Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/INPU6aTHKNtZ_BRjwKHk1lHLW2M.roa
File: INPU6aTHKNtZ_BRjwKHk1lHLW2M.roa (raw, json)
Hash identifier: MshftG391jdMvz2jSXy+TLbWBgD74nyn+qXGDMGn0mo=
Subject key identifier: 20:D3:D4:E9:A4:C7:28:DB:59:FC:14:63:C0:A1:E4:D6:51:CB:5B:63
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01856C9CE38BD132433E7831FBFC05782D76
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/INPU6aTHKNtZ_BRjwKHk1lHLW2M.roa
Signing time: Sun 01 Jan 2023 09:14:59 +0000
ROA not before: Sun 01 Jan 2023 09:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47129
IP address blocks: 193.34.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:e3:8b:d1:32:43:3e:78:31:fb:fc:05:78:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d3d4e9a4c728db59fc1463c0a1e4d651cb5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:0e:a8:a1:b4:59:3e:08:24:16:43:64:bf:
ab:e1:b8:a9:06:23:59:21:b9:4e:69:c4:f6:a0:e7:
ee:c9:a4:aa:0b:20:35:f5:51:24:01:1e:99:90:08:
60:f9:d5:b6:f5:10:1d:39:3a:af:25:d7:83:04:66:
87:a1:99:6f:fb:f3:e5:83:dd:9a:35:33:01:45:a7:
4d:f5:65:be:17:1b:df:4f:eb:99:ef:50:dc:48:1f:
f9:4a:21:25:92:68:b5:a4:4d:8d:5a:7c:e6:5a:c6:
82:83:0e:34:6e:5c:ce:e2:d0:e5:e2:23:cb:44:88:
37:9f:e3:ea:8a:ec:06:56:65:7d:8e:45:98:74:01:
5b:a3:7b:e8:1f:59:4a:9d:10:be:96:b2:09:be:50:
44:e1:f0:c1:fe:67:a3:14:f0:bb:f5:1d:ba:2c:4a:
2e:6b:ac:ea:3e:03:88:a6:74:f6:f1:b4:f9:05:95:
43:f3:5a:7c:5c:d5:d7:85:80:0b:ba:ca:4b:15:83:
bf:8a:6a:44:91:41:41:9c:8b:d5:b0:58:e4:96:8c:
66:12:26:c7:fc:8d:41:6a:b8:d5:43:b8:f0:94:14:
a8:c7:95:9d:0e:b7:90:78:2a:eb:11:46:86:1b:f5:
c7:9f:85:22:7f:7a:eb:cd:10:f8:2c:4a:99:09:f4:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:D4:E9:A4:C7:28:DB:59:FC:14:63:C0:A1:E4:D6:51:CB:5B:63
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/INPU6aTHKNtZ_BRjwKHk1lHLW2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1f:a9:e2:90:d3:cf:10:ca:03:54:7b:c3:89:dc:61:2b:b9:
3c:99:de:dd:fa:2b:52:3f:70:15:39:6e:af:25:bc:db:a5:80:
18:6a:1c:1a:32:d4:06:b2:04:49:06:4b:8e:c1:df:9d:7b:50:
b6:2a:0c:9c:fa:3e:97:b9:cb:ff:9b:43:7a:45:8a:ce:17:4e:
af:6c:a9:27:23:6c:24:41:30:a0:da:6b:d7:d6:38:77:2a:f1:
b0:29:48:ed:68:7f:2b:3e:a1:d8:fd:58:78:0d:d2:77:ff:94:
28:4c:71:bc:bb:d6:d5:53:10:e1:ae:3c:18:65:4c:8a:2b:6f:
b2:fe:d2:70:c9:92:70:b8:3c:71:5e:a0:74:00:00:51:26:08:
2c:2d:1c:62:c9:50:2c:0a:30:e7:bd:4a:c8:26:d0:09:8a:d3:
83:f5:a6:88:fe:c6:8e:f6:9e:32:15:dc:0e:c3:95:37:31:5d:
23:b7:9a:b1:0a:8a:60:16:61:6f:13:ec:a7:56:9d:4d:85:ed:
df:b7:96:eb:c8:50:81:e4:77:41:c9:e9:b5:ad:a3:6c:74:05:
30:53:00:81:0b:68:c8:08:fa:55:4e:19:6d:4f:47:10:91:51:
73:7b:5e:3a:27:a9:57:a5:8f:15:07:3d:c5:c5:53:fe:b5:a4:
3a:50:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org