f9:90:58:0b:9e:13:55:8a:37:52:e4:23:28:0b:2a:fb:fb:
43:df:f8:0f:26:e0:a2:8f:1a:59:78:9c:38:64:02:cb:47:bf:
12:cf:9f:b5:5a:50:a0:b2:4b:3c:bf:60:6c:45:70:86:8d:d7:
74:43:3e:0d:20:c5:cb:78:87:ed:cf:38:08:82:46:3d:f4:d6:
4c:63:41:1f:93:b5:05:1a:60:3f:2d:be:42:22:da:28:c7:f4:
24:ed:63:96:e2:d4:e7:7f:92:db:42:a6:8e:b3:63:af:0b:64:
3d:83:fa:5e:b7:e0:e3:94:0a:d7:2e:fc:80:e7:d9:ca:96:45:
54:a9:a6:b6:85:1d:36:4a:88:5a:6e:72:1b:97:a2:ed:1d:f7:
c3:c5:d3:b4:45:c0:54:db:72:ab:17:40:6f:59:59:74:63:26:
17:ea:69:0f:75:67:a1:38:f5:e2:45:c6:a0:3f:b8:c1:28:fe:
53:7e:e8:91:a2:93:d2:56:91:a3:d6:c0:c5:a1:f5:94:07:70:
fd:92:de:f2:0d:62:45:6f:57:63:06:97:46:f8:79:cb:4e:af:
d4:9a:c9:c5:20:2c:b3:8b:85:ef:66:ba:1b:f4:e1:58:bc:01:
a7:12:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org