Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/RIJ1IuJ8RWA5ONfVu8moMpQm0nk.roa
File: RIJ1IuJ8RWA5ONfVu8moMpQm0nk.roa (raw, json)
Hash identifier: fYyeVB+y3MaBiQtyKGIf4bzN9d20jv/O8h0zo9gzJGU=
Subject key identifier: 44:82:75:22:E2:7C:45:60:39:38:D7:D5:BB:C9:A8:32:94:26:D2:79
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 018572712F2517FB4FA5E4399C1DAF5195BC
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/RIJ1IuJ8RWA5ONfVu8moMpQm0nk.roa
Signing time: Mon 02 Jan 2023 12:24:58 +0000
ROA not before: Mon 02 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56411
IP address blocks: 193.46.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:2f:25:17:fb:4f:a5:e4:39:9c:1d:af:51:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jan 2 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44827522e27c45603938d7d5bbc9a8329426d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:fb:04:77:d1:cb:32:37:11:e4:9a:14:2a:
b1:ea:80:28:8d:8f:f9:74:14:b0:a0:9b:d4:31:66:
41:9f:bf:5d:1b:f8:03:60:4c:e4:a0:10:e3:98:89:
71:eb:24:af:7d:3f:ba:6c:c3:3c:bd:35:ed:9e:b8:
41:87:33:b0:5d:60:89:21:1e:e3:51:5a:9f:b7:41:
b7:00:c9:7e:66:5f:54:47:0f:31:3e:32:10:d4:72:
e2:f1:94:75:9b:44:fb:2d:96:31:f8:4b:f5:c2:4c:
9f:b5:94:8d:35:14:1e:43:48:51:c4:0f:98:c6:c1:
1b:e1:e4:a9:33:46:3c:f7:c4:7a:6b:27:6e:e3:65:
5a:e8:c3:7e:2b:ed:58:61:c9:e3:fc:07:d6:46:f9:
00:a7:6a:58:d9:50:93:ee:a5:dc:fb:1b:39:88:0a:
2a:cc:b4:47:c2:25:54:3b:70:b9:0a:45:a9:4a:e9:
52:20:92:66:1d:d2:14:c0:e4:43:4d:d3:1a:21:11:
1b:38:0e:c7:f7:0c:18:37:f4:51:d8:2a:d6:23:c7:
4c:64:2a:e9:f4:91:12:39:74:a5:ba:80:ea:0c:2b:
bc:ff:8c:b6:20:ec:66:46:69:b0:68:c2:79:5e:15:
9e:da:99:a8:b5:e7:d4:81:4e:cc:04:25:83:d1:48:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:75:22:E2:7C:45:60:39:38:D7:D5:BB:C9:A8:32:94:26:D2:79
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/RIJ1IuJ8RWA5ONfVu8moMpQm0nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.62.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d6:72:bb:25:5f:6d:91:40:4f:56:65:86:44:b2:9c:ce:4b:
2b:17:15:52:38:d4:9a:ea:eb:ea:a5:17:09:e9:ee:d6:f0:2a:
46:67:de:ed:cf:3b:c9:95:72:a8:93:23:1a:07:11:2c:e9:d5:
b3:c1:6b:e7:bc:e6:4d:6b:4f:43:c3:cf:ce:9a:71:16:60:a1:
15:b0:92:44:e3:27:88:cd:eb:24:d3:dd:a7:e1:a0:20:86:49:
46:78:a8:16:ea:ae:9d:46:7d:9b:52:91:6c:10:85:99:a5:5f:
70:71:64:6e:53:e5:69:bf:38:ac:45:a0:81:9d:63:87:18:43:
9f:58:79:a2:10:71:1f:72:4e:c9:22:14:ef:53:a0:d2:28:c5:
e7:c0:13:48:b2:4a:7b:37:54:a8:3d:2f:60:c3:ce:5b:a8:0f:
71:22:ca:c1:a4:2b:5b:22:df:73:fc:c8:93:e2:49:ae:9e:78:
63:ef:b2:aa:2b:9f:f3:22:31:cf:e2:27:d4:df:6b:e6:b1:90:
c6:c8:2d:3f:6c:6c:58:63:08:33:dd:7f:5a:f6:35:e5:8c:09:
14:4b:a8:8c:10:7a:02:2d:93:d0:aa:70:4c:76:3a:c1:54:02:
0e:83:74:c1:f8:8c:7a:5f:53:4c:47:83:d0:56:62:ad:57:6b:
c1:1b:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:13 2024 by rpki-client on console-ams.rpki-client.org