Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/k6fTmbLzA4kxHqK1vT3HCW03Ghk.roa
File: k6fTmbLzA4kxHqK1vT3HCW03Ghk.roa (raw, json)
Hash identifier: tjkR6MkF6ETu9+YzUagXU/cMmHJ+J62X6/ljOQGnIbE=
Subject key identifier: 93:A7:D3:99:B2:F3:03:89:31:1E:A2:B5:BD:3D:C7:09:6D:37:1A:19
Certificate issuer: /CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Certificate serial: 01860D018F6BD66F1E32CD649A0D002509AF
Authority key identifier: 30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/k6fTmbLzA4kxHqK1vT3HCW03Ghk.roa
Signing time: Wed 01 Feb 2023 12:44:11 +0000
ROA not before: Wed 01 Feb 2023 12:44:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
195.74.40.0/22 maxlen: 22
2a13:6140::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 06 Aug 2023 11:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:01:8f:6b:d6:6f:1e:32:cd:64:9a:0d:00:25:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30460d73b5bbcbb5eee97a4a39eeb55572d35a80
Validity
Not Before: Feb 1 12:44:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a7d399b2f30389311ea2b5bd3dc7096d371a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:fa:00:28:51:28:8a:59:54:a5:dd:79:d0:
3b:e6:b0:9d:58:e8:1c:20:1b:e0:25:62:d4:58:a9:
02:b5:fa:7a:ec:fb:36:9a:4e:6f:1c:0c:d9:45:92:
5f:72:94:8d:f4:63:6a:83:4a:75:43:69:ad:3a:40:
7a:33:44:7c:7b:03:06:8f:0e:e3:17:fb:65:a0:f2:
22:b6:bc:a6:05:f8:52:3f:8e:88:38:80:72:df:63:
9b:81:88:b9:37:a8:e8:ac:5f:3d:29:2f:55:f1:28:
63:9c:f1:40:09:64:b1:01:d2:a4:97:a8:71:ee:ca:
93:65:3e:0e:62:60:bc:80:f0:75:2c:c5:cb:40:16:
9b:5a:a8:6a:8b:9b:e5:86:82:61:9a:39:07:31:b3:
cc:61:1b:93:7b:8f:df:e1:95:d6:4a:79:63:f9:04:
cf:00:81:51:92:a4:51:63:3b:6f:9d:06:84:51:b1:
fd:3d:11:44:49:e9:0f:06:af:7c:ad:09:ec:54:30:
1b:42:04:f2:cb:9c:8f:ca:ed:2c:46:5d:cb:42:80:
1a:6b:77:27:91:e8:b4:94:73:db:bd:55:1d:8c:b6:
e6:47:9f:fa:40:ac:0d:c3:da:9e:28:a8:0c:9b:2a:
4d:16:98:bc:6a:1a:37:68:86:48:f5:26:1b:02:c2:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:D3:99:B2:F3:03:89:31:1E:A2:B5:BD:3D:C7:09:6D:37:1A:19
X509v3 Authority Key Identifier:
keyid:30:46:0D:73:B5:BB:CB:B5:EE:E9:7A:4A:39:EE:B5:55:72:D3:5A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEYNc7W7y7Xu6XpKOe61VXLTWoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/k6fTmbLzA4kxHqK1vT3HCW03Ghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7ebdee-a600-4776-8f02-fea92cbe2d2c/1/MEYNc7W7y7Xu6XpKOe61VXLTWoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
195.74.40.0/22
IPv6:
2a13:6140::/29
Signature Algorithm: sha256WithRSAEncryption
57:07:fe:ce:36:19:d0:d4:e0:56:1a:eb:09:91:75:7f:ce:26:
f9:d4:73:c7:c8:f7:63:99:da:69:b5:37:72:1b:70:f6:28:26:
64:a8:36:1f:a9:c6:66:de:81:61:aa:71:41:27:f4:c3:4d:2f:
45:e9:59:39:ff:40:8b:ca:6e:65:d7:77:70:ce:07:f0:de:93:
03:12:7b:0f:e7:0a:8d:19:23:ef:96:33:36:4f:66:7a:d1:fd:
5f:d0:33:be:dc:2f:06:c2:f1:f4:64:1a:03:ab:fe:78:99:76:
e7:c4:2a:67:43:1a:c6:7c:b6:ac:cc:7c:a1:b9:d8:93:24:e0:
c2:f6:82:15:d9:60:de:17:d8:fb:8a:51:77:07:01:0c:ac:08:
7f:c5:65:bc:68:d5:5f:cd:9d:99:49:39:7b:4a:25:da:70:e2:
7c:33:27:ef:25:4d:86:53:60:05:a9:9d:99:45:8e:ec:1c:60:
c2:1b:dd:b5:e9:fb:28:38:53:30:32:06:48:d5:46:ba:be:9b:
fa:df:cf:c2:bc:22:b5:88:60:f6:bd:97:3d:7d:d3:b3:41:ca:
cd:5a:7c:de:50:67:91:f2:eb:b3:0c:4a:e8:de:c8:d8:a3:b5:
24:4b:98:02:a8:78:9d:27:11:f9:14:3c:95:86:9b:e7:2a:ff:
e8:38:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:06 2024 by rpki-client on console-ams.rpki-client.org