Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/cXnj_zcit1lUBRLW9qLqhdS32rA.roa
File: cXnj_zcit1lUBRLW9qLqhdS32rA.roa (raw, json)
Hash identifier: o35tIWsoPFhkgCCe/nJZvlTCxUxrLSFjIEgBz4Gc47Q=
Subject key identifier: 71:79:E3:FF:37:22:B7:59:54:05:12:D6:F6:A2:EA:85:D4:B7:DA:B0
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 01856D4ACA3187D3FE91295FCA82BDDDB3EF
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/cXnj_zcit1lUBRLW9qLqhdS32rA.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12350
IP address blocks: 193.41.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:ca:31:87:d3:fe:91:29:5f:ca:82:bd:dd:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7179e3ff3722b759540512d6f6a2ea85d4b7dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:06:18:d6:56:35:a1:94:e5:6d:a9:2e:07:
43:dd:8f:84:ee:f2:56:68:cb:fe:66:e4:43:b2:4d:
de:2c:20:94:94:31:07:da:95:b7:f0:b8:dc:d2:f8:
4c:57:ef:8c:8f:72:7f:06:70:48:76:45:63:77:3f:
0a:0e:69:85:5f:fc:bf:c7:fe:d4:d9:56:58:b5:4f:
a9:f5:cd:42:4b:2e:db:1c:99:f1:62:c1:f7:91:8c:
49:7d:6c:9b:cb:62:a1:66:61:23:eb:19:59:b2:f5:
88:67:c4:33:05:69:60:d9:ac:b1:db:a2:9c:44:80:
e2:94:ed:a0:a1:ff:db:d9:20:b8:b4:c0:64:fa:fc:
80:83:b6:9d:aa:94:42:25:f8:46:1c:a7:f6:50:6c:
54:30:da:ca:2b:e4:ca:92:2e:cb:d3:31:bf:d6:de:
48:88:b1:19:49:52:f4:e0:00:63:82:51:f5:3c:a4:
12:b2:7d:1f:c6:e4:59:11:82:5a:3e:17:9e:22:3f:
44:cd:bd:d9:3c:75:24:e5:de:bc:e2:68:86:00:89:
71:4b:98:45:8b:cb:ab:2e:75:9d:55:20:43:5e:b9:
21:7b:e0:d8:78:68:ed:42:87:63:05:45:eb:aa:90:
94:7f:47:17:dc:2d:48:11:34:b2:b5:64:57:5e:61:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:E3:FF:37:22:B7:59:54:05:12:D6:F6:A2:EA:85:D4:B7:DA:B0
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/cXnj_zcit1lUBRLW9qLqhdS32rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:b0:6d:b6:69:f7:f6:a1:fb:83:22:5c:60:5a:f5:94:c0:
17:57:ab:b4:27:d8:78:97:6a:59:0e:3c:9a:a4:9b:b0:58:62:
97:de:66:dd:c0:dc:aa:76:e4:05:23:4b:22:1d:03:2c:36:6b:
84:3f:bc:8e:30:0c:b9:14:8a:47:2b:05:4f:f7:d5:8d:db:4c:
cc:50:45:6b:4f:6d:b6:25:47:da:f9:a8:4f:2d:09:5e:80:9b:
4d:58:17:f8:d5:f6:ed:80:1d:78:df:2b:55:fb:b5:78:32:fb:
ff:8d:cc:51:1b:0f:8c:0f:a1:88:a2:5f:e4:97:5d:c6:82:f0:
ca:99:c7:d5:a9:70:1e:c0:4d:09:f3:35:35:89:9b:a3:ff:ed:
8d:98:81:5e:17:54:82:9c:3b:f4:ae:be:4f:25:f5:f0:31:04:
af:5b:aa:3a:56:c2:9e:59:78:9f:24:ac:3b:37:4a:87:ac:53:
fd:2e:08:87:2c:9a:8b:67:4f:3a:25:8e:44:9b:50:9b:d8:91:
11:1e:57:d5:d0:4a:bb:d2:7d:8f:2c:7a:c3:de:50:e7:8f:5d:
1b:22:3c:3a:47:f1:25:ee:b0:27:f1:4e:9f:fa:94:72:98:04:
97:bf:ea:1a:c4:df:e8:d6:2a:e2:19:06:19:35:c4:26:a8:1c:
94:6a:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:52 2024 by rpki-client on console-ams.rpki-client.org