Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/_Sa1vsV42bJpbKolemiepSPfCO0.roa
File: _Sa1vsV42bJpbKolemiepSPfCO0.roa (raw, json)
Hash identifier: yb5G9GJ13d3ozfKytM+PUdRf4Qd3sUVSdxrpgOClrNg=
Subject key identifier: FD:26:B5:BE:C5:78:D9:B2:69:6C:AA:25:7A:68:9E:A5:23:DF:08:ED
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 01856EB9123219DAE323FDEBCF40AD3168FF
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/_Sa1vsV42bJpbKolemiepSPfCO0.roa
Signing time: Sun 01 Jan 2023 19:05:00 +0000
ROA not before: Sun 01 Jan 2023 19:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.0.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:12:32:19:da:e3:23:fd:eb:cf:40:ad:31:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jan 1 19:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd26b5bec578d9b2696caa257a689ea523df08ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:fe:58:96:8a:d1:b7:f8:56:04:2b:1f:97:
46:2f:90:5b:2a:f9:16:0f:ce:6e:b7:85:d7:6f:a1:
ae:47:6e:6a:9c:13:41:ae:2c:68:85:5a:f2:31:25:
9d:64:f5:e6:f7:d6:d7:08:6c:1a:46:a3:e5:b3:6d:
7e:5b:f4:82:78:12:b6:14:50:3b:ac:d1:b5:e8:b5:
4e:ab:9b:68:a6:db:33:28:19:b2:5c:d5:ac:d5:eb:
46:6d:80:30:a5:7b:fe:67:ff:b0:de:8c:fa:f5:c8:
c8:7c:92:3f:82:ca:d7:fc:a1:29:ad:10:aa:b9:5b:
70:33:e1:50:33:99:58:4d:07:26:7f:16:c3:e5:8c:
a8:a6:6e:a2:a6:38:d5:7b:d6:fb:12:2a:ad:ba:37:
fa:49:d3:77:74:94:1f:a9:7e:6c:68:6f:1d:09:fd:
40:98:3d:72:82:4d:60:bd:e3:a4:39:e6:14:c7:a6:
17:1e:99:a5:9c:fb:f3:c4:2e:ce:8d:93:40:a3:82:
0c:77:32:0f:3c:87:c8:b5:6b:7d:b6:93:88:7e:ea:
0b:f7:5f:7d:4b:22:b1:f7:dc:7a:46:2a:bf:f0:14:
51:aa:0e:68:5e:ef:c1:69:7c:b8:33:7a:ec:db:bd:
11:7a:b5:71:99:f9:02:82:ac:a6:da:bc:14:fe:ce:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:B5:BE:C5:78:D9:B2:69:6C:AA:25:7A:68:9E:A5:23:DF:08:ED
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/_Sa1vsV42bJpbKolemiepSPfCO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.181.0/24
Signature Algorithm: sha256WithRSAEncryption
51:28:88:a0:04:05:11:e2:ca:7f:0f:17:50:f3:50:e9:32:46:
01:a2:b9:0c:93:a3:fd:9d:a7:85:70:eb:fa:64:4d:03:7e:3f:
38:62:a4:a6:4b:1f:0e:c8:24:a3:68:fd:6b:0b:4a:e2:62:bd:
53:c4:a0:b5:59:16:82:c9:bd:e8:f4:8a:e0:e2:70:79:91:7c:
39:45:2c:0b:7b:41:56:d7:e3:2c:71:7d:ca:c1:c6:2a:28:cf:
a0:16:28:7a:f2:4b:ed:4d:56:f5:c4:3a:5a:78:e7:80:aa:63:
06:8e:b7:ab:c0:6e:fe:16:37:66:93:30:c3:e7:d5:c7:bb:8c:
a4:01:02:39:51:8a:c5:db:0c:38:d2:21:bc:c5:c1:ed:f6:4a:
9a:b2:c7:af:87:f2:9a:65:18:7b:09:3b:0d:07:27:8e:61:12:
c6:3b:0f:77:42:30:84:44:2f:be:58:be:49:5e:67:23:a9:6b:
52:1c:89:74:4f:e7:8e:88:0a:58:4a:37:d6:39:51:a5:e9:74:
d7:6b:c7:12:39:a0:b1:dc:80:29:48:f1:af:f2:4f:06:a3:7a:
94:43:22:07:55:a2:e0:e2:cf:98:ce:81:85:97:86:4b:3e:df:
29:6b:a8:d3:21:2e:7f:58:4b:45:bd:5e:33:87:b2:5c:bb:6b:
37:84:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:15 2024 by rpki-client on console-ams.rpki-client.org