Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/9rXUiDAGboyfIoA9vVRVOOiENLg.roa
File: 9rXUiDAGboyfIoA9vVRVOOiENLg.roa (raw, json)
Hash identifier: 7JAy0kpsu5XnwGAXWZzoc2YHS9jjAsIaMgh70wmaNLQ=
Subject key identifier: F6:B5:D4:88:30:06:6E:8C:9F:22:80:3D:BD:54:55:38:E8:84:34:B8
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 01856ED4BC8FA8D34AE0B17E0BBCB271ACEC
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/9rXUiDAGboyfIoA9vVRVOOiENLg.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.227.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bc:8f:a8:d3:4a:e0:b1:7e:0b:bc:b2:71:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b5d48830066e8c9f22803dbd545538e88434b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:ef:2a:37:9b:d1:b7:2e:bf:4d:a8:ca:f1:
87:c1:e7:bb:9f:6a:e7:bc:2a:07:5f:31:88:12:fd:
e0:0f:a9:8f:0b:a8:b7:49:07:dc:98:fd:43:20:4c:
25:7b:61:53:3b:f5:63:ef:6b:02:48:b5:b9:9a:a0:
7e:4f:09:cb:cb:ab:cf:f7:26:38:34:71:fc:55:18:
56:13:53:10:dc:02:ee:8c:7f:e4:bc:24:56:03:68:
19:c4:33:93:de:56:a8:51:9d:ad:20:98:fe:ec:25:
1c:3c:d5:eb:21:fe:66:81:91:df:cc:4b:38:64:1b:
de:78:7a:e4:5e:25:eb:2c:1d:f3:25:60:6e:b4:0b:
f0:4e:fd:63:69:0f:4b:88:84:0a:17:08:55:2e:7c:
dc:7a:f7:c6:b9:27:dc:87:1f:39:d5:1b:33:50:b2:
fb:58:6e:48:f3:bb:44:50:18:bf:c5:25:4c:42:c8:
fd:8a:c3:2d:20:c3:cc:e9:c7:2b:c5:08:34:11:b7:
34:21:eb:ce:a4:d0:e2:45:e3:f3:79:1e:28:fb:31:
a0:eb:ca:59:d0:ba:64:1c:5b:7b:b8:1c:1f:ef:37:
01:10:14:a9:a5:db:9d:0c:5b:a0:77:18:fc:d1:16:
80:d9:be:f6:84:44:70:51:a3:f8:0f:bb:58:e7:d4:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:D4:88:30:06:6E:8C:9F:22:80:3D:BD:54:55:38:E8:84:34:B8
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/9rXUiDAGboyfIoA9vVRVOOiENLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7e:76:77:f8:12:01:49:27:ca:e3:86:33:1d:4f:7f:ad:8b:
c2:00:e6:3a:99:1c:54:ae:a7:e7:bb:f4:a1:37:83:12:02:a1:
74:77:1c:45:40:d8:29:5d:e3:84:51:5e:7c:ce:2c:b3:18:84:
fb:68:31:5d:f0:ca:fb:f5:db:80:13:94:a0:3b:1d:b4:ef:32:
20:05:db:d0:dd:43:33:b6:86:fe:6f:29:70:01:f3:d8:61:0f:
5e:59:7e:f0:cd:af:35:52:4c:a2:80:4c:30:ae:36:1c:b6:fd:
0d:22:66:77:30:00:76:11:da:7f:58:5c:c4:f2:61:05:62:da:
29:3a:42:05:fb:5e:29:0e:c2:d0:eb:63:39:99:a7:81:57:91:
44:9d:0d:69:5a:8a:9b:24:99:f7:5a:fa:87:1d:6f:15:77:c4:
6f:f2:56:90:22:e1:29:94:f5:91:85:0a:d8:72:20:6f:3f:bf:
b0:f9:35:41:2e:1d:13:a3:ac:23:c0:6e:11:db:11:dd:c8:8c:
cb:52:90:77:a9:85:ee:b4:37:57:a9:32:0a:60:42:05:5e:1a:
ba:4a:c3:cf:50:33:38:9b:4b:c7:71:9a:ff:a1:7d:d6:85:df:
cf:f2:19:58:31:25:d9:3d:51:d3:a6:9b:d6:f1:32:d7:cb:dc:
32:2b:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org