Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/WEzaUjbrVkvIK7FB3QyfGcW5LJ4.roa
File: WEzaUjbrVkvIK7FB3QyfGcW5LJ4.roa (raw, json)
Hash identifier: 50na6Ricm4DrVYIFO7trQy8ealJoCKYvuAruL/DBgig=
Subject key identifier: 58:4C:DA:52:36:EB:56:4B:C8:2B:B1:41:DD:0C:9F:19:C5:B9:2C:9E
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 0185718332ADDA675A280CC8BDB81EF9FCE8
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/WEzaUjbrVkvIK7FB3QyfGcW5LJ4.roa
Signing time: Mon 02 Jan 2023 08:05:01 +0000
ROA not before: Mon 02 Jan 2023 08:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211607
IP address blocks: 193.3.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:32:ad:da:67:5a:28:0c:c8:bd:b8:1e:f9:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Jan 2 08:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584cda5236eb564bc82bb141dd0c9f19c5b92c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:75:51:4b:30:c4:2a:5e:25:15:b2:18:d4:
02:2d:08:20:e9:6c:56:b5:9a:e9:c0:7c:19:36:9d:
20:a0:e0:ca:19:2b:f7:5c:b3:8c:12:8b:8a:12:04:
e3:42:c1:d9:a4:d7:eb:4c:4c:14:21:34:3e:44:79:
7c:2b:14:fc:c3:76:c5:2e:5b:87:1f:39:05:79:4e:
57:e3:df:97:60:12:09:33:3f:70:e4:74:42:d2:bc:
68:3f:a4:e4:0c:74:07:a0:1e:86:9d:8c:16:f8:6b:
7a:18:7d:46:de:0a:13:47:80:96:35:f8:0e:ec:5a:
65:7a:79:f7:b8:85:f8:6c:bf:4b:ed:26:c7:db:53:
d2:34:37:e2:e1:2b:af:3b:36:7d:6c:c9:8e:cb:1e:
c1:f9:47:c9:91:fd:04:f1:e9:d0:78:1c:be:9e:1e:
f6:fb:97:75:1b:10:bf:63:c8:fe:6a:6f:9c:6b:fd:
21:7b:00:73:24:4b:28:9d:44:3d:0c:29:6d:81:7a:
90:cb:dc:02:06:9a:a2:52:ae:84:8d:c2:38:bf:f0:
94:25:b4:c2:65:aa:c0:52:89:e0:2e:0a:dc:73:7f:
a1:ae:1a:d9:90:84:2e:a9:52:7a:62:2b:0e:7c:65:
c5:0c:91:bb:99:95:45:ec:be:53:4a:b8:cb:19:a6:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:DA:52:36:EB:56:4B:C8:2B:B1:41:DD:0C:9F:19:C5:B9:2C:9E
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/WEzaUjbrVkvIK7FB3QyfGcW5LJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0d:15:31:c6:4c:1a:62:49:56:73:11:38:53:21:e9:d2:74:
b9:47:f3:da:c9:32:bb:e6:b1:79:f4:b7:c2:b5:a0:dc:50:27:
90:4a:87:95:e5:0e:4e:d7:50:97:ec:0a:7f:cc:08:c1:77:bf:
5d:93:68:a1:3b:66:bb:f8:73:3e:02:8f:81:61:5f:ba:74:30:
88:2c:cd:82:f0:e9:a9:b2:5f:3a:f4:58:2f:77:00:8c:a1:bd:
0d:c1:3d:50:8a:d8:61:41:eb:7a:1b:2c:f1:c9:b8:48:44:4b:
6a:67:2f:09:69:fc:77:17:55:9b:e9:98:89:b3:c4:65:72:b6:
e8:9e:89:fb:96:9b:3b:ee:45:05:89:e6:1b:6c:40:0e:6e:96:
d2:7c:c3:3c:be:08:ed:f0:32:91:bf:b1:88:a7:59:b7:7e:70:
d7:a3:38:f0:e8:fd:1f:f1:b6:fa:58:44:ec:b1:00:55:14:70:
9e:98:7e:3b:e8:ee:86:cb:28:ef:e8:9d:ce:3c:9c:2c:a1:3e:
d1:5e:be:e1:b6:8b:8a:37:ee:e9:af:a7:ef:a3:fc:da:11:91:
85:2c:ee:ac:a5:87:f1:0c:51:1e:5c:c4:ae:8e:e5:46:ee:ee:
f3:60:bd:cc:6e:2f:40:76:ed:c7:6a:e1:9d:ca:45:bf:fd:b4:
51:bd:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:18 2024 by rpki-client on console-fra.rpki-client.org