Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/ScBLOsO1kKZb3Zfulfvw2Ret118.roa
File: ScBLOsO1kKZb3Zfulfvw2Ret118.roa (raw, json)
Hash identifier: AJDKoxjNPKzCWlVXIzfJn6bnaSBOPGi9tR3j4Nw4CYQ=
Subject key identifier: 49:C0:4B:3A:C3:B5:90:A6:5B:DD:97:EE:95:FB:F0:D9:17:AD:D7:5F
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 01857082BD86A541B84E3669357878E9C0F7
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/ScBLOsO1kKZb3Zfulfvw2Ret118.roa
Signing time: Mon 02 Jan 2023 03:24:54 +0000
ROA not before: Mon 02 Jan 2023 03:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58231
IP address blocks: 194.33.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:bd:86:a5:41:b8:4e:36:69:35:78:78:e9:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Jan 2 03:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c04b3ac3b590a65bdd97ee95fbf0d917add75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:40:7e:5e:a3:d8:4a:85:62:df:a9:43:09:
bb:b6:de:58:7c:b5:33:cd:b9:bd:0d:10:98:14:99:
ae:00:db:14:5d:0b:f3:43:27:dc:8e:6c:48:04:0f:
d1:9c:8a:dc:bb:b5:d7:f3:e6:e5:9e:4d:98:a0:a8:
e2:77:34:92:d3:5c:cb:c0:e0:0a:cb:16:cd:55:b3:
c2:45:01:62:53:96:e6:28:22:c2:3f:c2:71:fd:fe:
3c:97:e9:fc:c8:92:a1:c6:dd:08:c6:58:b7:e1:f3:
f7:19:25:93:79:e8:e9:50:d4:66:87:61:fe:22:dd:
13:3c:39:5f:b0:d7:ad:82:91:34:80:a2:dc:52:00:
2f:4d:be:aa:d3:61:36:f0:c8:7f:c9:26:b6:35:c5:
d0:a8:ad:1a:cc:be:50:82:38:a8:7c:61:aa:a7:e0:
eb:ed:cb:a9:9e:cd:cf:4a:65:88:2e:05:a9:ef:83:
be:f1:ae:1d:26:e2:62:f9:f5:2d:89:69:de:b3:0d:
4b:4e:64:81:53:25:20:da:76:31:8c:cb:53:7c:b5:
53:b9:f1:f7:81:42:5b:d6:1f:a1:c4:3f:02:dc:81:
ba:ed:57:f0:3e:57:e9:6b:c5:18:73:c4:e1:85:a9:
a9:b9:19:36:a3:fa:15:df:59:6e:f5:52:98:c3:84:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:4B:3A:C3:B5:90:A6:5B:DD:97:EE:95:FB:F0:D9:17:AD:D7:5F
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/ScBLOsO1kKZb3Zfulfvw2Ret118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.92.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f3:f6:4a:73:6d:17:f9:ca:75:eb:01:6c:cb:03:31:4e:96:
6b:1f:e4:f8:13:ca:5b:16:b6:04:a3:6d:dc:b6:4c:38:ab:ea:
e6:a8:ab:d2:bf:44:1b:ff:bb:a6:5f:02:c1:e5:eb:dc:5b:e5:
0d:32:81:0e:ff:dc:8e:31:e8:74:63:33:d4:26:e6:9b:f9:40:
5a:4b:9b:70:4e:9b:30:37:d8:a8:ef:a6:77:d6:5b:a0:78:bd:
a6:4a:da:cc:b9:46:e0:f1:ac:99:99:6e:e3:4a:a2:f9:52:04:
0e:b8:ce:4d:e5:f0:c4:c9:ab:b4:17:c5:93:f9:d3:a3:ed:d4:
03:d6:53:5c:ed:59:bc:84:99:f4:32:ce:10:10:f3:7d:3a:04:
52:f0:2e:c0:d4:c8:09:93:39:74:9c:b8:14:26:13:8c:87:e0:
6f:c7:e5:8a:d0:4b:9c:ef:87:85:ee:61:8b:84:ca:42:63:42:
58:a7:22:ed:9a:9c:05:ad:94:46:92:39:a7:c0:30:ce:56:50:
46:cf:ac:79:7d:d1:bb:9d:0c:b7:af:b3:fa:68:28:42:39:47:
6a:db:fc:b4:31:1d:68:92:f2:1f:c5:18:9b:dd:a0:a6:c9:eb:
56:43:90:4e:63:79:e1:26:2f:35:df:6b:e6:31:cc:3b:96:8a:
85:3a:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:54 2024 by rpki-client on console-ams.rpki-client.org