Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/h8dWqMHYibxoqs_GLpdVqUEg03U.roa
File: h8dWqMHYibxoqs_GLpdVqUEg03U.roa (raw, json)
Hash identifier: wd9JUzGzTq2U85sDgWuL3VUKee+NhuKOUP5/qRr+COw=
Subject key identifier: 87:C7:56:A8:C1:D8:89:BC:68:AA:CF:C6:2E:97:55:A9:41:20:D3:75
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 01856D9D0B751BC0B86B5CE0E00DD9A44622
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/h8dWqMHYibxoqs_GLpdVqUEg03U.roa
Signing time: Sun 01 Jan 2023 13:54:46 +0000
ROA not before: Sun 01 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31631
IP address blocks: 193.32.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0b:75:1b:c0:b8:6b:5c:e0:e0:0d:d9:a4:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Jan 1 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c756a8c1d889bc68aacfc62e9755a94120d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:e8:15:28:9e:24:c3:7d:9c:49:76:2f:fa:
47:fb:54:49:3b:0a:cb:90:6c:e0:db:98:96:67:44:
b8:b1:56:7b:d5:49:64:bc:53:cd:92:9c:4f:bb:31:
54:d2:ad:b9:95:e2:d4:fc:cd:dd:65:ca:fd:90:5f:
73:d6:3c:48:7a:9d:64:2a:2e:a8:c4:11:d1:37:7b:
44:c1:a0:37:3d:f0:c9:ae:d5:3d:0e:b8:d8:e5:37:
3a:23:69:08:91:cd:e6:f6:9b:a6:09:f3:d5:d9:d6:
66:af:f2:ce:39:f1:2b:4d:36:9c:ec:0b:d5:a9:a4:
72:a9:ef:78:a3:f5:9f:22:ca:21:e8:94:e0:e4:b1:
17:24:54:e6:9d:3a:ca:6d:48:ba:a6:f1:e4:74:ff:
1b:8e:55:e2:0e:64:1c:ff:e3:69:8a:6d:5f:c2:c7:
cb:5e:f4:58:a8:d3:e5:a7:f0:32:97:d5:39:5f:43:
12:db:af:99:3b:1b:4e:15:d0:05:92:ea:4c:d1:d3:
ea:83:b5:7e:eb:5c:3b:0f:57:f9:df:0d:c0:4a:6a:
e9:9b:ee:0d:86:b4:09:b3:35:3a:29:35:af:00:05:
8b:19:7f:8f:ae:93:7f:db:63:6f:a0:d9:1a:8e:99:
ba:59:1e:90:ad:a6:ac:0a:6d:27:0e:89:4f:1e:46:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C7:56:A8:C1:D8:89:BC:68:AA:CF:C6:2E:97:55:A9:41:20:D3:75
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/h8dWqMHYibxoqs_GLpdVqUEg03U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7f:08:88:b0:2b:87:14:37:26:ce:18:37:d2:9c:4e:22:34:
cf:a4:b8:8e:38:2e:a1:7f:a7:75:46:d7:b3:ce:11:2a:bd:9e:
f9:c8:c6:cf:68:f6:01:d0:14:72:1e:7f:01:c0:7a:4c:c8:93:
a3:46:c4:6a:d3:3b:99:4f:b2:52:c7:f3:39:3c:84:7f:7b:59:
57:de:73:01:44:38:9b:16:6f:a2:38:7b:d7:44:0d:ce:50:68:
33:f3:4f:5c:ab:48:82:82:e6:90:ec:82:38:dd:f5:bc:ec:3a:
38:27:92:0f:ce:88:0a:01:95:2f:59:d5:6b:2f:6b:75:61:97:
68:fe:44:a4:dd:2f:8e:e5:66:43:43:a6:0c:ea:c3:e2:a3:59:
f9:d5:a7:ac:73:ef:a7:15:47:4b:fa:39:33:58:f9:77:2f:89:
75:6b:1b:08:ba:aa:95:53:8f:4c:f0:df:97:3c:83:a7:72:14:
9d:9d:f6:03:93:f0:f0:f3:a6:a8:9f:db:83:2f:85:53:39:7d:
82:0b:e8:9e:a0:e6:7b:c0:49:5a:2a:f4:d1:d8:87:68:48:07:
63:5e:e1:70:cb:32:13:a7:0d:37:b7:5d:5f:f0:e9:f3:bb:95:
d2:fc:d9:ff:2a:02:4b:bf:5c:be:4e:1d:16:85:5c:e5:6d:43:
f4:06:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org