Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/px42F8E0knngG5nMf4lnMx6ojI8.roa
File: px42F8E0knngG5nMf4lnMx6ojI8.roa (raw, json)
Hash identifier: CLuifpwUXA9zarqII9oRZUz8FgfE5q0pK1sdLsCLR2A=
Subject key identifier: A7:1E:36:17:C1:34:92:79:E0:1B:99:CC:7F:89:67:33:1E:A8:8C:8F
Certificate issuer: /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial: 01856B4A12937B42313FAD8063E45F1BA8CF
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/px42F8E0knngG5nMf4lnMx6ojI8.roa
Signing time: Sun 01 Jan 2023 03:04:54 +0000
ROA not before: Sun 01 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211178
IP address blocks: 193.3.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:12:93:7b:42:31:3f:ad:80:63:e4:5f:1b:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Validity
Not Before: Jan 1 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71e3617c1349279e01b99cc7f8967331ea88c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:c4:4d:f7:03:eb:03:fc:f5:94:6b:6e:78:
37:17:7f:50:c6:ca:16:e4:76:9b:0a:7b:bf:19:3a:
88:02:f5:4a:fd:dc:fc:b7:d5:d7:87:6a:f4:34:a9:
bc:ef:ea:32:45:04:f5:a7:f5:79:34:73:29:bb:31:
72:b7:27:5f:ad:af:5f:ad:13:68:81:9e:f0:37:2d:
6d:5b:8c:4c:bd:be:06:01:4d:66:66:bf:af:c8:fc:
99:49:b1:b7:e3:6a:9b:0c:b1:20:50:d8:36:8f:a0:
39:5b:82:58:6f:5d:38:24:c8:e1:1c:d9:36:57:73:
5b:13:7f:ca:df:e2:00:9f:c3:c1:3e:09:be:e2:95:
92:12:d1:04:af:96:64:cd:a5:7b:04:48:f8:8c:06:
37:89:b8:25:06:18:9e:7c:41:14:e7:eb:47:9e:11:
26:f2:68:06:a1:a5:80:e8:ec:c6:bb:1a:c1:7b:35:
d3:10:47:b1:2c:3b:54:0f:2d:b5:a8:8c:fc:8a:ce:
14:61:33:21:63:22:2c:33:9d:e1:8c:cb:21:24:cb:
a6:74:b4:b7:de:59:37:25:8c:c6:b8:29:1e:f4:97:
f9:dd:35:e2:c1:fb:97:a2:80:26:eb:3c:cd:30:6b:
d9:d7:7b:fa:3e:eb:0c:b8:90:ea:78:80:b5:16:de:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:36:17:C1:34:92:79:E0:1B:99:CC:7F:89:67:33:1E:A8:8C:8F
X509v3 Authority Key Identifier:
keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/px42F8E0knngG5nMf4lnMx6ojI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:2b:6d:4e:5f:ad:9a:87:f0:98:61:33:15:41:52:12:bc:d5:
ab:b4:15:d0:59:9b:57:71:c0:81:c6:8d:42:cc:d9:b4:49:58:
92:fd:ab:50:83:59:d5:ec:ae:77:fd:bc:4c:bc:9a:22:fb:09:
94:4f:ed:c9:b9:b9:eb:1b:6b:17:0d:a4:44:8b:43:d3:9a:01:
fe:d1:ba:94:9e:43:f5:65:b5:0a:c1:b4:aa:53:53:4a:01:70:
e6:2e:f6:6a:aa:45:ec:46:81:d8:b2:ca:33:d4:55:72:93:bc:
3c:db:b9:33:9c:a4:1c:0a:c0:72:b6:a5:07:2e:65:f4:ca:43:
35:db:93:9e:d7:c4:99:0e:8a:42:52:ae:8d:c1:09:87:e2:52:
f3:81:c6:94:61:05:e8:28:74:63:46:bd:59:d7:73:28:78:7a:
1a:bf:91:bf:c0:d9:8c:19:ee:9a:24:b5:10:33:38:bb:fe:e3:
61:45:a2:2f:16:ee:db:74:9a:fc:a8:f3:a2:5b:5d:c1:df:5e:
0e:b2:1e:7a:ed:02:81:24:ba:8f:60:67:fe:e6:14:c6:e4:a3:
71:10:22:29:9f:f8:53:df:71:7d:57:17:bd:01:a3:31:e5:59:
ea:c1:f9:2d:dc:47:3c:24:ab:03:ca:bf:5e:65:42:88:89:a7:
0f:48:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:15 2024 by rpki-client on console-ams.rpki-client.org