Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9RDL47UvMokJmJtlQbeG4CvggfA.roa
File: 9RDL47UvMokJmJtlQbeG4CvggfA.roa (raw, json)
Hash identifier: 39QNTyCYfaHpp4pgtayV1shRwQmfvXx/E/WtNJfY4dI=
Subject key identifier: F5:10:CB:E3:B5:2F:32:89:09:98:9B:65:41:B7:86:E0:2B:E0:81:F0
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01867EB9231D05E8A217D88E97690130BFB8
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9RDL47UvMokJmJtlQbeG4CvggfA.roa
Signing time: Thu 23 Feb 2023 14:41:47 +0000
ROA not before: Thu 23 Feb 2023 14:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.200.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 14:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:b9:23:1d:05:e8:a2:17:d8:8e:97:69:01:30:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 23 14:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f510cbe3b52f328909989b6541b786e02be081f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:59:a9:3d:29:69:11:bd:a4:be:0e:9d:52:
f6:a8:1b:8f:59:45:75:00:00:35:5c:f7:62:72:fb:
81:70:f6:26:19:f7:1e:a6:3d:d5:88:46:e1:9c:3b:
34:cb:60:66:94:a3:6b:93:74:24:a6:c9:08:48:bb:
03:e5:05:5c:fe:f8:b1:9f:d1:33:56:11:25:46:72:
e1:eb:ae:14:0c:7f:1a:d7:cb:d4:bf:00:f4:a8:c5:
22:f1:16:73:cb:44:53:4f:d1:94:7f:07:95:6f:cc:
da:03:6a:6a:a6:44:68:8c:86:0e:cc:29:41:42:42:
4b:88:69:6d:34:91:6c:12:a0:24:99:85:08:df:a4:
2d:45:09:fe:77:f7:06:56:2e:95:b2:5f:45:5c:9f:
d5:cf:a7:ab:65:47:bb:76:ea:79:33:11:f8:64:96:
8f:76:a5:bf:49:ba:75:81:0c:1e:5e:f8:9f:f9:a0:
3b:da:49:14:59:bb:da:44:af:df:da:55:96:06:d6:
ea:c3:fc:ca:5b:52:00:5b:58:89:8d:5e:cc:96:84:
9e:93:f4:41:6e:9b:70:4c:e7:2a:e0:5e:6d:02:0d:
e1:b4:0a:2b:0f:3d:75:eb:62:37:b7:98:7c:8a:72:
4a:55:a7:00:cc:51:a7:2c:f4:82:1d:08:aa:73:74:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:CB:E3:B5:2F:32:89:09:98:9B:65:41:B7:86:E0:2B:E0:81:F0
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9RDL47UvMokJmJtlQbeG4CvggfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.12.0/23
Signature Algorithm: sha256WithRSAEncryption
73:37:8a:e6:fb:78:2c:ef:30:0b:f8:5b:c4:75:05:5e:58:1a:
c1:48:a4:f6:11:00:fe:2a:c5:0a:04:e5:6e:6c:6f:a4:d4:73:
82:c3:16:75:f0:18:94:52:e1:e5:51:a2:f1:c5:00:15:ef:b0:
52:0b:7f:18:51:aa:dd:b6:7f:dc:17:72:b8:e5:57:24:ef:3b:
29:de:35:36:59:70:9d:52:b3:7f:83:01:1d:ef:1f:c2:28:a6:
6c:0b:e0:2e:10:49:63:a3:7f:2d:94:d6:c2:6f:6e:3f:67:28:
2e:d3:d1:d8:1c:07:70:35:9d:83:1a:9f:79:1e:47:4f:5c:2e:
45:09:0a:58:05:f9:a2:a2:31:c5:ad:0f:68:72:31:76:9d:fd:
00:55:4a:70:c5:2d:5f:b7:30:59:c7:13:7b:b9:b8:4a:07:bf:
24:ac:74:45:b7:15:de:9b:bc:88:c7:17:51:dc:70:58:31:db:
79:b1:f0:90:ff:16:7c:6f:b3:45:0c:f2:70:42:0a:14:a2:a0:
21:f8:0d:fe:c5:17:3e:60:0d:8f:ce:f0:9c:54:af:4a:82:3a:
6f:56:a0:22:d1:82:74:ce:f5:48:a8:73:63:fb:f0:33:30:b8:
06:96:02:7f:1a:74:0c:3b:f9:31:52:f6:ae:79:7e:af:9b:e1:
a5:ca:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org