Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/C-HU6QZDqjf0pCPLTAqXMGU82eA.roa
File: C-HU6QZDqjf0pCPLTAqXMGU82eA.roa (raw, json)
Hash identifier: o6jdJzVasUcPC3OG2fJxlqxXwpIrrF50OWB3kOItiNM=
Subject key identifier: 0B:E1:D4:E9:06:43:AA:37:F4:A4:23:CB:4C:0A:97:30:65:3C:D9:E0
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 01856D93E96A5D829697206D081C31E2495C
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/C-HU6QZDqjf0pCPLTAqXMGU82eA.roa
Signing time: Sun 01 Jan 2023 13:44:47 +0000
ROA not before: Sun 01 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Feb 2023 12:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:e9:6a:5d:82:96:97:20:6d:08:1c:31:e2:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Jan 1 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be1d4e90643aa37f4a423cb4c0a9730653cd9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:9d:8b:04:13:0e:ad:2f:ef:83:24:69:4d:
63:a3:fd:e1:83:bd:04:37:b9:2b:16:d5:37:76:25:
5f:1c:62:56:03:02:61:97:73:ee:4e:05:76:1d:84:
83:d1:c5:43:40:bd:80:b9:ce:ec:e7:ed:6e:95:e3:
87:7e:ca:a6:24:55:6a:08:de:d9:c3:c1:cf:7f:00:
43:df:7d:77:7a:b5:38:6d:e8:51:e9:d9:62:c6:e5:
d6:0b:25:42:32:2f:23:f4:85:54:42:a2:e4:fb:23:
41:dd:29:98:6d:d6:ea:fc:3b:9d:cc:b2:60:d6:8c:
38:3c:33:85:c8:85:01:5a:d4:0d:75:60:09:4b:ba:
83:2a:b6:69:b9:e3:33:85:f6:e9:ab:d3:be:e4:8e:
fd:33:9c:29:e2:9c:87:ba:31:c9:39:f2:5c:f8:91:
27:16:1a:1c:93:b1:bf:71:c8:87:b3:0b:e5:13:bf:
b5:d7:ee:ab:76:50:29:ec:36:08:b8:14:91:cd:f0:
49:f4:0a:a3:f5:cd:32:9d:e1:dc:fe:85:93:3d:3d:
ac:f3:82:c9:83:f9:40:de:e2:6d:2a:d3:7a:68:e4:
c8:8e:8d:de:e3:8e:93:93:9f:07:07:fc:db:ef:6d:
61:7f:46:b2:01:12:18:6b:4c:a4:39:5b:f3:e6:97:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:D4:E9:06:43:AA:37:F4:A4:23:CB:4C:0A:97:30:65:3C:D9:E0
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/C-HU6QZDqjf0pCPLTAqXMGU82eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:1a:2a:e3:e2:14:97:05:c1:eb:13:c2:11:9e:0f:cc:a6:6d:
c3:21:6f:d3:02:6f:fe:f0:af:06:0a:84:71:f8:e0:46:ab:27:
65:69:61:d7:80:40:e7:f7:ee:81:29:2c:b2:89:38:8d:3b:5f:
c8:02:23:f0:ba:f2:cb:2a:76:72:f8:48:9f:bd:68:73:01:76:
e0:35:1c:e8:99:fc:b0:60:74:bd:fb:2a:71:7c:ba:5c:e7:78:
63:87:44:cc:da:de:67:74:73:25:7e:a9:ae:bd:fc:c3:ef:84:
55:7b:db:ed:57:b1:59:e3:66:40:b1:dc:57:52:78:bc:ed:9e:
d4:02:3b:39:e6:3f:24:ad:04:57:f0:25:18:69:28:b4:ac:e2:
32:cf:9c:53:2f:ba:31:b7:9e:3f:ed:81:1d:9e:ab:6a:3b:e6:
fa:20:7c:59:c2:ff:7b:99:07:d9:00:9a:79:79:ed:77:1e:8d:
70:24:9e:f4:b2:b0:48:ea:3e:ea:a4:c6:94:18:cf:f0:32:6d:
da:6a:e8:87:a9:00:02:4d:03:16:8e:b1:29:cf:40:fe:c1:1d:
6d:ca:17:a2:d6:68:01:0a:bc:19:81:fa:33:bb:b1:76:88:b0:
d0:76:31:f9:85:26:93:b5:f3:a5:59:57:01:b0:6c:7c:a8:20:
b9:6d:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:06 2024 by rpki-client on console-ams.rpki-client.org