Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7OubEc3F-tQFFHHt7DTFL1Tro08.roa
File: 7OubEc3F-tQFFHHt7DTFL1Tro08.roa (raw, json)
Hash identifier: waL9EmbT+iVtJXvNS5aPI7sldbLqGdmmby07tAwPzEw=
Subject key identifier: EC:EB:9B:11:CD:C5:FA:D4:05:14:71:ED:EC:34:C5:2F:54:EB:A3:4F
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0185714C49A091BA42DA9D7C14CA1AD5E097
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7OubEc3F-tQFFHHt7DTFL1Tro08.roa
Signing time: Mon 02 Jan 2023 07:05:02 +0000
ROA not before: Mon 02 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 193.57.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:49:a0:91:ba:42:da:9d:7c:14:ca:1a:d5:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eceb9b11cdc5fad4051471edec34c52f54eba34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:58:aa:1d:d8:d9:e3:bc:8e:37:5e:52:74:
84:d5:d3:f3:7c:54:ed:03:27:7f:bb:6b:cf:da:9c:
24:c4:f2:6b:53:d9:b4:7c:55:ce:bd:f9:2a:06:2b:
43:bc:4a:01:cd:f3:6f:7b:24:d8:8e:7f:97:60:c7:
1c:64:03:72:75:52:5a:b5:8c:7b:96:00:68:50:e3:
a6:37:1d:5e:8e:c3:b6:94:ac:0d:47:81:bb:4d:df:
df:c8:2f:36:04:bc:aa:ab:62:52:e0:1f:85:8d:38:
cf:34:91:c9:e7:19:5c:a2:15:4c:4b:57:de:61:4c:
1f:1b:2e:d2:4e:a4:3e:59:75:26:8f:f5:20:ff:6a:
3e:ce:2a:ef:81:f5:ba:1a:42:6b:44:7a:c1:ac:28:
72:86:cc:d2:eb:16:53:01:e2:5f:59:cb:50:e7:c9:
8c:3e:77:87:f3:73:70:75:ed:06:88:a8:05:c2:7c:
d5:a1:39:c2:b9:ee:4f:6d:57:8b:5b:0e:13:7a:df:
8b:80:93:69:90:ff:7e:dc:c1:06:b8:b3:e6:9f:59:
21:cd:54:91:59:81:f9:da:5a:16:bb:ed:45:07:7b:
93:21:04:a8:71:05:73:53:f4:41:2b:42:fc:a0:fc:
c4:f6:f1:68:50:f1:f8:be:e9:e1:32:ba:a3:62:ec:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:9B:11:CD:C5:FA:D4:05:14:71:ED:EC:34:C5:2F:54:EB:A3:4F
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7OubEc3F-tQFFHHt7DTFL1Tro08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.165.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5d:e7:27:63:c6:93:b4:dc:34:d0:61:36:fe:79:99:1c:e4:
11:a2:e8:b2:c5:cf:c6:39:c1:56:f3:6e:04:f3:83:7b:69:ad:
62:65:f0:7d:36:eb:16:17:78:9c:71:61:0c:01:15:c9:5a:51:
95:8c:2c:7f:c1:93:50:42:92:b9:74:59:1a:c5:9a:e7:2f:2c:
83:a6:3c:ed:e8:09:5e:38:a2:5f:b4:a8:e2:0a:2b:1c:4d:5a:
2d:66:93:74:25:e9:3e:0c:f9:5b:7e:19:13:92:02:ec:76:a4:
6d:fb:fc:0c:12:e6:23:55:38:2b:ab:a4:65:4f:a8:a1:91:2a:
a6:6d:c5:eb:7d:2b:55:1d:07:87:e9:54:11:19:59:fb:46:11:
de:af:43:c2:43:56:12:4b:de:40:dc:02:d3:d4:64:1d:9c:64:
36:49:7e:34:92:9c:92:98:37:6d:90:b7:56:da:37:d7:cd:0a:
24:af:cd:3f:d9:99:2b:5e:24:17:bd:3a:15:bc:59:da:45:a6:
3d:bc:4f:f2:d0:e8:4b:d9:f3:80:c2:1f:b9:ee:4c:c5:ab:45:
da:9b:0f:08:c5:2a:2e:94:3d:67:83:8b:0a:ac:c1:19:fc:f5:
0a:c7:1b:88:85:2f:c9:9c:24:8d:d8:5c:c3:bb:e9:78:4a:a5:
1d:8b:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org