Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/xveI6oOzG8Y4emTgT48jnMSxpXw.roa
File: xveI6oOzG8Y4emTgT48jnMSxpXw.roa (raw, json)
Hash identifier: 0xmX08divdRBhxuheqNZr1NXH2Yx47NyrpRIOSoqGgc=
Subject key identifier: C6:F7:88:EA:83:B3:1B:C6:38:7A:64:E0:4F:8F:23:9C:C4:B1:A5:7C
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 01856C53CCB7F349E2741F1D3384B720BFD2
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/xveI6oOzG8Y4emTgT48jnMSxpXw.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42074
IP address blocks: 193.108.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cc:b7:f3:49:e2:74:1f:1d:33:84:b7:20:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f788ea83b31bc6387a64e04f8f239cc4b1a57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:ab:d0:31:f4:d3:2f:9a:85:d1:c4:6a:32:
f5:af:c2:09:25:9e:e2:99:a2:58:2d:48:fd:c5:2c:
eb:06:31:c1:72:55:2e:48:b6:07:d7:62:a9:bc:5c:
a5:af:30:4e:7c:b3:93:2e:7b:a9:2b:60:98:af:43:
19:9c:d4:49:7b:cd:b3:05:4a:a2:42:95:da:2f:f9:
04:a2:e5:28:2d:34:6c:5f:92:92:ce:63:e7:f8:b6:
c7:d1:87:f3:a2:e4:17:d1:f5:69:e0:1d:ef:1a:e9:
cc:35:22:11:63:18:02:7b:f1:e0:f6:74:a5:ce:d5:
71:23:70:cc:54:86:c0:69:8f:97:e2:4c:e1:b2:c8:
3e:7f:53:66:e9:06:a8:03:e8:27:4b:0e:9d:0a:28:
31:5b:a3:d5:ba:fb:40:56:fb:6b:5b:eb:d5:88:b0:
76:a4:0d:43:40:e5:43:04:3a:01:8f:cb:1c:01:33:
b7:a3:55:dd:3f:d8:77:45:93:f9:18:31:0e:05:80:
ed:68:d8:f4:a0:ee:d0:ea:d8:47:8b:63:18:d3:04:
c8:fc:6a:4f:01:ed:ce:cd:4d:c1:dd:ff:9e:0b:ee:
5b:a3:a3:6a:f5:86:d6:b8:e2:9b:22:42:c7:f2:d8:
36:51:d8:4d:65:7d:f5:b1:18:e1:ae:1b:c7:aa:8b:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:88:EA:83:B3:1B:C6:38:7A:64:E0:4F:8F:23:9C:C4:B1:A5:7C
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/xveI6oOzG8Y4emTgT48jnMSxpXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.241.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f1:a6:29:dd:34:da:e6:b4:28:67:d9:bc:04:4d:15:6d:48:
65:80:65:57:fd:f9:41:16:f7:ad:be:f9:d7:45:a0:60:10:51:
38:dc:26:1c:22:5f:0e:af:2e:6c:74:59:f0:4a:d8:f6:d4:d9:
2e:d9:8f:7e:5e:a2:bf:ff:ad:99:69:95:c5:4f:2c:36:5f:3f:
b6:23:39:fc:59:13:87:76:21:a6:3b:19:a8:44:ec:4d:90:0c:
34:e0:f9:fa:eb:60:d3:e2:d4:c1:d0:78:0b:27:44:94:23:94:
02:b6:69:e7:b5:32:26:30:7c:24:cd:c4:10:6d:85:70:e9:bc:
58:a7:31:e6:1f:83:cb:09:1d:7b:21:34:f2:7a:e3:5c:c1:9b:
d1:79:90:b5:10:84:c5:40:fc:cd:61:5f:c4:3e:50:1c:9c:4d:
d8:3b:b0:bb:71:86:71:99:25:94:96:e6:98:bc:e9:35:30:85:
c8:a3:88:04:96:ce:05:82:1e:9a:ac:0a:43:bf:38:74:02:fc:
23:91:0d:04:b0:74:22:43:95:51:1f:0c:2a:cd:7a:8d:6e:83:
59:fd:af:f8:66:ea:93:6d:a6:2e:2a:c0:5c:9f:9b:ef:92:db:
bb:06:83:13:8c:bd:3b:34:76:da:c4:e8:03:4d:15:6d:a0:aa:
98:80:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:56 2024 by rpki-client on console-ams.rpki-client.org