Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pov04Xaq1BTfCbcI5Ejzhyqwryk.roa
File: pov04Xaq1BTfCbcI5Ejzhyqwryk.roa (raw, json)
Hash identifier: cA1P2k9c7oWc0CTLHrx9UFs3L/G8TggziSh0q3WFOz0=
Subject key identifier: A6:8B:F4:E1:76:AA:D4:14:DF:09:B7:08:E4:48:F3:87:2A:B0:AF:29
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 018572C36621490C4505AFBC22B46352C151
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pov04Xaq1BTfCbcI5Ejzhyqwryk.roa
Signing time: Mon 02 Jan 2023 13:54:46 +0000
ROA not before: Mon 02 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59447
IP address blocks: 193.9.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 22:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:66:21:49:0c:45:05:af:bc:22:b4:63:52:c1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 2 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68bf4e176aad414df09b708e448f3872ab0af29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:b4:a3:44:99:ec:27:c6:6e:ae:a5:ed:ae:
03:31:bc:ca:68:b1:64:14:d3:af:02:f0:56:a4:59:
5c:27:48:1c:a1:13:43:3c:a7:91:dc:92:ec:1b:35:
ea:c4:40:19:d3:72:5e:c5:d9:ed:62:46:fb:58:47:
83:7d:8a:31:91:64:d9:41:27:a6:57:80:13:fe:99:
46:cb:45:45:ab:9f:30:56:49:30:4d:fb:90:c9:42:
c6:63:31:61:b8:2c:6f:fa:11:0d:5a:be:e3:6c:b2:
a0:01:05:e9:be:c0:9b:02:7c:cb:a7:28:f2:9b:ae:
cf:f0:bd:66:da:9c:58:69:de:44:3b:ac:e0:e2:f4:
e8:06:f3:5b:98:ff:47:24:c4:b8:1d:88:a3:8c:c6:
6c:b0:18:3e:86:04:32:14:50:d7:4d:3e:6c:68:ab:
03:46:0c:14:6e:ee:3b:19:14:6e:8b:01:d9:cc:02:
43:3a:6b:20:64:77:f0:44:3d:7b:6d:82:dd:18:43:
57:e2:0c:66:99:b9:f7:ca:17:37:3d:d3:bb:b9:bb:
ab:54:1e:c8:78:e4:2b:7d:ab:79:97:99:11:f4:25:
d5:92:45:7d:cd:c1:96:19:c9:1a:31:aa:13:f7:2e:
cc:78:26:2a:76:ce:77:12:6f:66:c1:aa:75:93:9b:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:F4:E1:76:AA:D4:14:DF:09:B7:08:E4:48:F3:87:2A:B0:AF:29
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/pov04Xaq1BTfCbcI5Ejzhyqwryk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.51.0/24
Signature Algorithm: sha256WithRSAEncryption
01:63:15:ca:65:c0:fd:35:a5:05:39:d6:8a:6d:d2:fe:dd:e8:
71:21:25:8d:06:8f:3a:26:f2:7d:81:08:16:2d:bc:27:fa:e0:
c3:3e:c1:60:44:73:3c:c2:09:16:6d:f2:15:28:5d:fb:e1:34:
f1:cc:80:f0:38:bc:84:11:97:00:4c:96:ca:27:ae:c4:69:ed:
fe:c1:64:fe:ed:7a:49:a1:9a:88:0f:3c:ae:1b:e8:fd:28:57:
5c:d8:22:5c:b7:62:5b:02:49:6e:47:12:3b:cf:a5:ce:56:52:
0c:7a:28:16:a5:20:a9:01:67:9f:2c:13:b1:62:9d:ad:1a:c5:
63:99:a8:60:10:fa:d0:b8:81:07:03:d4:84:3b:30:87:76:7a:
d5:57:30:9a:3d:e9:02:6b:61:e6:83:d6:03:4d:83:ba:6c:7a:
43:3d:7b:05:eb:47:b7:3f:3c:ce:f1:ca:67:fd:09:f6:ce:ae:
18:b0:e1:10:9d:e7:66:6a:ca:32:8f:6f:81:f0:f2:27:b1:84:
91:62:b8:70:2c:25:12:78:44:99:de:3b:18:d8:1b:10:08:dd:
bd:f8:19:04:01:ce:68:b9:f1:f2:e2:83:7d:f3:b0:5c:64:33:
0d:35:3c:37:c5:b5:61:24:18:95:06:d4:e2:f8:da:81:29:99:
e1:0b:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:49 2024 by rpki-client on console-ams.rpki-client.org