Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/i1cgKsxn0zbfc9kpR1sv4DZ37Bk.roa
File: i1cgKsxn0zbfc9kpR1sv4DZ37Bk.roa (raw, json)
Hash identifier: etoxQY50l+15AH8EyW/CKR1ZlUOFZILNXLzzzkqZkQQ=
Subject key identifier: 8B:57:20:2A:CC:67:D3:36:DF:73:D9:29:47:5B:2F:E0:36:77:EC:19
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DCCB3960103DC39DC3FD9E1896ACB
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/i1cgKsxn0zbfc9kpR1sv4DZ37Bk.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51066
IP address blocks: 193.80.160.0/22 maxlen: 22
193.80.132.0/22 maxlen: 22
193.80.136.0/21 maxlen: 21
193.80.144.0/20 maxlen: 20
193.81.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cc:b3:96:01:03:dc:39:dc:3f:d9:e1:89:6a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b57202acc67d336df73d929475b2fe03677ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:0f:87:2a:51:84:fa:2d:ce:0e:62:e0:be:
d9:ed:8a:cd:7e:e5:b4:11:d5:99:94:c9:e6:e4:bf:
32:b0:80:b5:66:cf:4b:80:85:25:2a:86:fd:10:74:
fc:36:f8:ce:5d:5e:61:54:1b:5e:f9:fb:34:62:62:
fb:c7:48:5e:71:3f:04:1b:66:03:95:bb:20:8f:0b:
2d:e9:b5:64:c2:34:f8:af:62:38:d2:b1:21:88:0b:
45:99:6e:38:f1:4a:97:e0:4f:8f:4f:04:71:97:9a:
ec:fb:13:f5:e5:bc:f6:13:2b:f3:85:5a:33:d0:ff:
ad:b7:5a:5b:89:7c:a3:63:b5:fb:fc:eb:86:7d:eb:
ec:a3:03:eb:c5:d9:65:65:e2:e0:2d:58:c4:d6:33:
ae:4a:dc:ed:08:4e:f7:e5:57:bd:ba:1f:da:5f:32:
10:31:a0:cd:3d:27:83:9f:28:68:a2:d7:56:68:af:
17:c9:6a:f2:b9:3d:11:01:d4:b3:43:0d:15:86:2b:
f3:20:4e:30:10:73:0e:3f:27:86:7f:7c:6e:c1:71:
df:e1:61:dd:e7:05:3b:68:38:7f:3c:78:df:67:f6:
22:d8:0b:28:98:bd:67:a3:6e:a2:52:44:ce:3f:77:
80:eb:2f:7f:84:bd:49:19:24:5f:04:97:43:71:91:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:57:20:2A:CC:67:D3:36:DF:73:D9:29:47:5B:2F:E0:36:77:EC:19
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/i1cgKsxn0zbfc9kpR1sv4DZ37Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.132.0-193.80.163.255
193.81.1.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4e:e6:67:d5:77:81:c5:45:f1:29:32:7c:e9:a0:c9:f3:73:
93:df:11:15:77:48:b9:21:49:71:00:af:86:d0:22:2a:41:f3:
28:0b:7b:53:14:02:c0:b7:32:25:18:c0:b8:70:ae:08:b8:52:
f0:19:85:2a:99:c7:74:29:16:39:70:75:ed:e0:81:df:aa:52:
41:4f:0c:1f:b5:b0:a4:90:e6:98:8f:d0:9c:7a:eb:c5:60:8b:
46:54:0f:2c:e1:4c:58:42:5a:02:a0:db:95:e9:f0:fa:58:ea:
49:b2:ea:a3:12:df:4d:1d:e8:99:9c:75:3e:49:6c:a5:a7:56:
00:e5:c6:6c:b8:86:6a:04:c1:61:c9:2f:a2:7a:80:5c:bd:6a:
fb:38:5c:ea:47:da:d4:d1:7d:d3:9a:13:d9:6e:dd:dd:57:4b:
67:bc:27:2a:59:48:8e:cc:ed:49:f2:e7:37:46:53:a5:05:e4:
dd:15:78:6e:3f:78:a1:46:bd:27:70:0e:18:5c:05:75:97:e2:
60:8c:eb:cc:14:95:de:f0:33:6d:e6:82:6c:97:41:18:2a:49:
11:b9:6d:53:55:34:be:e9:12:a1:13:b3:5c:f4:8e:56:b9:b3:
fd:ee:f6:f3:05:eb:fa:67:54:65:b8:29:a2:a4:c9:22:ad:cb:
58:da:7c:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org