Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/1avvPUdRfgcyN4RQF0baAS8vnPU.roa
File: 1avvPUdRfgcyN4RQF0baAS8vnPU.roa (raw, json)
Hash identifier: mnG8i9yDPwa9X16N8nAniwnINA9cYTvkkMZz/YXB6Ts=
Subject key identifier: D5:AB:EF:3D:47:51:7E:07:32:37:84:50:17:46:DA:01:2F:2F:9C:F5
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 018B47219A1E4EE34207B92276F4D11234A8
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/1avvPUdRfgcyN4RQF0baAS8vnPU.roa
Signing time: Thu 19 Oct 2023 08:51:06 +0000
ROA not before: Thu 19 Oct 2023 08:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.201.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:21:9a:1e:4e:e3:42:07:b9:22:76:f4:d1:12:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Oct 19 08:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5abef3d47517e07323784501746da012f2f9cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:43:30:e9:bb:35:64:81:96:98:17:b2:5d:
ff:92:f7:bf:da:f3:9d:17:87:aa:29:eb:a2:03:67:
a8:69:08:54:6a:dc:f9:62:f1:9f:48:ae:7b:3e:ae:
1d:05:4b:c9:69:92:79:4f:01:00:66:72:cb:44:db:
8e:86:3f:35:92:c7:1b:44:f9:c8:8e:02:9d:92:34:
7f:f8:a8:8c:8f:b9:a0:b1:38:fa:35:2d:8a:52:5c:
d1:23:b1:94:82:f6:55:4e:aa:5b:e5:57:ed:d1:ca:
64:ab:b2:2e:b4:f9:88:40:1a:ce:c0:a3:e9:95:01:
fa:16:25:b1:7a:88:a4:95:7a:81:01:4c:b8:02:43:
1c:dd:bf:59:31:fe:89:f4:00:05:0d:35:95:21:9c:
14:3d:b6:c5:b1:c8:5b:b9:bc:09:f8:21:7a:67:c6:
c3:34:9e:6f:08:fb:e2:c8:71:72:7c:5d:e0:5c:35:
34:f5:96:a7:2f:2a:14:19:75:8a:01:8d:f6:87:7c:
9c:00:0d:f4:12:4d:44:ad:6c:c1:33:06:75:7f:29:
26:56:e9:b2:1f:6d:88:40:18:fb:5b:0e:df:82:3f:
cd:20:a4:1c:f1:07:20:59:71:27:ea:9f:6e:a3:53:
fc:96:38:ee:0e:51:38:5b:6c:27:3f:4e:7f:61:f6:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:EF:3D:47:51:7E:07:32:37:84:50:17:46:DA:01:2F:2F:9C:F5
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/1avvPUdRfgcyN4RQF0baAS8vnPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:45:a3:98:d1:9e:ac:1e:db:fc:2e:64:c5:be:bd:c3:fb:26:
25:8b:98:dd:07:d6:01:ff:d0:b3:7e:76:31:91:02:7d:ac:54:
f3:a7:23:fd:aa:ca:96:28:af:70:98:37:17:da:10:a0:d3:68:
a2:59:e8:59:61:14:ee:97:d8:4a:c8:6e:7d:44:4f:27:1e:3e:
e2:89:60:c9:f7:fa:a0:6b:ae:a2:4a:e3:b2:da:02:6f:fe:fb:
0d:a4:c8:d6:ea:b4:f0:e6:63:67:61:4f:d0:ac:10:f5:2e:9b:
5b:cb:7c:f4:cf:e0:3d:11:cb:c1:0b:9e:b4:80:32:81:06:8f:
18:1b:86:4c:63:85:1f:c7:dc:e6:04:54:af:16:02:aa:be:55:
99:ee:14:b4:ae:3c:fd:85:0b:16:60:c1:2e:80:c2:6b:bf:d7:
15:e3:b2:71:66:3b:d4:fb:f7:17:e8:a4:c2:78:1c:b9:9a:cf:
6d:fa:ca:9f:af:93:54:cd:52:83:8f:15:4b:d7:f6:6b:a8:fb:
f6:91:8e:06:de:ae:6d:7b:40:40:1b:f6:db:4a:c0:d9:00:b1:
ae:4b:42:e7:d6:9d:f1:33:8b:85:e7:45:bd:ef:32:9a:3d:5a:
e8:01:30:5e:a3:9e:aa:83:58:56:3f:52:f8:54:48:35:94:d8:
3e:49:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:06 2024 by rpki-client on console-fra.rpki-client.org