Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/24Dk0Pk1pVib77VYonXoH3gpPKc.roa
File: 24Dk0Pk1pVib77VYonXoH3gpPKc.roa (raw, json)
Hash identifier: hz9M2aqQnEg/w1IUD68iqnVVmcIvdRJ+2j546KA5nnE=
Subject key identifier: DB:80:E4:D0:F9:35:A5:58:9B:EF:B5:58:A2:75:E8:1F:78:29:3C:A7
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187EC3B0BCC11DBF5D87643AF021D005E53
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/24Dk0Pk1pVib77VYonXoH3gpPKc.roa
Signing time: Fri 05 May 2023 14:05:05 +0000
ROA not before: Fri 05 May 2023 14:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 193.109.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:3b:0b:cc:11:db:f5:d8:76:43:af:02:1d:00:5e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 5 14:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db80e4d0f935a5589befb558a275e81f78293ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:c7:c3:f4:80:7e:48:22:1c:b3:db:4c:79:
70:30:c6:81:23:98:87:15:e0:eb:9c:c2:20:83:64:
55:ed:20:6e:76:f0:a3:ff:18:77:1d:6b:2b:77:6a:
9d:c4:b4:16:58:75:13:21:97:88:dd:5a:cc:9d:9e:
19:6b:7a:e3:3d:16:08:ef:6e:1e:d9:29:56:ba:e7:
90:d4:af:a5:95:fa:33:dc:8f:56:8a:30:ec:14:2f:
0a:fe:e4:34:6b:b1:9f:f5:58:30:8f:b7:d5:43:f5:
3c:83:24:c9:d1:72:c5:8f:aa:4c:6e:db:7a:8e:fd:
ac:8e:2d:90:c1:3a:cc:91:d1:df:90:c0:d6:68:56:
39:13:9b:a7:7e:c0:eb:e3:19:bd:eb:0c:00:5e:62:
e1:6d:25:d3:00:20:15:23:c8:25:19:f0:df:42:e7:
9a:b0:21:b5:a5:b1:5e:27:dd:cc:d4:f5:eb:69:6a:
60:76:d0:35:02:6b:ef:cf:ce:20:7a:43:47:8d:0a:
5f:50:63:46:a7:59:e3:49:37:49:fc:8e:98:9e:2f:
f0:8c:6f:dc:4e:5e:6f:73:e0:a7:82:47:8d:6b:a2:
81:7e:aa:a4:4e:16:e9:a2:b1:08:cf:fb:0d:2d:d2:
67:24:08:19:16:ae:e6:a6:7b:6a:85:89:71:59:9d:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:E4:D0:F9:35:A5:58:9B:EF:B5:58:A2:75:E8:1F:78:29:3C:A7
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/24Dk0Pk1pVib77VYonXoH3gpPKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:ab:57:39:ca:c0:af:65:46:24:9c:a0:58:5a:98:12:0e:d0:
56:01:d8:68:6d:c6:f4:c0:0d:99:4f:16:a2:0d:fb:92:c1:14:
95:a3:5d:0f:2a:d7:89:4f:84:c4:14:43:12:40:10:d8:6c:25:
ad:27:53:be:b3:69:c7:e5:28:55:95:8d:b1:ef:56:d3:01:2d:
aa:51:ae:48:61:9f:af:44:3d:b7:4e:03:1d:8d:82:7c:d4:ce:
e8:d9:99:b1:d9:4d:c3:d5:68:1c:8d:49:33:45:20:bd:74:b3:
6b:dd:ab:af:45:a6:32:85:96:8c:b0:a1:11:82:c1:f9:ab:fd:
f3:f9:1a:18:37:36:c0:93:23:11:a8:3b:9e:7a:03:a5:29:ea:
11:4b:61:3a:76:e3:00:67:c9:96:4f:c2:65:5c:fd:1c:6d:4d:
aa:62:ef:28:8d:b3:55:3c:f8:cf:97:a6:86:7d:69:ff:3b:47:
78:b5:bf:cb:46:93:aa:f2:de:13:ae:ea:62:96:ab:86:8a:88:
a0:e4:2a:71:54:5a:dd:00:37:93:22:15:ec:30:29:7a:fc:52:
67:54:77:c7:ee:cd:20:ba:00:cf:92:95:15:4a:a7:9f:39:ad:
64:ca:f4:15:98:21:5d:6f:cc:13:82:a2:2b:e6:d4:b0:5a:c7:
41:03:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:56 2023 by rpki-client on console-ams.rpki-client.org